Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: zrGTnVnVdMY8GVfe78ZKdPOmBeN1TmQgRhhKkqhR/xE=
Subject key identifier: 1F:AC:A5:08:56:EC:A7:D7:3D:DC:6B:BF:0F:E4:67:64:90:CF:0D:33
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 0199FD6B62EF64AE9E066A14BA51C160AADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: cvK9Cl/Jmd9sWGl5E4suYwscPVHjPs3Hi4AqTXfSNqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:62:ef:64:ae:9e:06:6a:14:ba:51:c1:60:aa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=1faca50856eca7d73ddc6bbf0fe4676490cf0d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:26:b6:d7:5a:7f:b4:58:c3:cc:55:f4:5a:
42:b5:31:b8:38:85:a0:59:29:72:20:92:4c:0e:e8:
26:e8:59:1e:bb:5a:9a:1c:9a:de:c7:b4:df:09:21:
af:00:d6:85:e2:9f:bf:91:44:d5:4e:e6:b7:07:a8:
41:00:38:6b:1e:71:1f:25:e2:51:55:a5:da:d5:50:
01:23:6f:ec:f6:bf:ee:32:f4:cf:8a:37:df:91:be:
b5:e7:6e:8a:0c:e9:85:4c:b4:8a:37:73:e0:7a:66:
a1:61:aa:d5:d3:59:52:97:98:28:c3:f2:1a:90:db:
86:fd:8b:00:85:1a:6d:3d:4f:7c:cf:35:f8:3c:de:
23:7c:9c:99:5c:d0:0e:69:99:7a:c9:33:0c:9a:5b:
bb:bf:ac:37:51:72:cd:09:ba:d1:e0:6c:7e:0e:95:
a0:66:e8:63:95:bc:c2:1d:ff:be:c0:7f:32:35:18:
c1:07:20:78:43:43:d3:f3:2c:b2:9a:96:65:b6:30:
34:43:b3:20:84:54:05:98:c4:9a:bc:13:dd:a6:35:
06:bc:dd:78:9b:1a:77:57:24:6e:92:79:c6:d5:ec:
30:bd:66:e6:48:e3:7a:77:ca:d9:e7:68:ac:f3:83:
b0:49:ff:16:04:9e:02:10:97:91:68:09:ee:11:6c:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AC:A5:08:56:EC:A7:D7:3D:DC:6B:BF:0F:E4:67:64:90:CF:0D:33
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:16:53:66:e7:4d:de:f6:0e:c3:d0:54:0c:3a:5e:5d:f8:
75:a5:2f:8a:ce:03:a2:cd:a3:9d:23:05:11:a3:73:dc:f4:26:
db:b4:45:be:0a:67:1e:7b:9b:e9:18:2d:19:24:c0:fa:da:cc:
ee:68:af:64:cb:02:be:2a:6f:dc:4f:3b:c2:00:9a:6a:db:e7:
f0:f9:f7:d0:04:8c:90:69:3e:46:72:9a:f1:8f:01:27:7c:6c:
2f:5e:49:90:e0:4e:ea:49:69:62:e1:7b:17:ff:21:64:96:62:
a9:92:cd:93:3d:ff:d9:e6:d1:a4:e7:99:49:46:3e:e1:58:39:
61:b4:ef:ab:40:aa:85:c7:b8:cd:9f:52:41:15:11:14:f1:be:
d8:75:17:6e:6a:51:57:94:41:fe:ff:59:85:46:63:4a:9d:5c:
2b:2a:27:b1:6c:4f:41:6e:76:50:c6:ac:33:7f:b5:c8:0f:95:
ff:1f:e9:49:f8:92:7d:6f:33:ba:b2:9a:77:a3:93:e5:26:f3:
81:95:d9:20:55:77:e0:6b:f6:c9:a4:c9:06:9b:2d:c7:ce:fd:
8e:85:d9:30:67:ea:2a:92:d9:71:c3:06:37:9f:1f:28:af:a7:
4c:db:8b:3f:4b:5d:8a:32:1b:47:c8:bd:23:23:df:0b:4b:f7:
96:17:3d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:37 2025 by rpki-client