Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: RPUUn4Bo6+JMCXuarWBTbWDZm626LSzV4Fa+EGJoR74=
Subject key identifier: C2:7F:8C:E9:C4:DE:3E:AB:BA:32:CC:A9:41:22:77:5B:87:B1:5A:C0
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 0198D5BBE522120B1E6BFF3762607ED759DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 10D8
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=)
2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: G3sbJgf6CkJMi5rSdB3+2RdB9q/y0qDdLw1GK/GTpn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e5:22:12:0b:1e:6b:ff:37:62:60:7e:d7:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=c27f8ce9c4de3eabba32cca94122775b87b15ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:e9:ba:2d:a8:71:e4:31:a7:09:68:a3:07:
55:4b:30:52:2c:8f:34:39:91:00:15:ea:fd:f1:84:
47:18:2e:43:c6:f9:0d:66:69:4b:1b:54:8c:ec:aa:
65:5b:4c:f3:c3:26:3a:f5:1c:e3:3d:42:1f:01:2f:
e4:f6:67:b7:e8:60:07:b7:62:01:7d:94:36:7d:d8:
4f:5c:d4:03:33:f8:b4:3a:01:48:43:d4:9f:55:9d:
cd:23:0e:e3:66:28:db:0d:9e:5c:a9:e5:0c:f7:35:
41:55:5a:33:1a:27:bd:46:e4:ae:e3:f7:0c:50:f5:
dc:d1:56:70:2f:39:1c:73:e4:f5:18:65:8e:10:e9:
0e:0c:e6:54:e4:28:93:68:7e:68:fa:b2:3f:f7:92:
51:21:fc:7e:6e:da:9f:8a:90:f5:f5:3e:84:56:c5:
52:9f:e3:fc:db:eb:fe:7e:53:d6:33:05:cb:2c:19:
13:d5:ac:a3:e7:bb:f1:b4:48:80:11:2c:cd:e2:af:
8d:c8:1a:ed:dd:c2:38:79:0d:6a:98:81:dc:ba:e7:
d5:aa:d2:98:ed:5b:60:72:ac:10:fe:11:77:be:e3:
b5:8e:98:22:f3:ee:b3:41:be:c8:b3:52:02:c0:47:
b3:d4:93:ce:14:02:34:4c:5b:83:bd:f4:16:90:e1:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:8C:E9:C4:DE:3E:AB:BA:32:CC:A9:41:22:77:5B:87:B1:5A:C0
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5b:be:de:02:d1:e9:07:4c:53:33:80:7e:e2:02:45:7d:85:
0e:33:37:6e:5f:20:71:d7:05:17:26:9a:ad:a8:de:0c:c5:a2:
5c:b8:90:ce:8e:79:65:7d:28:b4:6b:b8:07:ff:09:04:35:68:
08:c8:83:60:56:54:ab:f7:2f:ef:1b:13:95:1b:89:65:f9:e2:
7f:77:2c:a1:f7:df:16:3f:a7:11:e0:73:32:d5:da:31:95:4d:
f0:d8:87:04:c8:7b:89:67:9b:8e:13:ce:18:f2:58:43:98:f4:
56:58:dd:11:2e:1f:3c:ce:b8:7f:2c:e1:df:c0:a3:e0:9b:17:
13:2c:bb:e5:cb:a9:43:1a:c7:35:8c:20:01:5c:6d:9e:13:47:
e1:82:9b:92:46:e7:c3:ae:d9:fe:69:1d:7f:5d:f4:ab:11:a5:
fb:fb:b4:52:e3:75:bd:27:eb:66:e1:31:e8:0d:b9:d0:b8:58:
50:4e:5f:56:9b:14:d0:d5:62:e7:46:31:be:55:27:6f:4d:4e:
3c:ad:5f:51:19:78:9b:48:a2:e9:87:f3:de:01:5f:3e:1b:bb:
2e:5a:f9:3b:9f:26:cd:e5:de:a2:42:65:8d:9b:92:0c:97:1c:
09:34:a8:08:6d:ba:e1:eb:c2:cb:e0:e6:b0:87:78:26:d4:99:
b2:d8:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:34 2025 by rpki-client