Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: H00xoTIdEAgw2Y6oOgP/nkKrIcdH0ZLH0VfvibO4XV4=
Subject key identifier: BD:C5:B0:DE:C5:65:C0:DF:86:D1:EC:E9:95:61:74:8B:97:5B:85:38
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 0198D47411A4EE97787403380E662D28737F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 14B0
Signing time: Sat 23 Aug 2025 01:03:53 +0000
Manifest this update: Sat 23 Aug 2025 01:03:53 +0000
Manifest next update: Sun 24 Aug 2025 01:03:53 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: WoHL04e1oTnzzS1R2aBZGTso7ulQGgjvdoYKvwgX1Aw=)
2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:11:a4:ee:97:78:74:03:38:0e:66:2d:28:73:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Aug 23 01:03:53 2025 GMT
Not After : Aug 24 01:03:53 2025 GMT
Subject: CN=bdc5b0dec565c0df86d1ece99561748b975b8538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:e6:8e:91:3b:2f:dd:2a:77:16:bb:13:b8:
6a:50:f0:82:d9:d2:06:ea:db:4e:e6:0f:86:d1:a3:
18:53:2a:ec:57:68:9f:31:52:ac:c8:59:9c:42:fc:
34:01:a1:92:42:e0:06:77:fb:5a:1d:30:52:c6:d5:
cb:02:23:a5:64:d2:31:15:48:28:6f:e5:41:9d:01:
91:f9:7d:14:cd:eb:df:0d:02:66:19:3a:cc:be:c5:
76:ae:ad:38:c1:85:fb:32:b9:aa:c4:db:2a:97:f6:
07:95:6b:fa:a2:18:84:27:ab:5d:93:6c:69:18:f3:
8e:ec:ec:11:b0:1e:78:5c:9a:c6:5f:97:98:7a:e3:
da:a6:ee:a8:f0:68:71:09:07:d6:4c:4b:57:4b:07:
1b:4d:cb:71:3a:89:d4:27:c4:dc:38:34:7c:12:4f:
b9:a8:15:2b:35:c0:ab:66:1d:85:ea:c2:8b:9c:dd:
71:95:03:b0:a3:63:6e:8a:a0:34:b3:4a:13:d6:be:
27:f5:67:5d:48:31:66:47:da:67:8e:e9:ee:f0:f4:
98:fe:d9:34:8c:04:e5:e6:53:df:15:37:dd:e7:b2:
8b:db:9a:18:ff:ae:6c:4a:1d:1f:d3:a3:b1:d2:c9:
a4:8d:04:37:a2:19:76:de:b0:c8:60:20:91:b9:7d:
2e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:B0:DE:C5:65:C0:DF:86:D1:EC:E9:95:61:74:8B:97:5B:85:38
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7e:0a:52:18:40:35:1e:af:fa:33:0d:0d:37:c5:61:ea:60:
b5:9c:4c:58:be:68:cc:29:b2:41:6b:6d:b4:83:52:0d:d3:d2:
05:62:6c:6b:ac:c7:19:78:d5:8e:8b:85:30:06:d6:34:cf:fb:
61:92:f6:df:aa:76:97:ea:1a:a4:61:7b:5e:cf:9e:ff:57:84:
d5:95:bb:58:ef:56:e9:3b:8c:14:b6:5a:7f:0e:4d:b6:0e:a9:
ef:ed:9d:9c:6d:a0:7e:2f:d9:4c:62:a4:85:f5:1c:d2:c0:00:
25:bd:be:bf:04:1c:08:15:ce:e2:61:d0:05:56:b3:7a:6b:97:
53:58:c6:1d:fb:18:a6:96:82:af:b4:bf:db:f0:16:00:e1:b4:
69:62:b1:fe:ee:bb:7d:6b:96:23:3f:bd:a6:8f:49:82:f3:33:
2c:3d:2d:23:81:29:38:2d:f8:76:ef:67:0b:83:23:7f:d0:4a:
c0:bc:2d:da:f7:1a:bb:93:db:1f:14:e6:52:f4:d9:f3:32:e8:
53:20:7c:b7:21:3e:b0:2c:58:45:24:7f:79:f3:33:fc:02:9f:
c2:d6:6b:49:11:46:e8:1d:b3:55:38:94:85:19:60:19:ba:f7:
2b:2a:d0:81:ca:01:51:f6:90:32:1f:bf:a5:4f:69:1e:5e:f9:
93:73:2d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdBGk7pd4dAM4DmYtKHN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOWEwOWM1MTA3ZTdlNDRjYTc4ZGM3MmQ1MTk3MzdlZDNk
ZDMxMWEwHhcNMjUwODIzMDEwMzUzWhcNMjUwODI0MDEwMzUzWjAzMTEwLwYDVQQD
EyhiZGM1YjBkZWM1NjVjMGRmODZkMWVjZTk5NTYxNzQ4Yjk3NWI4NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqvmjpE7L90qdxa7E7hqUPCC2dIG
6ttO5g+G0aMYUyrsV2ifMVKsyFmcQvw0AaGSQuAGd/taHTBSxtXLAiOlZNIxFUgo
b+VBnQGR+X0UzevfDQJmGTrMvsV2rq04wYX7MrmqxNsql/YHlWv6ohiEJ6tdk2xp
GPOO7OwRsB54XJrGX5eYeuPapu6o8GhxCQfWTEtXSwcbTctxOonUJ8TcODR8Ek+5
qBUrNcCrZh2F6sKLnN1xlQOwo2NuiqA0s0oT1r4n9WddSDFmR9pnjunu8PSY/tk0
jATl5lPfFTfd57KL25oY/65sSh0f06Ox0smkjQQ3ohl23rDIYCCRuX0uJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3FsN7FZcDfhtHs6ZVhdIuXW4U4MB8GA1UdIwQY
MBaAFB2aCcUQfn5EynjcctUZc37T3TEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTct
NjMyMGEzNTZlNDM0LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTctNjMyMGEzNTZlNDM0
LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn4KUhhA
NR6v+jMNDTfFYepgtZxMWL5ozCmyQWtttINSDdPSBWJsa6zHGXjVjouFMAbWNM/7
YZL236p2l+oapGF7Xs+e/1eE1ZW7WO9W6TuMFLZafw5Ntg6p7+2dnG2gfi/ZTGKk
hfUc0sAAJb2+vwQcCBXO4mHQBVazemuXU1jGHfsYppaCr7S/2/AWAOG0aWKx/u67
fWuWIz+9po9JgvMzLD0tI4EpOC34du9nC4Mjf9BKwLwt2vcau5PbHxTmUvTZ8zLo
UyB8tyE+sCxYRSR/efMz/AKfwtZrSRFG6B2zVTiUhRlgGbr3KyrQgcoBUfaQMh+/
pU9pHl75k3Mt4g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:08 2025 by rpki-client