Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: BQ3PZgzbH/1/uuTqnuxwmSjDzjK0RpvKqmVkILDtZXc=
Subject key identifier: DA:A5:45:AB:60:FD:19:25:A3:1D:10:9F:0C:C4:A9:9B:26:AC:22:5E
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 0199FD342821D0EEF21756B9DAA917B78EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: ZyX0RJ35b2/2m5xOrZ6VCi35E/HIHZyFiJTUsH3sep4=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:28:21:d0:ee:f2:17:56:b9:da:a9:17:b7:8e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=daa545ab60fd1925a31d109f0cc4a99b26ac225e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:4b:d4:8d:a4:06:70:99:ef:0c:93:4e:84:
20:e6:60:8d:e7:f1:6d:03:20:22:98:a2:fe:84:de:
c3:4c:76:58:24:c9:5e:18:3f:0b:2f:0e:01:d3:1f:
e1:8e:40:94:96:3b:58:c8:2f:1f:41:7c:1b:f3:ad:
3e:60:82:3e:94:19:18:71:0b:14:bb:38:b3:76:51:
2c:5b:a2:e3:4d:7a:68:af:68:04:4c:f3:27:e1:17:
20:8a:13:51:fb:b8:ea:0b:1f:06:8c:10:6b:d5:5f:
0e:e9:49:f3:ae:de:99:73:91:4c:99:2a:b5:d6:56:
e2:c9:cf:21:95:74:4a:03:f5:68:39:fc:2d:4a:e1:
9e:99:aa:d9:df:71:89:80:f1:46:c5:01:a9:31:2e:
86:a2:00:95:ac:89:00:7f:ae:b8:6d:d0:3c:13:49:
aa:8e:0b:3a:d1:8c:21:86:31:00:42:b5:40:f3:47:
32:b8:85:a5:e5:4f:bb:b0:96:1f:15:00:c2:55:bb:
67:ce:5a:38:a6:54:f8:c4:a8:8b:fb:02:19:b5:5b:
83:4b:3c:48:e6:65:d5:10:1f:9e:05:02:c1:e5:02:
39:20:24:9c:91:8a:77:4d:50:37:56:ca:8c:83:7f:
a7:35:3a:f6:59:b1:e5:bb:5b:c6:db:25:e7:66:ca:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A5:45:AB:60:FD:19:25:A3:1D:10:9F:0C:C4:A9:9B:26:AC:22:5E
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:63:f9:a2:05:1d:02:fe:5e:a5:05:79:97:07:56:52:55:dc:
eb:63:c1:cb:3c:99:09:fc:ba:d2:75:5c:2a:34:5a:05:8b:b8:
d6:2f:02:01:ac:78:5f:73:67:d8:03:b9:2a:af:52:76:be:78:
74:56:5a:b5:20:05:06:63:d3:62:73:44:e6:31:32:46:87:10:
1a:d8:db:ec:2d:0c:54:f0:04:6b:60:ba:76:97:86:67:44:17:
04:85:e4:77:82:db:08:1e:56:60:23:f0:88:55:92:4e:6d:85:
ba:b9:cf:e7:15:72:92:88:11:17:23:1e:24:b6:f0:1f:f3:3c:
30:5e:08:4c:6e:a1:22:b4:cd:41:eb:c1:63:12:c6:43:21:e4:
80:8b:51:8c:32:33:b4:16:bf:3b:80:c8:4b:32:53:22:c7:57:
5b:0b:d1:82:da:35:f5:3c:fd:58:1d:41:df:b4:0d:53:1a:d0:
45:c8:4e:e8:e9:59:cd:5f:db:37:e9:94:5e:df:42:8a:f9:47:
a5:f9:e3:50:b5:b7:11:43:71:37:75:ab:b2:22:92:0f:e8:b3:
96:a8:0a:0f:54:3e:c7:05:be:23:6e:89:31:90:02:fe:7e:40:
3b:95:f2:65:bf:b9:99:c0:b3:00:a7:16:ee:c6:9e:4a:5b:67:
88:32:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:56 2025 by rpki-client