Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: hzzRF6IHzsejbJ5/1x9dc4D3BYsHvh6zhX1LQvgJ0F0=
Subject key identifier: 66:4A:EA:01:52:5F:6D:6A:7B:CB:1F:FF:BA:46:BC:E9:17:95:45:90
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 0198D5BC411583976B4F5286F99535BE851E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:02:21 +0000
Manifest this update: Sat 23 Aug 2025 07:02:21 +0000
Manifest next update: Sun 24 Aug 2025 07:02:21 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: iMGLTAXDlxe/wg9pRuTU+dVhhGq2AJ2B9GVFvyBRmIA=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:41:15:83:97:6b:4f:52:86:f9:95:35:be:85:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Aug 23 07:02:21 2025 GMT
Not After : Aug 24 07:02:21 2025 GMT
Subject: CN=664aea01525f6d6a7bcb1fffba46bce917954590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:d1:77:52:3a:37:d7:5e:f8:f1:53:1f:fc:
06:d1:4f:18:30:15:7a:44:39:7b:7c:de:84:b7:bc:
39:c4:6c:a1:a0:dd:e5:c6:d9:dc:5f:c8:66:f4:1d:
a2:a2:ba:54:a9:54:58:4b:03:16:40:9c:64:45:7a:
f8:7b:52:b3:f1:55:21:25:6a:5c:34:9b:e1:76:90:
29:57:14:6f:02:b9:40:48:ce:ec:9a:10:26:a8:b4:
59:0a:8b:31:58:51:b7:aa:d2:88:89:42:57:00:61:
22:fa:4b:9d:c6:2c:da:62:88:55:13:73:f1:8d:03:
c4:cc:b7:20:36:22:a9:85:75:07:f7:da:c0:4d:d6:
d9:68:54:28:12:6f:d9:dc:78:28:2a:a3:ab:a4:dc:
94:55:35:f0:00:6b:b0:55:22:15:6a:53:cf:fd:50:
c5:0a:c0:f0:2a:47:10:fe:78:4b:8b:1e:b2:84:d0:
a2:d8:4c:96:c4:e5:3e:38:38:d5:47:4c:76:55:65:
da:44:cc:8f:01:7e:c7:5e:d3:7c:1c:7a:5a:83:5b:
e6:4d:0e:e1:e8:3b:49:da:f3:42:5d:7f:72:70:43:
6b:c4:64:c9:88:40:ae:c5:14:cc:99:53:58:9d:a3:
0f:ca:93:45:10:6a:23:14:cb:4f:8c:8b:21:35:6f:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:EA:01:52:5F:6D:6A:7B:CB:1F:FF:BA:46:BC:E9:17:95:45:90
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6a:ed:65:67:3d:bb:d5:75:35:a5:d4:61:0e:67:ab:88:57:
16:1a:e7:f0:69:ee:d4:45:e0:b6:25:5e:08:69:9a:ea:8c:ba:
a9:6d:93:f2:81:88:36:67:b7:c3:09:37:1d:b6:7e:fa:16:09:
f8:f3:dc:49:83:7d:64:98:10:41:78:a2:aa:1d:3b:f7:43:1a:
cd:1c:bd:e8:5e:52:b2:d7:95:1b:52:2c:40:24:9b:0d:53:44:
8c:89:d5:47:27:91:0b:b1:07:69:86:90:33:32:95:1e:19:60:
48:2a:ad:a0:78:08:b8:87:2f:ac:76:ec:4d:d7:bf:73:66:ee:
7a:4f:ef:90:28:e1:0b:7f:7a:14:83:3d:5d:6e:72:2b:f0:3b:
0c:ff:a9:40:9f:3e:2a:f6:41:22:4c:05:f4:02:7d:de:b9:b9:
59:08:a8:97:a3:9d:a8:87:2d:c2:a1:13:76:1d:ac:d9:20:fc:
18:42:6c:4e:09:c1:10:ac:f0:fe:e2:13:2b:0c:1b:3b:9f:da:
1e:59:33:13:f7:e5:6a:cf:01:7c:e3:88:35:10:9d:67:b5:b8:
a3:82:3e:2d:59:8c:c3:17:b9:45:5c:d6:00:4c:2b:9c:25:5e:
79:77:a6:21:91:9d:2c:9e:5f:31:88:30:c9:28:a2:1b:92:0b:
19:17:bb:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvEEVg5drT1KG+ZU1voUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh
YzY2NTQwHhcNMjUwODIzMDcwMjIxWhcNMjUwODI0MDcwMjIxWjAzMTEwLwYDVQQD
Eyg2NjRhZWEwMTUyNWY2ZDZhN2JjYjFmZmZiYTQ2YmNlOTE3OTU0NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZTRd1I6N9de+PFTH/wG0U8YMBV6
RDl7fN6Et7w5xGyhoN3lxtncX8hm9B2iorpUqVRYSwMWQJxkRXr4e1Kz8VUhJWpc
NJvhdpApVxRvArlASM7smhAmqLRZCosxWFG3qtKIiUJXAGEi+kudxizaYohVE3Px
jQPEzLcgNiKphXUH99rATdbZaFQoEm/Z3HgoKqOrpNyUVTXwAGuwVSIValPP/VDF
CsDwKkcQ/nhLix6yhNCi2EyWxOU+ODjVR0x2VWXaRMyPAX7HXtN8HHpag1vmTQ7h
6DtJ2vNCXX9ycENrxGTJiECuxRTMmVNYnaMPypNFEGojFMtPjIshNW+DrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZK6gFSX21qe8sf/7pGvOkXlUWQMB8GA1UdIwQY
MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt
OGYyZDY2ODRjODE0LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0
LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmrtZWc9
u9V1NaXUYQ5nq4hXFhrn8Gnu1EXgtiVeCGma6oy6qW2T8oGINme3wwk3HbZ++hYJ
+PPcSYN9ZJgQQXiiqh0790MazRy96F5SsteVG1IsQCSbDVNEjInVRyeRC7EHaYaQ
MzKVHhlgSCqtoHgIuIcvrHbsTde/c2buek/vkCjhC396FIM9XW5yK/A7DP+pQJ8+
KvZBIkwF9AJ93rm5WQiol6OdqIctwqETdh2s2SD8GEJsTgnBEKzw/uITKwwbO5/a
HlkzE/flas8BfOOINRCdZ7W4o4I+LVmMwxe5RVzWAEwrnCVeeXemIZGdLJ5fMYgw
ySiiG5ILGRe79A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:34 2025 by rpki-client