Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: hU2pp5QWDx3MPz1QpcLj4CrOQWOMPmzoczrD+4gYTAE=
Subject key identifier: 8B:9C:BF:3C:1B:D6:40:63:A0:52:8F:FB:D0:6A:10:7F:6C:B5:0D:CB
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 01989223CBD242FEB05F3342B19E68AF4356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 04:01:16 +0000
Manifest this update: Sun 10 Aug 2025 04:01:16 +0000
Manifest next update: Mon 11 Aug 2025 04:01:16 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: Sxp2EYJZ7IVMbcSmIcVIl9ghiDZZ6aqGhQK5w21HwN4=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:cb:d2:42:fe:b0:5f:33:42:b1:9e:68:af:43:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Aug 10 04:01:16 2025 GMT
Not After : Aug 11 04:01:16 2025 GMT
Subject: CN=8b9cbf3c1bd64063a0528ffbd06a107f6cb50dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:11:9f:63:63:6c:64:dd:08:72:ad:72:2f:
1f:13:22:da:bb:de:2d:e6:ff:a4:e7:3a:2e:e4:30:
9b:26:e4:69:41:f7:97:8b:1a:35:fb:95:d9:3c:51:
49:83:90:75:74:46:4f:5e:93:ce:a0:94:e4:bd:16:
fb:a3:e8:5b:79:df:83:55:ba:f4:47:00:8a:7e:c4:
59:b1:c7:20:16:58:7f:58:d7:4a:e2:4d:77:7d:82:
df:02:36:ce:a5:a3:b9:4d:d7:ce:78:31:9b:2d:1c:
e3:b6:91:5c:a1:ad:13:16:41:95:e9:8c:aa:7e:d8:
b3:ea:48:b7:09:2d:dd:4b:00:f4:cd:5f:b1:73:c3:
43:38:cc:79:56:3c:a6:31:a5:b4:c9:e9:4b:4d:2f:
7d:c3:c9:7b:92:28:da:8d:d6:4f:67:b2:39:94:0d:
73:7a:51:df:54:39:9c:e6:a7:27:6b:9f:6b:19:ca:
4e:4f:5b:ee:0b:cc:51:33:25:b2:70:d6:23:a6:56:
25:e8:4d:be:41:55:26:4f:0a:f0:62:ac:12:0a:40:
ca:a3:3c:31:2c:93:b8:86:65:8e:73:a8:47:5b:3d:
0e:7d:0f:73:87:6f:22:5c:f1:00:86:b9:f6:ab:68:
80:bc:69:03:b1:0b:96:0b:1a:4f:8c:86:a6:a5:01:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9C:BF:3C:1B:D6:40:63:A0:52:8F:FB:D0:6A:10:7F:6C:B5:0D:CB
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:03:98:a7:0a:66:23:2f:1e:b2:85:8c:be:e9:5f:6a:65:3e:
69:76:6f:3f:f3:64:44:33:6c:73:90:73:01:f5:86:1a:4f:9a:
b7:b8:b3:f5:13:15:64:65:8b:5c:3e:47:7b:ba:79:cd:3d:12:
65:0c:dd:94:f1:3e:bd:52:34:8d:e7:17:4f:74:86:9d:65:ea:
ef:3e:51:44:33:39:8e:c9:4a:4e:38:46:6e:5a:69:2a:89:42:
a2:96:ce:33:e5:3a:a1:3f:aa:97:1a:7f:4c:52:67:84:0d:bf:
bd:7d:a7:52:64:fc:46:94:5b:bc:cc:68:95:b5:c0:3d:b3:a0:
81:27:46:da:15:da:14:85:c7:42:96:8f:78:77:bb:6c:39:a0:
72:f3:8f:dd:c7:75:40:24:43:60:79:ed:17:15:5d:c3:e0:0b:
17:70:7f:bd:29:80:45:d6:26:3c:af:ba:06:fc:fa:04:b4:89:
f6:aa:e3:06:a2:68:78:0a:99:9c:a7:2b:3d:c1:5f:a2:69:26:
e4:ab:f4:9d:88:8e:0c:7b:d0:fd:1a:a0:6f:b8:62:24:1d:58:
03:e4:65:a8:58:1f:14:ac:fa:f4:ee:09:b8:45:0c:fd:88:97:
3f:56:40:94:d1:ab:ff:2e:15:eb:d6:7a:89:42:fb:4d:11:2a:
70:11:5d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:52:21 2025 by rpki-client