Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: 726jI1pze+Uw0gRMbGc6YKYBam8a1U91uxF/x7v1p+Y=
Subject key identifier: 20:C8:94:94:92:17:4C:0D:01:B4:DB:B9:6C:E0:AC:8A:3D:C7:9A:25
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 0197B7B37741B3FACD06B8725475B43EEB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 0364
Signing time: Sat 28 Jun 2025 18:01:21 +0000
Manifest this update: Sat 28 Jun 2025 18:01:21 +0000
Manifest next update: Sun 29 Jun 2025 18:01:21 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: 2K1/utI64Z/QWt4CT2Wte12X5hN19GFD+OCW1niq+gY=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:77:41:b3:fa:cd:06:b8:72:54:75:b4:3e:eb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Jun 28 18:01:21 2025 GMT
Not After : Jun 29 18:01:21 2025 GMT
Subject: CN=20c8949492174c0d01b4dbb96ce0ac8a3dc79a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:68:dd:69:69:26:86:62:66:da:1c:39:50:
01:62:13:42:fd:24:62:78:71:e8:b1:74:74:1c:21:
d6:51:4d:cd:60:b2:4f:dd:b6:36:dd:83:78:39:02:
98:31:8e:20:91:94:09:29:d6:1e:bc:38:a3:81:9d:
98:fb:09:a9:f9:8f:bd:60:6d:c0:56:76:82:fd:c8:
df:76:26:ad:24:70:14:75:fe:02:a0:a3:9c:ab:2a:
c8:25:b3:2c:81:77:da:f7:b7:e5:3a:ca:bf:74:0f:
2b:dd:c8:12:95:fb:55:af:15:65:99:98:43:f3:b7:
b2:0e:7b:39:e4:de:4d:5e:d4:1a:0e:1a:a1:20:88:
d7:e1:4d:c4:a4:69:07:da:4e:82:ab:d0:3d:94:2c:
54:15:c5:b2:ab:0e:46:0e:a0:e3:a7:41:14:d5:88:
3a:67:74:8a:fc:62:6e:15:42:0a:6f:3c:21:7e:59:
f0:28:c1:f0:ae:37:95:84:a1:4c:4f:7c:ee:98:17:
ab:ba:84:9e:cd:ca:bc:1c:5c:99:b5:c4:51:9c:11:
11:fb:0b:47:83:50:e1:87:44:88:30:ae:6b:c7:8b:
82:aa:d8:b3:11:a6:78:85:a9:3e:bd:b9:86:32:1e:
d5:de:1b:84:7f:dd:3d:f3:73:c9:f3:7c:81:0a:39:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:94:94:92:17:4C:0D:01:B4:DB:B9:6C:E0:AC:8A:3D:C7:9A:25
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:b9:36:d8:74:ed:24:85:cd:d8:58:f7:4a:5a:ce:e8:d3:
8e:5e:f8:e2:2e:20:b9:a2:e9:0b:03:a3:a2:39:3a:da:1b:aa:
89:ea:c2:6c:86:3f:c6:b2:29:12:39:e1:1a:12:18:2e:51:52:
e8:fd:b8:22:ef:e6:27:84:58:da:00:f8:20:8a:4c:0a:d6:13:
7a:0a:34:20:4e:b8:98:84:6f:6e:dd:58:2e:7b:10:fe:fc:2b:
21:eb:8a:a0:50:df:b7:8f:85:61:62:9c:e9:b7:ac:3c:d7:e6:
2b:7e:5f:bb:1b:4c:90:f0:95:d9:9f:53:8a:00:1c:4a:51:82:
03:15:93:72:41:73:5f:c4:a3:f6:57:73:93:05:13:88:1f:50:
fc:93:e5:d6:ef:b3:3f:f8:00:f2:e8:37:65:c5:f4:c3:8a:aa:
11:dd:73:17:f6:64:8e:61:07:32:b6:6c:c0:7a:b4:ee:c1:14:
5e:40:ba:fa:cd:56:79:22:83:86:69:af:c1:4b:d6:43:a2:c8:
3a:80:d2:a8:92:ac:d1:d3:96:6e:8b:64:6c:e6:48:91:89:02:
32:e4:47:a5:ff:b1:25:1a:94:35:d6:3c:a4:50:1c:6b:d5:90:
3f:e9:d7:a5:9c:06:f9:28:b2:0c:e1:46:79:7e:f7:19:7c:61:
ca:8c:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:37 2025 by rpki-client