Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: Rb7HZLWDw1QinOgf3FWIckidfX1dU9uBQ7HY3Jt7FOI=
Subject key identifier: 15:E1:B4:DF:DE:BA:54:9F:53:A2:14:03:21:2A:99:D8:D1:7C:7D:CC
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 0197553585BE18E40E80226F7001B2D94A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 0331
Signing time: Mon 09 Jun 2025 15:01:00 +0000
Manifest this update: Mon 09 Jun 2025 15:01:00 +0000
Manifest next update: Tue 10 Jun 2025 15:01:00 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: NSyxU5raBFyWQEa1vXKwN2/eD5bX/1dVX7odc9aX4+0=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:85:be:18:e4:0e:80:22:6f:70:01:b2:d9:4a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Jun 9 15:01:00 2025 GMT
Not After : Jun 10 15:01:00 2025 GMT
Subject: CN=15e1b4dfdeba549f53a21403212a99d8d17c7dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:df:2b:f7:76:f3:14:e0:7d:79:1c:3c:a2:
04:2f:92:44:ac:c5:4e:2b:13:bd:f3:fb:1a:e7:8b:
af:97:c7:7c:35:b6:37:51:13:31:c1:0e:ce:51:8f:
c4:8e:db:b1:18:9d:b0:3d:e4:18:33:e1:9d:09:3d:
f5:06:a8:93:40:13:f1:d3:40:66:04:ec:1e:4c:2e:
cb:4e:c5:93:db:40:18:71:c8:37:8d:c8:6e:e4:ed:
cc:b2:25:9c:36:f0:de:0f:6e:e1:c4:74:f2:56:e7:
d0:9f:2f:13:f4:d0:14:2a:75:07:74:5b:b0:ae:25:
df:cc:b0:2a:7d:53:a4:a8:28:0b:32:67:80:91:b9:
2f:6b:4f:93:0d:41:cd:fe:82:ca:67:f1:70:bb:b4:
d8:11:81:91:0e:24:31:76:48:90:18:42:5b:6c:65:
e5:db:6a:45:6c:44:ef:b8:18:19:0d:dc:21:6d:20:
a5:58:03:7f:52:b1:3a:66:49:54:a2:b5:e5:59:e6:
bb:0e:31:8c:3f:40:dd:53:3e:58:da:75:8d:0f:e8:
40:60:cf:06:58:34:56:24:4d:fa:66:60:8b:59:58:
bf:f1:8c:9e:77:5b:55:a6:85:6e:44:00:8e:a9:f6:
33:57:c7:62:b9:aa:fd:32:6d:4d:77:fa:4c:60:c0:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:B4:DF:DE:BA:54:9F:53:A2:14:03:21:2A:99:D8:D1:7C:7D:CC
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:df:7c:0a:e5:57:a1:04:f9:2d:c5:8f:4f:01:b9:f7:75:9a:
2f:33:ec:e8:0a:3a:4c:06:e5:11:0a:a8:18:a6:9f:eb:17:fc:
86:91:a3:42:dd:74:21:9b:ac:bf:8c:7c:4f:c6:86:c9:c2:85:
f9:e8:18:e0:9d:20:f9:0a:fe:5f:27:f8:c1:35:f3:eb:22:2a:
e6:09:9b:79:1e:10:ba:d5:f7:7e:d4:45:93:fc:6c:9f:df:fb:
09:be:b0:c6:6d:7e:34:2a:04:f4:a0:b2:9b:f5:3f:1d:b2:cf:
ff:ca:25:ba:cd:f8:6b:fb:c6:42:2a:58:58:e4:cb:67:56:07:
80:dd:c9:3d:a2:51:e6:d4:c8:0c:b2:fa:9f:69:17:90:55:f9:
41:2d:7c:73:b1:0c:32:60:d3:36:22:4a:7f:27:aa:c1:1c:4e:
59:a8:4d:aa:14:ef:36:42:c0:4d:35:a2:78:85:0f:ec:a0:6b:
e7:36:f3:19:fd:44:23:c0:a1:c0:32:db:0c:4e:31:07:5a:f2:
60:bb:3c:b5:03:d7:87:5c:7e:c7:f4:ec:ff:5c:a5:56:89:96:
ed:db:cd:d7:65:f3:1e:34:76:f4:6b:6b:b2:bc:8d:eb:9d:90:
a9:c5:0f:2d:94:44:17:f0:b8:80:80:34:8e:4a:0c:57:80:26:
7d:f3:02:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdVNYW+GOQOgCJvcAGy2UqSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzZlOWIxZDAxNDc0YWYyYzNlNGY4YzIwZjQ2MWQxMzY4
MDE5NDkwHhcNMjUwNjA5MTUwMTAwWhcNMjUwNjEwMTUwMTAwWjAzMTEwLwYDVQQD
EygxNWUxYjRkZmRlYmE1NDlmNTNhMjE0MDMyMTJhOTlkOGQxN2M3ZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pDfK/d28xTgfXkcPKIEL5JErMVO
KxO98/sa54uvl8d8NbY3URMxwQ7OUY/EjtuxGJ2wPeQYM+GdCT31BqiTQBPx00Bm
BOweTC7LTsWT20AYccg3jchu5O3MsiWcNvDeD27hxHTyVufQny8T9NAUKnUHdFuw
riXfzLAqfVOkqCgLMmeAkbkva0+TDUHN/oLKZ/Fwu7TYEYGRDiQxdkiQGEJbbGXl
22pFbETvuBgZDdwhbSClWAN/UrE6ZklUorXlWea7DjGMP0DdUz5Y2nWND+hAYM8G
WDRWJE36ZmCLWVi/8Yyed1tVpoVuRACOqfYzV8diuar9Mm1Nd/pMYMAKuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXhtN/eulSfU6IUAyEqmdjRfH3MMB8GA1UdIwQY
MBaAFIc26bHQFHSvLD5PjCD0YdE2gBlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt
M2IwNjhkYjQxMTQwLzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw
LzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg998CuVX
oQT5LcWPTwG593WaLzPs6Ao6TAblEQqoGKaf6xf8hpGjQt10IZusv4x8T8aGycKF
+egY4J0g+Qr+Xyf4wTXz6yIq5gmbeR4QutX3ftRFk/xsn9/7Cb6wxm1+NCoE9KCy
m/U/HbLP/8olus34a/vGQipYWOTLZ1YHgN3JPaJR5tTIDLL6n2kXkFX5QS18c7EM
MmDTNiJKfyeqwRxOWahNqhTvNkLATTWieIUP7KBr5zbzGf1EI8ChwDLbDE4xB1ry
YLs8tQPXh1x+x/Ts/1ylVomW7dvN12XzHjR29GtrsryN652QqcUPLZREF/C4gIA0
jkoMV4AmffMCAA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:32:41 2025 by rpki-client