Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: KjYnZbgRTY5nU8QoFaCvCoVr5qUnN6/JPFmPbOqNDdQ=
Subject key identifier: 8D:D2:2B:5A:CE:D9:D0:F9:DA:95:10:52:52:14:00:C7:86:01:55:51
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 01968E829A244DBAE7F18E5207B7D3812AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 01:00:45 +0000
Manifest this update: Fri 02 May 2025 01:00:45 +0000
Manifest next update: Sat 03 May 2025 01:00:45 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: cL7TffB/qHOTSUp2lB5KJcp9EC7/F0wLM4+Yti2gvIo=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:9a:24:4d:ba:e7:f1:8e:52:07:b7:d3:81:2a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: May 2 01:00:45 2025 GMT
Not After : May 3 01:00:45 2025 GMT
Subject: CN=8dd22b5aced9d0f9da951052521400c786015551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:c9:dd:be:73:c3:73:93:bf:6a:6c:b5:87:
a8:03:79:e8:10:e6:12:28:22:4e:39:1f:ea:7d:7f:
55:c2:fb:98:81:4d:7e:c4:09:21:9a:9c:ee:5f:b4:
07:cb:64:fb:13:1f:71:7e:db:38:25:0f:85:da:a8:
82:92:24:4d:4b:1b:10:1f:14:2b:0d:30:48:f2:d4:
36:fc:48:d3:a7:45:4e:1b:3a:ee:37:89:d7:ea:50:
b9:27:c5:e6:f4:90:31:ec:77:1d:80:64:53:34:69:
6c:e9:08:e3:82:b4:6b:b7:b6:af:92:10:24:cb:2f:
ac:62:1b:47:63:f7:0a:9f:9d:1a:1a:6e:73:5a:b0:
a1:af:2a:ea:1d:6f:aa:96:71:19:90:32:a7:42:6d:
5d:37:a2:77:8d:0f:8e:89:70:fc:62:94:5c:28:ab:
9b:84:68:13:a9:66:bc:4c:f1:d6:3c:72:61:93:ff:
1a:36:a8:05:21:38:75:79:5a:aa:04:b2:42:59:23:
08:3f:e6:08:89:29:57:a7:31:0d:69:f7:31:85:87:
0a:c4:1a:3d:fe:18:af:98:64:f8:d6:4c:43:d7:36:
b7:d3:54:d4:76:61:fd:0a:76:5e:4e:e1:0e:25:17:
ab:94:6c:ab:3d:89:c9:cb:68:1b:9e:0a:77:6e:48:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D2:2B:5A:CE:D9:D0:F9:DA:95:10:52:52:14:00:C7:86:01:55:51
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:66:2e:03:66:36:57:98:25:ea:99:a9:0c:2d:ca:7d:80:0e:
57:ad:14:7a:be:e6:7d:99:01:c6:31:67:d0:ee:57:30:41:7c:
b4:fd:ca:13:d7:57:b2:38:58:16:d2:35:2e:6a:7a:34:c4:35:
f8:7a:3b:2d:32:d5:3c:07:9e:03:6a:be:90:5c:af:c6:4c:da:
de:f8:86:1a:2c:1e:9b:6a:7e:a8:81:27:b0:bf:28:90:3c:3d:
86:57:fd:94:e6:2a:3f:97:c5:ae:81:3d:27:0a:9f:47:59:88:
cb:0b:e3:5f:fb:d8:9a:c0:9e:27:02:7f:9c:43:d8:f6:67:62:
b1:a3:5c:ab:cf:89:c1:2b:bc:ac:f0:cf:9a:a3:67:b0:75:4c:
d3:4d:42:07:a3:14:99:e7:66:30:ee:ce:63:a6:c0:b3:61:3c:
c0:b7:c1:b9:f4:15:c8:f2:b4:04:e3:af:ef:f0:e0:ca:50:ed:
c0:61:96:e0:29:39:17:44:36:1d:d7:c4:c2:bf:fd:f5:f1:4c:
8b:ad:90:df:81:12:6d:c8:c0:69:3a:f3:73:51:17:df:97:8e:
ab:cb:af:1b:41:a6:c0:c4:07:b4:3f:a6:25:0a:51:bf:57:12:
e2:5b:ee:d4:cc:de:f5:20:cb:81:5b:9e:ab:f0:b2:a2:50:e5:
70:9b:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:58:11 2025 by rpki-client