Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: 0XDZ18cJgH/Zs0OVE2shyKLy6vdPXjCG8bHWzg2trJU=
Subject key identifier: D8:66:8A:28:29:67:38:4D:3E:AA:ED:28:59:5D:1E:5C:D2:FB:46:EE
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 0197D39A1ADB3C2F762152D46A29944760D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 1308
Signing time: Fri 04 Jul 2025 04:03:01 +0000
Manifest this update: Fri 04 Jul 2025 04:03:01 +0000
Manifest next update: Sat 05 Jul 2025 04:03:01 +0000
Files and hashes: 1: 3xjGI42bQNLx70HTJ7kXgEwsSsw.roa (hash: GpJV9iaqS5V9Mqcyg97TbadTb1FKNWn4xyXU6QZ9kGs=)
2: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=)
3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: u5lqckqwNoBWRkEO/UtddpPOE2FQ3egrRkjTCgomQZs=)
4: NP32WyfLeYLas1Z4fKTZriuHjvY.roa (hash: 4h/Yftv2raMAxvFI+CPfL3bUOHVTko1YvlzTzC+9xKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:9a:1a:db:3c:2f:76:21:52:d4:6a:29:94:47:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Jul 4 04:03:01 2025 GMT
Not After : Jul 5 04:03:01 2025 GMT
Subject: CN=d8668a282967384d3eaaed28595d1e5cd2fb46ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:01:d0:a9:f2:d2:6f:c7:2a:69:ab:87:33:
76:3c:33:85:99:f8:8e:b7:a5:7f:92:52:e4:67:ff:
af:ff:d6:35:94:59:ae:7d:52:30:49:7b:3f:96:9b:
d1:fd:04:f1:bd:33:da:2e:f7:86:dd:ab:6c:e1:07:
5e:e5:a5:f8:32:03:58:5e:be:3f:c9:5a:0c:c5:e2:
29:ee:43:b8:06:bf:19:88:c1:5e:f2:28:7f:5a:b4:
19:00:64:df:5c:d6:29:d2:0a:73:ae:c2:59:17:5c:
2d:9b:31:b7:c0:b4:82:a7:a2:05:43:e3:5a:32:66:
cb:76:ac:ab:2d:ff:1e:dd:8c:e3:9b:9e:b1:20:21:
2c:80:a9:cc:e9:9e:7b:56:c7:f6:3a:ee:0e:e4:cc:
e6:fd:eb:90:45:cd:c0:44:e1:74:9a:f4:68:1c:a3:
b3:46:7d:b5:48:28:dc:81:91:3e:b9:8f:89:ce:49:
28:24:7d:f3:b0:3e:11:92:43:b8:19:14:86:fc:22:
0d:f7:0b:58:ed:d7:e4:e0:78:d9:5a:97:85:2b:8c:
7f:0a:76:df:c9:52:cd:41:53:ed:3f:44:e2:61:9d:
dc:fe:dc:9b:05:0d:22:4d:3a:bc:27:37:30:95:23:
6a:cf:da:9f:cc:10:d4:99:8c:f7:ac:e6:37:bb:f8:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:8A:28:29:67:38:4D:3E:AA:ED:28:59:5D:1E:5C:D2:FB:46:EE
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b2:e6:03:c3:49:5d:da:69:11:a2:e7:7c:c4:96:c5:76:8e:
ae:52:a9:c6:f9:1e:9f:0b:70:24:9b:13:f8:a5:33:29:99:78:
70:00:b2:36:98:d1:ff:bf:0c:84:90:33:08:99:0f:fc:db:67:
21:df:dd:82:9e:b7:1e:b7:93:6d:d8:71:81:71:73:85:53:34:
de:ea:26:18:36:c4:1e:bb:cf:b6:e4:fe:a9:6b:ec:d1:92:04:
a3:74:35:0c:63:73:39:6d:e0:29:63:fc:bb:7e:4c:7f:44:ac:
9b:57:24:c1:a2:5f:5e:67:1a:64:cf:b2:b6:d4:30:d6:e1:65:
59:6e:76:e7:4a:b6:43:e6:93:2c:6d:1a:e6:f7:81:b0:eb:10:
87:69:f2:e0:2f:70:d2:51:1a:d4:89:76:31:b5:68:2a:fd:80:
8a:51:04:e1:62:a6:3b:df:97:e4:35:ed:3a:6e:a2:88:c9:21:
e9:4d:ea:60:65:ce:a2:8f:46:23:c3:7c:de:17:50:11:65:3b:
f5:30:8d:59:da:84:42:b7:41:12:0f:41:ac:d5:c6:6c:8f:85:
d1:f7:be:3f:33:98:18:20:5e:56:66:2f:64:aa:0c:1a:14:d2:
de:05:12:6e:a9:78:6a:77:35:9f:4f:79:75:f3:da:c1:d1:94:
d3:df:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:16:55 2025 by rpki-client