Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: R2JmonnFRfMOhtpAgS99WKufaqIMEEDs5tZtLMl10vo=
Subject key identifier: EC:0D:68:78:B7:60:64:C0:A6:4F:9E:6D:89:3C:A4:3A:97:83:E1:F7
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 0198A04DB44E965FCACF58CAB07BDFA2F34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 1495
Signing time: Tue 12 Aug 2025 22:01:43 +0000
Manifest this update: Tue 12 Aug 2025 22:01:43 +0000
Manifest next update: Wed 13 Aug 2025 22:01:43 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: eRfyeeVZC4JW5qIT18f+WU9X/HQGfiVHuiu1Ea3PHqA=)
2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:b4:4e:96:5f:ca:cf:58:ca:b0:7b:df:a2:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Aug 12 22:01:43 2025 GMT
Not After : Aug 13 22:01:43 2025 GMT
Subject: CN=ec0d6878b76064c0a64f9e6d893ca43a9783e1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:86:54:fc:a2:9f:1f:74:48:fa:5f:29:aa:
07:ba:85:8f:b6:52:34:f0:29:96:cd:da:b9:76:58:
18:cd:bb:f2:ce:61:dc:e7:67:36:ed:62:4f:be:11:
5b:54:40:c9:df:b5:20:d0:0b:ff:b6:ad:50:e1:1c:
f2:be:31:49:9a:b7:7b:97:9c:05:e4:0a:8c:04:f6:
f5:f8:26:40:48:40:26:57:48:fe:98:1c:cf:41:36:
09:08:90:9f:c7:d7:ba:98:f9:ad:a6:bd:8e:ac:c2:
77:ad:38:5c:de:72:ce:7a:f0:95:e7:dd:65:2e:fe:
ec:86:13:bc:ad:f6:45:ee:d1:27:3c:e1:6d:80:1c:
26:6a:53:51:77:ca:1a:fe:14:6c:bb:c6:7c:e3:87:
22:be:99:f7:a3:1d:67:0a:2d:52:96:9e:74:48:d3:
cb:34:11:68:87:87:12:10:b4:62:b3:8f:02:ae:bc:
a6:6c:48:81:71:25:25:b3:f7:29:79:2d:d1:c0:ab:
98:03:2c:ff:4e:2f:b7:eb:76:e2:1b:66:08:59:f8:
34:b8:d3:61:ad:be:76:b9:7b:9e:72:24:d6:14:b0:
d0:bb:df:ec:59:e8:10:be:41:e4:31:ed:ff:d7:b6:
04:7c:74:2c:2a:7f:c4:bc:42:1b:c1:1c:1c:4c:a1:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:68:78:B7:60:64:C0:A6:4F:9E:6D:89:3C:A4:3A:97:83:E1:F7
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:30:b6:0b:fa:82:a3:b8:d6:4e:fc:81:e0:e7:2b:b8:af:11:
0b:42:19:52:d9:a0:6c:00:f2:21:91:77:f1:4a:54:6c:b6:81:
f5:a6:e9:bb:1a:e1:50:30:85:f5:5d:74:66:dd:88:97:a2:d8:
6d:f1:3a:e7:e2:1b:a6:85:08:70:13:f5:79:e1:c0:26:e8:40:
73:0f:3d:f2:25:d5:7b:04:34:62:d2:c1:98:61:db:cc:b5:6f:
98:ef:00:96:f2:ee:5e:24:97:9a:45:68:51:a3:f4:5b:dd:f6:
6a:83:95:4d:cf:e2:df:ac:05:85:50:ae:95:0a:58:7c:3c:a1:
d1:b3:a8:cf:f2:f9:f8:a9:df:57:fd:b0:43:26:68:fd:c0:97:
62:3f:29:87:d5:70:81:3f:4b:1f:55:71:d2:97:91:4a:e9:20:
d3:fa:92:01:26:7a:2b:b0:c6:dd:bf:d8:49:e6:76:a4:25:29:
d3:9d:dc:fe:65:43:02:69:1c:9c:ba:13:ea:f6:d4:86:7d:a8:
97:67:46:e4:81:97:5d:5b:02:c4:40:3f:05:42:96:07:e7:81:
cd:39:e0:17:42:38:51:18:1f:58:57:4b:89:da:b6:2a:3e:85:
d6:0d:f6:2a:b7:49:07:07:6e:95:68:85:27:24:12:3e:9b:2a:
09:91:73:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTbROll/Kz1jKsHvfovNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOWEwOWM1MTA3ZTdlNDRjYTc4ZGM3MmQ1MTk3MzdlZDNk
ZDMxMWEwHhcNMjUwODEyMjIwMTQzWhcNMjUwODEzMjIwMTQzWjAzMTEwLwYDVQQD
EyhlYzBkNjg3OGI3NjA2NGMwYTY0ZjllNmQ4OTNjYTQzYTk3ODNlMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYGGVPyinx90SPpfKaoHuoWPtlI0
8CmWzdq5dlgYzbvyzmHc52c27WJPvhFbVEDJ37Ug0Av/tq1Q4RzyvjFJmrd7l5wF
5AqMBPb1+CZASEAmV0j+mBzPQTYJCJCfx9e6mPmtpr2OrMJ3rThc3nLOevCV591l
Lv7shhO8rfZF7tEnPOFtgBwmalNRd8oa/hRsu8Z844civpn3ox1nCi1Slp50SNPL
NBFoh4cSELRis48CrrymbEiBcSUls/cpeS3RwKuYAyz/Ti+363biG2YIWfg0uNNh
rb52uXueciTWFLDQu9/sWegQvkHkMe3/17YEfHQsKn/EvEIbwRwcTKHgbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwNaHi3YGTApk+ebYk8pDqXg+H3MB8GA1UdIwQY
MBaAFB2aCcUQfn5EynjcctUZc37T3TEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTct
NjMyMGEzNTZlNDM0LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTctNjMyMGEzNTZlNDM0
LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzC2C/qC
o7jWTvyB4OcruK8RC0IZUtmgbADyIZF38UpUbLaB9abpuxrhUDCF9V10Zt2Il6LY
bfE65+IbpoUIcBP1eeHAJuhAcw898iXVewQ0YtLBmGHbzLVvmO8AlvLuXiSXmkVo
UaP0W932aoOVTc/i36wFhVCulQpYfDyh0bOoz/L5+KnfV/2wQyZo/cCXYj8ph9Vw
gT9LH1Vx0peRSukg0/qSASZ6K7DG3b/YSeZ2pCUp053c/mVDAmkcnLoT6vbUhn2o
l2dG5IGXXVsCxEA/BUKWB+eBzTngF0I4URgfWFdLidq2Kj6F1g32KrdJBwdulWiF
JyQSPpsqCZFz7w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:36 2025 by rpki-client