Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: xBhu0ItpTEhkfnyxwGhpxhYHgOpf0gS5Pul7d/N+Gtc=
Subject key identifier: 95:9E:47:A2:4C:2A:4C:0B:5C:06:54:AB:DF:99:ED:78:BC:1C:1A:AD
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 0199FCFD8421D202E0304A7E85693080382B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 0491
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: sRjHkITTs9kl68EQJmEQaCm4VNSzPbAbuogYqd0NdMA=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:84:21:d2:02:e0:30:4a:7e:85:69:30:80:38:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=959e47a24c2a4c0b5c0654abdf99ed78bc1c1aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:7e:d6:06:e2:fc:6f:44:7f:07:af:d6:5c:
0c:95:71:ee:61:eb:a7:d1:f8:8f:19:d2:7e:d0:b3:
90:27:51:d4:45:5a:93:04:ca:25:a4:6a:1f:a2:3a:
88:1b:ec:35:cf:19:da:3e:44:76:0b:c8:2e:a6:11:
e7:ac:20:16:3d:13:ad:82:19:e8:a2:6d:a7:65:80:
90:9c:1d:65:de:77:60:ac:dc:f6:08:10:1b:b7:36:
c6:96:b1:cc:dd:d3:2b:68:86:3e:4c:6d:29:7d:03:
b9:9f:6f:06:15:ab:ef:ca:5e:8f:85:db:29:b0:86:
6c:39:30:6a:a9:6d:3a:ac:0a:a8:41:e2:c4:25:03:
39:3d:d7:a9:e0:4f:9c:51:2f:b1:e1:09:32:44:eb:
4c:57:38:e7:c2:26:65:fa:33:66:9b:93:05:76:f7:
17:f1:dd:18:95:bc:3d:d3:78:ef:89:6a:65:d8:3c:
e6:fd:74:bf:ea:87:a3:b3:b3:27:64:79:27:19:14:
50:7c:64:b5:34:1d:97:7f:a9:49:d3:a7:28:e4:ec:
6c:9e:7d:1e:37:8c:64:c6:f9:3b:7e:39:af:fa:fc:
0e:c9:94:52:96:c6:00:0b:b8:c8:46:42:c0:96:6a:
28:af:f5:d4:83:51:71:9e:42:ea:82:5c:22:a4:72:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:47:A2:4C:2A:4C:0B:5C:06:54:AB:DF:99:ED:78:BC:1C:1A:AD
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fd:a1:85:7f:55:81:7a:df:ec:d5:8d:94:0f:be:91:f0:a9:
68:18:8b:d8:d4:1f:a4:58:85:65:9e:bd:70:2f:aa:ae:c6:46:
b5:62:57:13:f8:30:c4:fc:96:be:3e:a9:33:54:6b:f7:d4:80:
05:5a:4c:07:21:c0:30:0c:57:1c:96:70:fe:32:8a:41:ef:1b:
25:a0:93:fc:4b:97:ad:e9:c9:49:46:ae:d7:33:d0:5c:af:70:
e0:f4:38:de:ff:ee:7a:f8:b0:bd:af:d9:7f:69:44:d6:40:87:
97:26:07:dc:df:5b:96:5c:47:f9:f3:5a:7f:04:61:0a:57:45:
1d:bc:a1:7a:c7:6c:9d:b6:66:1f:58:9f:24:ef:92:04:bb:f5:
17:de:8b:5d:22:50:40:12:56:fe:a9:43:89:58:32:ae:ec:78:
c1:fb:e1:bb:93:ff:9d:d3:31:dd:7a:a0:04:21:11:5b:35:4b:
03:0e:ad:12:a6:a8:63:a0:da:75:c9:ee:a0:08:1c:1e:61:77:
ee:7d:5c:37:07:bf:30:2d:71:91:63:08:bf:05:ae:6c:b7:57:
5b:4a:9f:d7:86:dc:29:be:68:a5:5f:63:6c:8a:7d:60:f5:66:
1b:e2:4a:4d:7e:3b:e5:9a:3b:04:c9:f4:fb:53:74:e6:bf:d4:
8d:69:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:12 2025 by rpki-client