Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: I/KLcXkq9n+yV4TSODPZTWcdvo11sZQVudhkv7hkD8U=
Subject key identifier: 82:CD:62:C3:43:C4:35:50:5E:3F:D7:AA:DA:5E:D6:A7:50:62:DE:45
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 019922C335C17033D1EA7CCED388B07B0808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 0420
Signing time: Sun 07 Sep 2025 06:00:42 +0000
Manifest this update: Sun 07 Sep 2025 06:00:42 +0000
Manifest next update: Mon 08 Sep 2025 06:00:42 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: yX1iNJYsJbPE4gMIOduX9/IK9idv2MZMPl6uNBXqqrg=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:35:c1:70:33:d1:ea:7c:ce:d3:88:b0:7b:08:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Sep 7 06:00:42 2025 GMT
Not After : Sep 8 06:00:42 2025 GMT
Subject: CN=82cd62c343c435505e3fd7aada5ed6a75062de45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:6a:d2:f3:a6:e4:71:b7:cf:ee:bc:a3:c2:
57:cc:f4:5b:76:ba:2a:69:20:4e:dc:2f:22:0a:47:
5e:ab:37:1a:5e:04:70:23:3d:60:d2:09:58:5c:df:
1e:18:b8:25:31:2a:15:dc:c1:0f:37:f0:34:24:6d:
43:06:10:d0:d6:8e:9a:80:0f:49:a5:73:3b:7b:ff:
82:f8:57:a5:14:94:01:e6:d4:2e:b6:92:f3:8d:5f:
47:fe:26:62:70:da:73:fc:ab:1e:40:74:87:58:63:
c1:e8:f3:fe:8b:45:17:92:60:ff:9c:4a:c1:c3:54:
a7:d0:80:a9:7d:f6:b4:c8:05:7c:bb:f9:ca:f5:96:
82:37:23:3e:c0:fb:4c:2d:8d:dc:c6:57:20:80:d4:
35:40:6a:be:ee:b9:c4:40:ad:6c:dc:0f:02:82:0d:
d6:77:ac:30:ae:8e:ca:c0:d1:bb:dc:23:a1:4d:15:
e8:f7:3a:bc:fc:e9:b8:a1:4d:82:d1:a9:0c:69:d5:
bc:1f:9e:50:e3:6f:e1:53:bf:a6:85:67:49:77:22:
39:47:95:06:35:d2:1c:6e:1f:74:b2:44:8c:3f:13:
71:a6:65:f0:04:70:a1:a5:d3:e6:5a:b2:92:22:96:
71:be:e4:5c:93:89:0a:98:3c:19:b2:3e:fa:cb:1d:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:62:C3:43:C4:35:50:5E:3F:D7:AA:DA:5E:D6:A7:50:62:DE:45
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:19:b2:55:a8:0a:c3:30:bf:f8:c2:5f:af:c4:22:3b:4d:e1:
23:65:bf:ec:6f:ef:6e:90:cb:b4:c6:47:05:cb:4b:41:73:76:
fa:1d:2a:f3:b9:73:de:58:76:aa:37:f1:4b:b8:01:b4:54:8a:
f4:65:5f:8c:a2:5f:d1:c8:db:b3:3e:e6:a3:23:c2:57:2f:31:
53:1c:23:18:ee:91:23:13:91:00:26:42:d0:c5:5c:c2:b0:59:
76:bf:f1:e1:79:aa:04:0e:b4:cd:71:7e:4d:f6:fc:7e:6f:d9:
bd:1c:8d:ef:96:70:03:81:33:91:5a:95:ac:17:1e:04:49:04:
05:1b:31:35:5e:a1:a2:c1:20:a7:0b:81:c1:9d:03:03:37:99:
28:16:71:2c:41:7c:00:61:06:7e:01:f4:47:d7:75:65:c8:bc:
72:78:9e:9b:04:02:03:8d:5e:9b:57:67:f0:39:ef:76:a2:dc:
fc:b6:0e:02:17:09:1d:49:f5:57:2e:56:00:39:4b:22:ca:53:
3c:73:39:f0:dc:47:97:5e:8a:04:4f:1a:17:87:43:d0:58:f3:
13:31:97:08:f2:47:14:4c:46:7b:49:e5:37:89:d2:3e:db:e9:
72:6f:a0:6e:b7:79:13:7a:f1:4c:5a:f0:2f:82:48:d4:ba:03:
8e:0c:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:46 2025 by rpki-client