Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: J27z8SP+hfJHAwFYWNOpsyzg27/JF2sGQKJNVvLo/6g=
Subject key identifier: 1B:9A:24:2C:C5:34:76:83:AB:6D:8B:D2:54:4A:B7:B1:D0:74:7C:BB
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 019A21ADE6FE5B54DB72840A34B59482EE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 04A4
Signing time: Sun 26 Oct 2025 18:00:36 +0000
Manifest this update: Sun 26 Oct 2025 18:00:36 +0000
Manifest next update: Mon 27 Oct 2025 18:00:36 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: ie9MsgCK1I5aT6WLlkF37Ajh5V5lgQkQrmj/UEiiJzQ=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:e6:fe:5b:54:db:72:84:0a:34:b5:94:82:ee:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Oct 26 18:00:36 2025 GMT
Not After : Oct 27 18:00:36 2025 GMT
Subject: CN=1b9a242cc5347683ab6d8bd2544ab7b1d0747cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:fa:0e:15:3a:17:41:7f:a2:01:97:76:2d:
5e:fe:a7:3b:8d:80:f0:40:f7:9a:9b:eb:e2:fa:6f:
4c:0a:15:1f:0f:69:24:a8:a3:c1:3f:ad:47:5f:3f:
b4:5a:66:5d:89:1a:78:2e:87:d8:b3:f1:bf:16:30:
4c:df:89:8a:db:68:ac:f7:4a:b9:23:3f:cf:87:4b:
a8:7b:23:b8:d1:b3:17:9b:ad:eb:91:ff:b0:5f:76:
0a:cb:b0:ea:54:34:f8:b6:ee:0f:bd:d2:9c:5a:8b:
27:e2:17:d9:13:cc:05:0d:86:08:0f:0f:c0:8f:42:
1f:5d:8d:d6:1e:bf:b7:ff:6b:78:c5:0c:f5:e5:88:
4d:67:a6:3f:30:69:a8:03:28:45:59:a8:7d:88:35:
59:9f:c7:86:b8:d4:c8:f9:a5:d6:c1:b3:82:2d:e9:
79:74:1a:58:8b:8a:cb:ad:07:fb:a4:31:17:95:ce:
e8:1e:67:76:f5:a6:69:fb:cd:8f:ba:80:b8:55:99:
1c:ed:e3:2a:3e:c9:b6:c7:4a:f9:90:fa:5f:d0:0a:
22:82:44:7a:b5:12:f1:2e:de:02:ea:ef:f0:86:98:
1d:80:bc:d9:04:b6:f6:4f:b6:09:91:0b:54:e0:b9:
34:bc:b2:9a:9b:12:b4:66:c9:61:f1:8c:24:d5:b7:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9A:24:2C:C5:34:76:83:AB:6D:8B:D2:54:4A:B7:B1:D0:74:7C:BB
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:90:44:1c:d0:0a:7c:69:08:2e:7a:8c:d5:64:13:47:69:23:
2b:c9:41:d2:e8:79:00:08:29:3a:9f:aa:81:ec:be:f8:eb:39:
81:16:07:b8:70:c2:7a:d1:4c:37:ad:8d:ed:2e:d5:3d:d3:10:
c8:3f:1b:5d:a1:d1:17:b6:da:ad:9b:9f:c0:13:d5:bc:6d:f0:
fb:45:ff:ee:05:7a:4c:2c:8d:c9:ac:d2:16:ae:34:a9:cb:ab:
17:7b:c2:17:98:af:db:36:c1:24:b2:1e:a6:54:84:93:e6:a8:
fe:d4:b2:44:a1:f8:a0:9d:58:ed:ce:90:1d:d9:1a:38:3f:a5:
d8:cb:28:9c:41:7b:cf:b6:76:ba:b8:b9:1e:30:e2:5c:79:d4:
da:2a:06:cc:39:d8:36:a4:57:d2:e7:da:6a:1f:81:e7:08:80:
f6:f9:9f:f0:07:db:6b:b0:ce:f4:b1:72:48:72:d8:09:bf:b1:
fb:93:f9:dc:84:f2:0e:ce:b6:11:cf:ed:4c:20:f3:c2:f4:dc:
92:a9:e3:19:e2:cb:d8:ec:42:c6:87:0d:23:71:eb:f3:a2:1e:
27:fb:45:da:55:72:df:e7:b7:ad:df:c7:06:fd:37:f5:d5:46:
f1:bf:d4:13:19:1b:d1:fc:d6:36:30:02:d9:e8:48:1c:fd:28:
3c:11:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:01:17 2025 by rpki-client