Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: R3+mNWp8p+d6MquExlNpC7WpBZ8wqEebC+ljxAyInsI=
Subject key identifier: 3B:87:56:49:96:88:80:D0:3A:F0:E9:87:D8:3B:7C:51:D0:DC:0A:4A
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 01988A32CE7E2CDA57627FD41D7CB4DE4BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 03D1
Signing time: Fri 08 Aug 2025 15:00:42 +0000
Manifest this update: Fri 08 Aug 2025 15:00:42 +0000
Manifest next update: Sat 09 Aug 2025 15:00:42 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: wUHgVWd1/au4mmKLHyYgC3LnA/Y4g79USYLIo0I1gsk=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:ce:7e:2c:da:57:62:7f:d4:1d:7c:b4:de:4b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Aug 8 15:00:42 2025 GMT
Not After : Aug 9 15:00:42 2025 GMT
Subject: CN=3b875649968880d03af0e987d83b7c51d0dc0a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:3f:ea:f8:49:b5:86:f6:73:6a:b4:47:4f:
88:4d:2a:78:cd:ee:21:d4:7a:ec:4b:be:73:c8:db:
2e:0e:6d:b1:97:69:4e:c2:c8:c0:3e:77:f2:5f:44:
a4:41:6a:bb:8f:37:9f:30:03:75:5b:89:aa:7a:bf:
3d:9e:2a:d4:68:2f:25:f9:7c:66:48:d3:b6:87:4e:
46:ce:d1:c1:a1:a4:d4:49:bb:bd:5b:0e:f7:b4:80:
a6:e4:97:4c:c8:87:02:9e:84:8e:f9:04:da:c4:a5:
0e:25:57:94:58:2e:63:e0:7a:8e:a3:1c:88:b3:08:
1d:7d:10:a8:e3:06:d9:22:45:be:2f:8f:a5:8d:28:
51:dd:63:70:99:cd:61:13:82:cd:52:cc:94:6a:8d:
fa:40:01:fc:f1:a9:f5:2b:4b:32:0b:83:4b:c6:af:
ad:c9:f9:d5:08:03:72:1d:7e:ac:6e:8f:67:75:d2:
c0:2d:2c:b3:c1:37:c8:04:76:a6:a1:9c:c4:fe:91:
7b:d8:7a:80:86:18:3d:69:cd:7a:11:b6:ff:f0:e6:
d4:8c:30:29:d9:5c:cb:23:db:75:7a:d7:ea:3d:3e:
20:ce:92:ee:41:da:01:e5:14:42:6c:fb:19:5f:6c:
3b:af:b0:e1:39:db:f8:f3:cb:06:3b:2b:09:e2:40:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:87:56:49:96:88:80:D0:3A:F0:E9:87:D8:3B:7C:51:D0:DC:0A:4A
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:90:0f:d9:94:be:3c:d8:3e:d6:74:a6:ad:d0:8c:b9:86:
f8:f5:af:2c:1a:f8:e3:32:ef:26:6f:9a:57:b5:0a:1d:8c:73:
11:5a:37:f2:1e:66:69:71:5a:2b:c1:f9:da:43:b9:db:97:de:
cb:dc:ee:e4:c3:cb:70:02:95:15:cc:65:8c:a5:8f:62:20:9e:
cd:25:17:32:38:61:1e:01:48:e0:2e:29:63:89:43:81:1b:24:
a5:41:42:2c:23:51:9b:bc:3f:05:43:0a:f7:39:b5:fe:ce:f4:
55:b8:a9:94:ba:63:fb:bb:b8:26:fc:97:1c:3c:eb:a5:b6:db:
c2:40:b0:09:f5:9b:b0:56:fd:bf:5c:ac:8b:49:a6:0f:17:93:
0b:92:d8:e1:12:b0:70:fa:c2:d1:ed:01:47:c0:d7:29:9e:eb:
e1:e3:4d:bc:71:2c:6d:95:a4:fc:35:dd:34:26:12:34:0c:1f:
94:74:69:de:9f:9e:c8:55:f9:3c:4a:83:e2:c6:26:da:88:c4:
21:82:e4:d5:50:05:87:92:56:0e:a1:2c:33:61:04:32:3a:49:
5c:32:75:8d:00:2f:48:14:2a:6d:b8:c0:f4:0f:d3:bb:4a:dc:
27:ac:c5:17:2e:de:1c:7a:7d:30:8f:a1:7e:05:2a:ed:66:83:
78:e5:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:23 2025 by rpki-client