Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: PF0DHivOW76oeji90Jki0R4jpeKOqTeU3vuqI8CADgg=
Subject key identifier: AB:6C:FE:34:8B:B7:86:90:8D:B7:D3:66:40:3D:4A:65:6D:F4:6A:4D
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 019A71B8A3B681CCAF00B5A193FA4E657560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 1586
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: UhTncqVak6QdcDd0WsAsoGOsFccGp5B8rnQ5EXm2/3E=)
2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a3:b6:81:cc:af:00:b5:a1:93:fa:4e:65:75:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=ab6cfe348bb786908db7d366403d4a656df46a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:70:48:7f:a0:a2:9f:7e:67:5c:22:38:06:
c5:00:f3:0c:9b:e7:48:41:d2:49:1d:b2:4c:2c:93:
d3:68:d4:1f:10:48:ce:ee:fd:04:98:fd:2a:fe:36:
64:e8:67:b8:df:95:2c:d4:88:dd:e4:cf:75:84:4b:
d1:69:8a:b8:81:02:f9:4c:b1:03:34:ad:eb:3e:e1:
be:6c:18:57:03:0b:7c:30:32:32:7f:f1:70:52:a1:
b2:e1:88:01:87:15:21:99:5b:2b:d5:ba:3b:9f:44:
9d:f8:7f:db:cd:6c:af:e0:03:77:a8:1e:09:cd:7b:
fb:0b:11:51:b5:e9:75:41:1d:b5:80:a7:08:fa:ce:
10:86:52:86:30:73:0d:f4:92:e8:c4:5e:94:b2:9f:
e5:92:2c:59:14:36:21:8a:96:24:44:7e:6d:d3:de:
bc:a0:8b:13:14:81:2f:fc:e2:76:3c:96:92:90:1f:
93:30:2c:fd:f1:ff:5c:4c:28:2d:13:9f:51:a8:53:
0b:cb:48:45:28:0f:c6:46:5d:b2:a6:02:32:8d:fa:
6d:74:00:da:ea:87:a1:56:24:cf:71:65:a6:06:fd:
b5:72:03:43:17:87:4f:57:a1:75:ad:d9:00:72:75:
aa:ea:ac:54:c2:43:51:33:7c:3c:2d:41:5d:13:cb:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6C:FE:34:8B:B7:86:90:8D:B7:D3:66:40:3D:4A:65:6D:F4:6A:4D
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:54:ae:12:f2:c8:cd:4e:9b:45:05:5a:af:4d:83:8e:72:
f7:77:e2:32:ac:ee:2a:30:25:4e:87:35:53:1d:01:57:ba:86:
e6:65:7c:a7:b5:2f:34:9f:0e:82:95:fe:7d:2f:dc:a1:70:a4:
c9:24:9c:06:42:6a:97:47:d8:94:ff:33:c6:6b:ec:4f:b0:0e:
a6:ef:e3:be:c1:7c:82:fd:89:c1:83:f3:6c:47:a5:0e:57:af:
d8:2a:3a:d3:fa:0a:99:f8:c5:18:f1:43:9b:30:5d:39:13:ee:
2f:03:06:03:b7:b5:ad:21:37:6e:bf:b7:7c:58:9f:4d:b3:82:
4b:6f:69:a7:75:f7:de:ec:82:60:4a:bd:ac:a6:6f:db:70:60:
03:78:3f:6b:e2:3b:f4:1a:32:d4:f2:8f:0a:8e:48:86:5f:7e:
7a:cd:7e:57:e8:10:1a:49:a1:6a:2f:c4:ab:b2:fc:2b:eb:38:
d5:98:30:68:22:63:de:ac:ea:2f:13:95:a4:a0:0b:51:89:bc:
4b:ff:33:7c:6c:45:53:1f:c2:77:56:f5:e3:73:92:09:49:df:
f2:fa:59:59:32:74:11:79:4b:60:55:2b:d1:a5:76:61:73:39:
10:64:b0:b0:15:1f:55:be:72:a8:63:9e:91:2d:e9:01:96:51:
68:9a:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:01 2025 by rpki-client