Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: ReSWrqFrTIuzEmeGaIKpuRf1zYhoK2YK43rn0a2ppLk=
Subject key identifier: 99:42:89:74:29:B5:9F:8B:6A:DC:33:44:C1:74:95:18:D6:4A:29:41
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 01975EDD66598586CBD42C6CE73B469D9850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 0336
Signing time: Wed 11 Jun 2025 12:00:57 +0000
Manifest this update: Wed 11 Jun 2025 12:00:57 +0000
Manifest next update: Thu 12 Jun 2025 12:00:57 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: NZ2fNuIPxCshbwAg22QW4Ihnnlf6WCHn5WJR1Yc8dlU=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:66:59:85:86:cb:d4:2c:6c:e7:3b:46:9d:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Jun 11 12:00:57 2025 GMT
Not After : Jun 12 12:00:57 2025 GMT
Subject: CN=9942897429b59f8b6adc3344c1749518d64a2941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:d7:36:e9:77:ff:16:73:7d:b5:94:b5:93:
48:7e:5c:69:68:11:e8:57:16:29:af:e3:5e:6d:e3:
24:23:c9:58:cc:c6:f4:62:ea:06:94:5c:89:b1:95:
34:36:42:a8:8a:7c:0a:d1:60:f0:09:42:1f:00:49:
15:50:14:a6:7d:d5:96:a6:79:e6:57:d2:2b:df:86:
f4:df:a4:90:c8:30:91:3e:e4:59:99:de:15:0c:2c:
71:df:a1:b1:7c:1c:dc:2f:81:9d:d6:90:d5:27:6e:
2d:a7:22:f6:8c:36:9f:5d:f1:32:17:cc:5f:c8:33:
20:b9:db:52:dc:61:d1:cb:c9:25:03:da:dd:8b:a7:
7c:37:61:dd:fc:d0:1a:03:e6:2a:20:f0:f3:41:d7:
dd:ef:81:fb:7e:38:68:59:75:01:2f:67:28:88:42:
f8:3e:ff:ed:05:d3:59:c3:e7:8b:eb:de:6b:de:2e:
ed:ae:cd:13:c4:82:9a:23:e6:f3:22:d1:60:cd:06:
d6:ba:d8:cd:ea:f8:f2:5a:89:3a:3d:34:9f:92:72:
f3:94:77:92:f3:49:0c:87:7b:5e:ef:33:0c:f3:cb:
6c:a1:7f:7e:fb:9a:6b:69:7c:a3:4e:9b:cc:db:01:
3f:a1:9e:09:a1:81:b5:56:00:9c:ed:c4:7f:db:c0:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:42:89:74:29:B5:9F:8B:6A:DC:33:44:C1:74:95:18:D6:4A:29:41
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:7d:4c:dd:16:5b:4b:79:9f:fa:4f:a8:6e:f8:91:af:98:
bf:ea:d2:fd:15:86:f3:69:fd:c4:63:79:6b:68:e5:b8:8a:17:
91:1e:aa:b9:8d:32:be:c0:47:dc:65:e1:b4:90:6c:3c:c5:9d:
1a:d5:63:83:7b:06:2f:90:65:c9:66:90:a5:56:91:ad:f1:21:
ba:a1:d3:5c:af:18:04:1d:12:c9:cc:7e:2c:41:ac:88:0d:e8:
09:24:b7:3f:e8:db:cc:a6:e8:4b:00:f6:95:9e:7f:51:90:89:
5d:32:69:db:0f:ea:1f:8d:32:07:c1:5c:5f:6e:30:f5:67:50:
48:2e:c3:91:5b:fe:d7:64:8b:68:24:5a:51:9f:f0:68:3c:42:
99:41:da:9e:e5:ec:57:1e:ec:d4:28:81:89:af:d4:4e:fa:24:
7a:a3:b3:24:16:59:43:80:5a:a9:ab:b8:bc:c8:be:a1:80:8a:
5c:53:39:ce:ef:e7:e8:99:ac:09:89:16:ba:b9:57:90:81:f0:
86:6f:d9:c8:73:22:0c:34:a4:d4:ec:dc:9a:2d:cf:23:46:d0:
c1:78:76:b4:5b:3c:8f:ef:04:5f:9b:ee:ab:f9:76:4d:ae:41:
13:61:a6:97:b5:a4:5b:bb:da:ac:1f:ca:4f:27:8e:53:0b:21:
93:46:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:23:55 2025 by rpki-client