Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: FwfxetbLTcvughnCpaLee3sHjzLZUsLCWSbm+JiBSSw=
Subject key identifier: 40:2A:2C:03:72:9A:B4:B9:A7:80:86:96:D6:BD:DE:D9:1B:0F:EF:D0
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 01988CFEAB6AD749F04B43A27A0EA6A14E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 1368
Signing time: Sat 09 Aug 2025 04:02:36 +0000
Manifest this update: Sat 09 Aug 2025 04:02:36 +0000
Manifest next update: Sun 10 Aug 2025 04:02:36 +0000
Files and hashes: 1: 3xjGI42bQNLx70HTJ7kXgEwsSsw.roa (hash: GpJV9iaqS5V9Mqcyg97TbadTb1FKNWn4xyXU6QZ9kGs=)
2: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=)
3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: 9fRrAbyY4wLnad3fDDAkfnFPfXKH371lVcIKf25fJaM=)
4: NP32WyfLeYLas1Z4fKTZriuHjvY.roa (hash: 4h/Yftv2raMAxvFI+CPfL3bUOHVTko1YvlzTzC+9xKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:ab:6a:d7:49:f0:4b:43:a2:7a:0e:a6:a1:4e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Aug 9 04:02:36 2025 GMT
Not After : Aug 10 04:02:36 2025 GMT
Subject: CN=402a2c03729ab4b9a7808696d6bdded91b0fefd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:37:fc:40:b5:59:a7:44:07:f5:82:91:28:d7:
02:07:25:c0:dc:db:e0:3a:17:f6:fa:aa:ac:aa:e4:
86:00:d5:37:a2:de:91:0f:d4:d5:92:72:44:99:0a:
4d:e7:b5:24:61:9b:ca:f3:71:74:f3:f6:1e:41:9a:
33:67:18:e7:9f:b3:f9:d3:93:99:5d:de:7c:27:89:
06:b9:5e:08:63:72:5e:bd:97:e7:ef:9f:71:24:76:
63:8a:34:72:5f:49:af:a7:bb:80:b2:57:57:d9:22:
fa:59:7a:67:b0:44:1d:48:62:c9:f8:fc:8c:8a:cf:
e1:6e:a6:cf:65:d7:c9:00:12:42:21:67:f2:39:a4:
41:d0:d1:c0:f1:2a:8f:3a:ef:f5:c9:db:fc:0a:2b:
5c:79:5d:c4:18:26:c9:64:1b:c5:f6:e9:c7:1f:66:
8d:67:88:28:6e:4e:4c:b2:d7:0a:82:a0:af:a3:25:
6a:ec:bc:2c:77:d1:8c:6f:26:08:59:50:fd:eb:2b:
2b:37:1f:4a:6b:fe:c9:fa:ad:34:db:4b:99:72:ff:
da:0f:62:a1:f4:4d:18:a6:47:47:a9:80:84:84:29:
e4:7c:6f:20:84:e2:ad:b5:7e:d5:ac:d0:8a:2f:26:
9f:49:39:b4:20:38:7d:14:7a:78:19:31:f0:23:a1:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:2C:03:72:9A:B4:B9:A7:80:86:96:D6:BD:DE:D9:1B:0F:EF:D0
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:51:59:ce:e2:68:b6:4f:85:a4:21:72:1b:62:a2:d6:1c:9c:
15:dc:28:07:3e:34:30:a3:a8:a6:03:83:db:b7:d9:a4:95:bd:
6e:16:60:3e:b8:89:69:a8:24:09:73:0c:58:d8:4e:c4:7e:02:
0f:9d:c1:de:c3:20:10:aa:a5:95:48:67:e1:c6:20:98:24:99:
c7:23:a3:d3:4c:2f:25:4c:67:85:79:5b:c8:bc:7b:33:12:55:
6a:2d:c4:0f:75:43:dd:c1:b0:f1:2a:78:00:93:e4:98:50:2c:
73:c2:56:b9:2c:32:1e:87:6d:01:89:39:fd:61:8e:76:0c:bf:
08:dc:ab:db:1a:62:9c:da:25:ad:0a:76:4d:85:18:c7:02:46:
c6:8a:86:fa:64:43:78:e5:f3:d3:b5:9d:22:fc:ae:91:40:79:
37:34:31:77:0c:1a:0e:ec:b7:ac:20:1e:a3:2f:81:76:c7:55:
8a:2c:55:9d:87:7b:f2:da:0e:d9:d0:20:96:ba:0c:38:02:c3:
0b:3a:56:dd:60:ff:19:ce:77:4a:98:aa:29:33:8e:67:0a:d7:
e0:d5:49:be:19:bd:fe:ab:1b:9d:f2:7e:15:15:2a:6a:d4:fa:
cb:c3:d7:a6:88:81:52:79:2d:0d:70:d0:bf:28:b0:4c:2c:c7:
b6:b0:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:19 2025 by rpki-client