Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: 2Nyymz6eyDhIkhkAiq3UWK+s4bA7haYtVjatclAG5ko=
Subject key identifier: F4:28:DF:6F:F0:40:AC:D9:FC:6F:34:88:BB:9D:9E:95:A2:B6:9E:7A
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 01988E46A2CA7C3B01A8E0B36EF03DC80D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 10B3
Signing time: Sat 09 Aug 2025 10:00:50 +0000
Manifest this update: Sat 09 Aug 2025 10:00:50 +0000
Manifest next update: Sun 10 Aug 2025 10:00:50 +0000
Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=)
2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: pfu9ydD9VbI4jr/Y3Id42QCZamNjovUu1DPXuLBk6xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:a2:ca:7c:3b:01:a8:e0:b3:6e:f0:3d:c8:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Aug 9 10:00:50 2025 GMT
Not After : Aug 10 10:00:50 2025 GMT
Subject: CN=f428df6ff040acd9fc6f3488bb9d9e95a2b69e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:47:a3:4c:52:88:19:b4:64:02:82:d7:72:
90:ba:3b:80:d8:35:f7:9b:1e:55:5e:fb:98:0e:53:
d0:50:7a:e9:49:fb:3e:b0:0f:c9:4f:5e:cb:5d:bd:
bf:54:76:c4:ec:26:52:fc:d8:99:89:e3:a6:04:33:
f0:fd:79:79:a7:ac:0e:e2:c2:34:d6:a3:11:ba:8e:
7b:8a:23:13:62:b1:2e:c2:c2:da:26:82:be:6d:22:
b7:cc:26:df:0c:52:41:0a:a1:88:33:38:31:cf:d0:
e3:e4:ad:6b:e7:1e:8f:4f:c5:e8:da:b3:3b:c0:e8:
c4:d2:fb:5d:71:b6:21:45:b3:68:86:36:e2:a6:a4:
1e:be:03:4f:b4:72:f3:17:35:ee:2b:08:c9:bf:da:
22:a4:c4:e4:2a:62:98:9b:58:d0:93:08:fe:f0:ac:
b6:ba:1b:be:50:52:80:3c:90:ad:8e:d1:56:24:36:
ba:09:86:06:5c:09:e2:17:83:cd:d4:ef:be:05:87:
2d:08:b1:13:03:c7:7a:0f:11:5e:0b:68:84:a7:65:
7e:42:2a:81:73:1b:56:9f:48:2b:45:81:0f:7f:4b:
1b:ea:70:d4:d3:cb:17:1c:29:93:3c:ea:66:d2:db:
26:8f:4d:27:a3:d2:26:e1:6f:9e:53:20:f2:ad:fd:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:DF:6F:F0:40:AC:D9:FC:6F:34:88:BB:9D:9E:95:A2:B6:9E:7A
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fa:61:aa:37:93:6f:7f:63:48:48:fa:0e:54:30:ff:8c:7d:
a2:ea:8a:77:f1:f8:53:bf:a6:4a:af:aa:27:38:cf:6b:cf:49:
92:a6:80:d1:cc:ce:95:4b:77:8c:e5:48:cb:ad:49:ac:03:4c:
0c:3a:aa:3f:64:81:73:68:6f:45:1b:03:0c:1b:f1:d5:01:7c:
6d:fb:9a:fe:d9:24:3b:cd:0f:d0:ef:25:f4:c8:af:d8:1f:03:
96:6a:56:e2:bb:26:a6:36:f0:5d:e9:e8:d8:c0:cd:fb:0a:4f:
66:0c:81:f0:46:a5:db:71:e6:dc:b5:9f:ba:b5:8b:19:38:0d:
32:67:71:7f:3c:ac:06:86:04:2b:87:99:94:8d:ce:74:9a:88:
00:e0:01:b1:f7:08:ee:13:8f:08:39:cd:74:1b:e7:c0:ec:58:
8e:ce:ab:d2:6a:26:90:8c:a4:0a:ff:9f:9a:74:b6:60:4e:29:
32:38:8e:5f:7d:91:ad:f2:c3:36:25:b4:64:2f:3f:da:ed:7b:
2c:e3:12:eb:ac:29:7c:14:70:5b:ca:0e:bb:9f:44:13:f5:86:
19:11:82:90:7b:af:4e:b4:16:da:2b:a8:15:59:23:ec:09:7c:
b2:5b:da:8f:02:9a:06:8b:e2:13:64:4f:60:79:de:a6:bd:a4:
89:fe:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:22 2025 by rpki-client