Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: Od1hKFENnHhNodFssWe9xwx6qwUgBk5SSnW6rRDJj4k=
Subject key identifier: 23:62:63:08:40:AA:9C:4F:79:CF:82:C7:6F:8B:D8:8F:F0:CD:31:AA
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 019A4EF4A6D7AB4A17C455E9E699EA3934D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 1574
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: Gqc5HWN7k0QYij0rOUTqv5j6rlqEULlPnantSzOWczc=)
2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a6:d7:ab:4a:17:c4:55:e9:e6:99:ea:39:34:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=2362630840aa9c4f79cf82c76f8bd88ff0cd31aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:2d:28:cd:e8:e5:bc:a4:1e:dc:0b:91:6c:
4d:49:9d:b0:74:21:c5:7d:74:da:98:5c:a4:ce:21:
58:5a:de:e7:17:fb:a4:ff:df:ec:c6:10:f2:69:96:
3b:e6:eb:56:76:0b:17:2e:94:83:e2:b8:af:e4:71:
af:dc:37:52:1c:b2:e9:fc:0d:0b:ea:6a:07:33:1c:
e6:a1:f4:56:6d:67:b2:b3:9d:1c:44:78:17:bd:16:
e1:36:9f:4f:97:6b:06:f8:c9:fb:44:99:f6:61:5b:
95:07:8a:ea:bb:05:ad:23:78:0c:47:31:e1:38:69:
3c:b8:06:0f:73:4f:76:79:14:76:02:a1:8a:74:aa:
7c:51:12:06:63:cd:e9:28:38:14:71:3a:27:74:99:
3c:79:d8:6d:94:08:21:4c:07:7f:6d:93:07:47:04:
e6:33:73:ae:d9:8e:f4:32:5b:de:75:d0:05:cf:32:
15:5a:1f:a0:88:72:33:63:4d:a4:2b:2a:6a:8a:21:
3e:48:a1:90:67:1c:c7:25:8d:8c:fc:e2:ea:c9:92:
d5:28:97:22:23:d1:07:93:8d:9e:a8:09:ce:de:6f:
f0:4d:1f:2b:c0:89:16:a3:80:d7:fd:ea:20:f7:45:
1a:4e:65:07:d4:90:6d:86:36:7d:9f:77:1b:c1:2e:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:62:63:08:40:AA:9C:4F:79:CF:82:C7:6F:8B:D8:8F:F0:CD:31:AA
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:59:8e:9b:e7:54:98:32:0c:ff:8f:2f:c2:08:10:8f:b4:c9:
30:05:c1:3c:38:60:b9:0a:a7:ae:a7:33:2e:03:a3:de:63:ee:
6d:45:f4:02:f6:ed:a9:2b:91:a2:9a:15:9c:84:f5:b4:8d:30:
20:ed:6f:36:c5:fa:8f:4c:f1:f8:29:39:75:54:44:c0:92:c2:
e3:7e:75:b6:6a:af:c0:c7:60:5c:45:96:b6:1d:09:b0:85:a6:
56:4a:88:15:da:1d:79:ba:bc:41:e6:80:27:17:78:15:95:72:
65:9c:a6:37:08:e6:73:5a:7c:ce:86:ab:91:26:97:2d:0f:8b:
7f:41:97:f8:9e:97:20:a4:5a:2c:f7:a8:62:a7:8d:29:dc:f7:
fd:81:04:5b:ec:67:78:d7:f8:11:a7:37:2e:ff:92:9f:56:de:
1d:52:a4:ed:e5:39:74:f5:89:17:ae:75:3a:83:fb:7a:b3:de:
3d:b7:f0:14:c5:df:44:9f:88:b3:d2:0b:b9:dd:ad:62:10:5e:
7c:e5:f7:ba:e0:38:79:83:c1:39:99:0e:74:8c:68:4d:be:08:
5b:89:66:7f:c1:ca:4b:09:b5:f6:db:32:09:0e:41:a5:59:df:
fe:8b:19:eb:c4:9c:5a:39:d5:16:19:3c:df:3f:1c:cd:2f:8f:
a7:ca:48:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:06 2025 by rpki-client