Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: j4BQMJu3NQBpMnvFBm2zdzL+JuSSpWXfnRvYqUWKuWU=
Subject key identifier: ED:BB:6D:3A:DA:46:0F:2F:35:50:B3:CF:2A:7F:AA:94:31:DC:67:E6
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 019A01B65950014D11D010055A88EB0C514F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 154C
Signing time: Mon 20 Oct 2025 13:01:58 +0000
Manifest this update: Mon 20 Oct 2025 13:01:58 +0000
Manifest next update: Tue 21 Oct 2025 13:01:58 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: 39dl5FPT9CGbvVm02HFmJudKxKPAEohPUobWSNUsOBs=)
2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:59:50:01:4d:11:d0:10:05:5a:88:eb:0c:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Oct 20 13:01:58 2025 GMT
Not After : Oct 21 13:01:58 2025 GMT
Subject: CN=edbb6d3ada460f2f3550b3cf2a7faa9431dc67e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:08:05:09:41:81:4c:8c:38:0d:80:4a:15:
ce:33:75:28:bd:ee:ba:ec:ae:65:83:5e:9a:2f:da:
3a:68:44:d0:03:44:61:fc:ea:70:5a:ea:b7:b9:eb:
b1:51:d5:1b:98:7d:1a:5a:1e:60:70:de:f3:c0:d1:
ba:59:55:e8:2e:c4:c3:28:93:02:6a:7d:ff:8a:32:
31:8d:8a:4f:05:9f:b4:1d:02:df:d4:79:1d:e6:96:
b6:31:1e:42:ab:d0:a4:19:7a:f8:ed:84:21:da:ac:
24:f5:3f:47:06:ee:0c:15:21:63:df:e9:a5:72:cb:
ad:aa:a1:d7:b5:06:cb:1e:d7:c7:b7:97:e2:d0:f9:
b7:52:e3:e5:c5:ad:f4:c4:cd:1a:61:49:5a:56:15:
ba:c2:ac:c1:58:0a:2c:81:db:f5:72:d8:55:c4:89:
4a:85:b4:7c:47:41:a5:df:0e:2d:0f:58:b2:75:86:
c1:e2:f5:f5:b3:df:77:26:95:18:f3:75:98:e3:01:
d5:7e:06:d3:c9:3e:93:4d:60:ea:6d:16:4b:87:ff:
b5:89:9f:cb:e5:f2:3e:ab:35:c3:cb:77:b4:24:aa:
20:fc:95:9f:77:2c:86:00:60:df:57:65:30:09:52:
60:0d:77:16:91:df:8d:de:12:8b:0c:d8:a2:37:a0:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BB:6D:3A:DA:46:0F:2F:35:50:B3:CF:2A:7F:AA:94:31:DC:67:E6
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:2e:e9:29:49:ba:2e:ca:66:45:b7:39:7c:50:aa:a3:6e:
69:af:bc:cc:c3:11:0b:6f:81:cf:ff:a3:bd:1d:b9:16:40:6a:
d1:2c:b1:68:cb:aa:e0:eb:5e:03:d7:df:89:34:83:02:3f:58:
90:03:46:86:c3:4e:34:b5:31:01:66:59:c5:3f:bc:bc:cf:42:
e1:39:da:dc:8d:06:98:58:99:b7:66:8f:ba:62:65:81:13:c5:
c0:f0:3c:1b:71:8c:9a:22:6e:ac:09:35:6f:8b:03:2c:6f:0b:
b9:c1:2b:3b:60:f5:de:0d:ac:4d:03:26:8e:73:77:fe:8c:80:
03:cc:d1:03:82:fe:73:ce:95:88:3c:83:96:56:65:3e:41:48:
dd:ee:04:30:45:ea:0e:24:95:6b:e6:50:c2:2d:03:50:63:f4:
7e:8a:20:3b:c0:e4:7b:48:46:e5:7a:d7:de:03:f5:55:a7:15:
8a:50:67:b4:05:b4:f0:15:4e:f8:60:6a:a9:09:b3:c2:d9:c4:
e2:4f:05:04:f7:41:16:c8:18:98:bf:e9:e3:04:29:c4:1c:5f:
f9:81:fb:7d:62:a0:02:25:bf:72:82:88:07:97:79:b4:69:dd:
e4:51:01:9f:00:53:a3:5d:bc:1c:a3:47:cc:b3:21:97:da:ba:
de:19:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:42 2025 by rpki-client