Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: UUitT7aYDwGyZlmv1rZYbKj9jZU+1YnCHfNjc7slxes=
Subject key identifier: 58:03:7A:00:79:B9:22:E7:2F:7F:0D:9F:9F:D6:45:30:D8:F9:66:6D
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 0197CB39D298EA85FE6ED4CF6B4CECF5296F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 13:00:53 +0000
Manifest this update: Wed 02 Jul 2025 13:00:53 +0000
Manifest next update: Thu 03 Jul 2025 13:00:53 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: MERHOJ0JNVP8hz9N93fitaL3cz3aF7rPs5z1yylImto=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:d2:98:ea:85:fe:6e:d4:cf:6b:4c:ec:f5:29:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jul 2 13:00:53 2025 GMT
Not After : Jul 3 13:00:53 2025 GMT
Subject: CN=58037a0079b922e72f7f0d9f9fd64530d8f9666d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:45:01:43:fb:12:7c:0c:3a:91:9f:db:d5:59:
d4:f0:33:e3:91:9e:67:bd:8a:7c:70:91:b0:14:cf:
38:b3:2f:76:95:d8:a4:24:91:dc:9b:fb:eb:f3:ee:
97:ba:e4:27:1f:74:66:71:24:fb:f7:ba:4c:bc:3e:
fd:8e:58:17:22:f6:25:22:91:27:90:26:83:4a:be:
c1:89:7c:83:6f:86:2b:10:9d:95:e2:5c:b8:5e:e5:
f6:e0:f0:d7:53:e2:c0:51:41:23:69:ac:59:c4:f4:
c1:ce:d7:61:a2:4b:3f:98:06:a9:dc:61:e6:a1:93:
0c:95:65:ed:fe:ba:79:db:35:06:15:05:cc:89:10:
f2:cf:78:77:b4:16:b7:e5:a3:9d:aa:2e:b2:e8:7e:
3e:52:2c:25:19:bc:13:15:ef:49:9b:6e:24:ca:8d:
46:fb:eb:71:4e:45:55:29:aa:24:b6:e5:f7:cd:0a:
ae:4e:2a:17:a8:e8:c7:bb:8e:37:70:a9:06:81:0a:
51:d8:25:eb:4c:20:7c:c0:c6:11:19:54:38:d8:41:
03:2a:82:65:f5:1e:b4:88:d1:9b:53:a2:ba:22:6f:
54:01:2a:e9:be:9d:07:33:c3:05:86:f0:23:c9:81:
35:f0:88:f7:5c:d9:5d:04:7f:1f:d2:fe:20:76:41:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:03:7A:00:79:B9:22:E7:2F:7F:0D:9F:9F:D6:45:30:D8:F9:66:6D
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:79:18:39:ac:2c:78:bf:6c:68:a9:0b:9b:1e:15:60:fb:45:
28:ee:08:4e:fb:ec:e8:6c:7f:27:52:49:54:d3:06:a7:93:c1:
60:77:d7:c6:fe:35:93:75:49:c6:75:df:14:11:d4:9b:f0:7f:
b4:ae:a3:2c:59:7d:ee:f6:33:b4:80:ee:e0:79:f0:b2:c4:ce:
f3:1f:86:8f:02:bd:0f:6b:73:09:67:28:27:d2:f6:37:54:12:
3e:af:3c:7f:cd:fe:64:a6:6b:92:00:a6:14:f2:2a:09:8e:bd:
dc:7e:a2:65:a1:96:f0:12:dc:d8:5c:72:7c:bd:ec:0b:58:c1:
12:05:de:43:fd:db:e0:ae:fb:6b:d7:eb:21:fe:3c:a6:e1:07:
94:36:1b:ca:14:f9:fd:4a:a3:68:39:c8:e2:ca:a6:b6:08:62:
eb:7a:90:f9:fe:e0:6f:0e:c0:d5:9d:0d:4c:fe:57:a6:dc:46:
ad:11:97:cc:39:2d:15:3b:8a:f1:13:3e:91:9d:bc:14:f8:ac:
1a:3a:34:9f:ff:f9:ad:df:a3:f3:42:0d:c8:31:b9:1b:9e:92:
2a:eb:a5:b8:f6:82:21:f5:1d:92:7d:1c:6a:3a:b1:80:88:6d:
ce:f2:49:06:b9:a4:30:16:e1:2d:5b:d7:35:2d:8b:89:88:0d:
e1:14:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:34:37 2025 by rpki-client