
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: 47UD3VIYQQbp3I8JrzoeUSHh1YxwfyZfR0bWXyxRcWI=
Subject key identifier: 63:56:9C:6A:79:29:34:47:69:01:D6:43:B8:BF:3A:B8:B6:9E:0B:0F
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 0198D474366A72BED48339EBC9447655E15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 138D
Signing time: Sat 23 Aug 2025 01:04:02 +0000
Manifest this update: Sat 23 Aug 2025 01:04:02 +0000
Manifest next update: Sun 24 Aug 2025 01:04:02 +0000
Files and hashes: 1: 3xjGI42bQNLx70HTJ7kXgEwsSsw.roa (hash: GpJV9iaqS5V9Mqcyg97TbadTb1FKNWn4xyXU6QZ9kGs=)
2: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=)
3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: SPtaLNBLoSkJ66GWoISiuHFa3sVNdhbJhQCk+BhXlxY=)
4: NP32WyfLeYLas1Z4fKTZriuHjvY.roa (hash: 4h/Yftv2raMAxvFI+CPfL3bUOHVTko1YvlzTzC+9xKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:36:6a:72:be:d4:83:39:eb:c9:44:76:55:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Aug 23 01:04:02 2025 GMT
Not After : Aug 24 01:04:02 2025 GMT
Subject: CN=63569c6a792934476901d643b8bf3ab8b69e0b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:88:8a:9f:01:51:b2:e9:e1:d9:95:1f:a9:
33:b0:eb:ff:95:07:ec:65:82:68:95:65:78:b1:0e:
df:8f:ce:37:51:ca:28:6f:9b:7d:55:5a:f7:ab:38:
7e:d1:b3:16:75:51:2e:52:a2:df:52:64:64:42:f6:
bc:48:7e:d7:6a:6a:e5:9b:2d:4f:99:91:7e:7e:b4:
0b:14:ef:d5:6b:3f:1f:e4:c6:14:0b:d7:d6:73:be:
6d:d1:b8:c3:2f:64:63:98:a2:f3:88:4a:2a:50:ec:
00:0c:b6:d5:23:2e:99:3d:a6:7d:98:a4:68:8e:55:
4d:de:fc:18:69:c4:fc:65:d2:33:f4:91:f8:c8:42:
ae:9d:65:23:41:de:37:b4:80:40:5f:b9:67:d2:55:
a8:6b:65:86:fc:97:83:b1:e8:7b:87:f1:5e:14:5a:
a9:f7:76:b7:21:33:0f:c6:8c:2c:4a:aa:37:6b:3f:
39:8e:43:b1:d9:0f:1c:ae:e3:e4:36:07:5d:bc:dc:
d2:25:58:06:5c:e1:9d:2f:a1:63:be:36:ad:1c:01:
bc:f9:48:81:a8:77:a9:cd:57:23:b5:8c:2d:81:db:
ae:64:5d:01:d3:a1:99:8e:8e:c1:a9:db:a7:2d:b3:
41:bb:3a:a4:f3:6a:b0:95:11:62:69:32:ed:34:31:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:56:9C:6A:79:29:34:47:69:01:D6:43:B8:BF:3A:B8:B6:9E:0B:0F
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:ca:37:64:f3:d3:5b:e1:61:a3:eb:27:d4:c4:16:26:1f:
9e:a0:33:b0:0c:72:cc:75:d7:ad:6d:91:17:7e:38:3b:ca:65:
22:2a:a9:65:fe:c1:ea:6e:54:9e:13:78:64:fc:9b:cb:8c:5f:
a2:d3:38:58:86:13:f6:ad:c6:bc:01:9e:3e:df:37:6e:51:aa:
73:9c:44:76:36:6b:38:97:46:59:18:12:93:15:8c:b6:d9:6d:
dd:56:61:eb:dd:aa:04:8d:8a:10:97:7f:3d:ed:6f:9c:67:e2:
0c:da:b1:db:c9:e7:eb:05:68:5b:1f:7e:db:38:34:88:58:d4:
65:0d:59:73:32:ea:61:51:15:77:07:c2:44:a1:f5:7f:7c:31:
fc:87:dd:5f:f9:f1:92:08:54:e2:8c:54:a5:0c:d6:90:fe:13:
94:7c:10:e3:78:61:d6:06:9f:68:14:98:48:d0:64:9a:a6:84:
89:f1:55:f7:27:ee:87:bf:69:d7:3b:26:22:51:21:19:d8:66:
0c:f0:af:d4:ee:7c:39:e2:4d:90:da:ca:5a:4e:ca:7f:e9:d6:
e8:4f:83:99:6f:2d:3a:65:ed:43:e1:77:ac:8d:0b:75:27:b0:
5e:b4:42:9a:90:3e:c9:d6:cb:1f:ca:15:c3:87:de:9b:9b:e8:
bd:00:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:46 2025 by rpki-client