Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: HOGHnbJHv8+4UrcGKiNqCtlJFYpZ1hbCtcuE5oegUJ4=
Subject key identifier: 89:04:C2:B7:7F:66:6C:89:D6:6A:E3:AE:19:87:81:AC:0A:2D:1A:96
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019A4C60F863DE329826C74FE16B45C4BFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 01:00:14 +0000
Manifest this update: Tue 04 Nov 2025 01:00:14 +0000
Manifest next update: Wed 05 Nov 2025 01:00:14 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: rKF7KkQwRGa051I/v3/6dDI+zzZ9VVgXhCZ6ec7/GNA=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:f8:63:de:32:98:26:c7:4f:e1:6b:45:c4:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Nov 4 01:00:14 2025 GMT
Not After : Nov 5 01:00:14 2025 GMT
Subject: CN=8904c2b77f666c89d66ae3ae198781ac0a2d1a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:e1:a9:06:f6:a6:81:4a:3a:b3:3f:a6:b3:
b8:0b:ee:19:fb:b3:37:4d:03:b9:8d:24:de:87:32:
71:81:7e:2b:d2:f1:a2:5e:2c:b4:26:8f:35:8d:5c:
ae:55:1b:ba:71:3d:da:87:b6:d3:4b:06:f9:a5:78:
cd:45:d6:7c:ab:90:59:d8:cf:25:6d:76:f2:c1:33:
13:56:79:69:54:61:03:5a:e2:b5:db:0c:7e:cc:b5:
e8:da:85:cc:15:d0:2e:5d:e9:c9:cb:56:92:bc:ff:
a5:01:93:78:52:34:22:89:4b:9c:aa:ee:e3:21:8d:
c4:7c:52:3d:a5:04:c3:80:87:29:09:4f:b1:89:a6:
b0:8b:65:4a:47:d6:81:1b:c2:0a:37:51:ac:66:92:
4c:95:cd:55:12:b7:30:1d:9c:dc:a3:7e:70:c6:cc:
60:03:d3:8e:12:45:82:5a:45:57:34:f7:1c:19:bd:
eb:21:6c:4c:61:73:a5:79:70:fc:31:ff:77:8c:27:
e4:79:d0:1e:cc:53:6e:50:a0:8e:db:7b:43:80:11:
d4:1b:98:30:d8:58:5f:af:53:14:74:d0:b3:ad:88:
6e:52:bc:e4:02:96:d9:ec:4c:18:35:23:77:3b:ec:
27:69:3d:59:fc:46:e1:20:7f:64:00:a1:1d:ff:77:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:04:C2:B7:7F:66:6C:89:D6:6A:E3:AE:19:87:81:AC:0A:2D:1A:96
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:da:e1:28:d8:b1:ec:8b:c1:6b:cc:9d:4e:ae:9f:5c:79:24:
14:af:d3:b4:2f:13:f2:89:7e:04:06:94:1c:3c:2b:f2:1b:73:
61:92:a0:45:a1:12:5d:2a:ed:ab:bc:b3:42:aa:7e:2c:aa:70:
4f:3f:f4:ab:7d:e0:ba:cd:97:74:f9:62:b0:6e:3e:1d:69:1f:
1c:0b:77:f6:a6:5a:bc:56:03:26:c0:e2:2e:05:61:6d:72:72:
0a:19:74:98:c8:45:9c:16:44:d0:ee:fc:59:e3:62:20:37:47:
e2:7a:ec:51:e6:a7:34:fa:32:96:ec:7f:60:ff:e2:ff:c5:4b:
e7:2f:f3:9d:4d:e7:0c:a2:e5:11:d8:fb:57:19:7b:9a:9b:13:
10:55:77:2e:06:f8:a3:ef:f0:8b:c2:79:ac:fd:66:5d:b3:e7:
9a:5c:e8:73:95:78:06:1f:3d:9d:50:3f:00:3b:52:71:d6:e0:
79:e7:e8:e5:c6:50:bf:e5:6b:b6:72:cc:a9:f7:51:21:32:02:
c1:69:03:8e:d7:ce:af:99:98:d8:ec:c3:16:f6:cc:dc:f3:d5:
bf:73:80:be:74:5a:2c:09:d9:b1:01:86:4f:69:82:1c:57:21:
c4:20:4f:7f:01:29:78:7c:4e:f0:5b:a7:ee:c2:fc:db:6f:a6:
62:4c:9f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYPhj3jKYJsdP4WtFxL+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh
YzY2NTQwHhcNMjUxMTA0MDEwMDE0WhcNMjUxMTA1MDEwMDE0WjAzMTEwLwYDVQQD
Eyg4OTA0YzJiNzdmNjY2Yzg5ZDY2YWUzYWUxOTg3ODFhYzBhMmQxYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrThqQb2poFKOrM/prO4C+4Z+7M3
TQO5jSTehzJxgX4r0vGiXiy0Jo81jVyuVRu6cT3ah7bTSwb5pXjNRdZ8q5BZ2M8l
bXbywTMTVnlpVGEDWuK12wx+zLXo2oXMFdAuXenJy1aSvP+lAZN4UjQiiUucqu7j
IY3EfFI9pQTDgIcpCU+xiaawi2VKR9aBG8IKN1GsZpJMlc1VErcwHZzco35wxsxg
A9OOEkWCWkVXNPccGb3rIWxMYXOleXD8Mf93jCfkedAezFNuUKCO23tDgBHUG5gw
2Fhfr1MUdNCzrYhuUrzkApbZ7EwYNSN3O+wnaT1Z/EbhIH9kAKEd/3dwSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkEwrd/ZmyJ1mrjrhmHgawKLRqWMB8GA1UdIwQY
MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt
OGYyZDY2ODRjODE0LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0
LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNrhKNix
7IvBa8ydTq6fXHkkFK/TtC8T8ol+BAaUHDwr8htzYZKgRaESXSrtq7yzQqp+LKpw
Tz/0q33gus2XdPlisG4+HWkfHAt39qZavFYDJsDiLgVhbXJyChl0mMhFnBZE0O78
WeNiIDdH4nrsUeanNPoylux/YP/i/8VL5y/znU3nDKLlEdj7Vxl7mpsTEFV3Lgb4
o+/wi8J5rP1mXbPnmlzoc5V4Bh89nVA/ADtScdbgeefo5cZQv+VrtnLMqfdRITIC
wWkDjtfOr5mY2OzDFvbM3PPVv3OAvnRaLAnZsQGGT2mCHFchxCBPfwEpeHxO8Fun
7sL822+mYkyf5w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:34 2025 by rpki-client