Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: iFWJBNP2KX/apP5v1h24PKJSg278oxCavJt+NjflG9s=
Subject key identifier: BD:63:75:26:1C:2F:07:DB:B8:25:8F:92:8A:A0:F5:4F:DC:59:51:7D
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 0198D404ACC4C7F82ED0BDA1CC29BA0384DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 164B
Signing time: Fri 22 Aug 2025 23:02:12 +0000
Manifest this update: Fri 22 Aug 2025 23:02:12 +0000
Manifest next update: Sat 23 Aug 2025 23:02:12 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: f+lvAk828Tx1w5zDKyH0FE3a8S91hBGNOVYRN4nJa+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:ac:c4:c7:f8:2e:d0:bd:a1:cc:29:ba:03:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Aug 22 23:02:12 2025 GMT
Not After : Aug 23 23:02:12 2025 GMT
Subject: CN=bd6375261c2f07dbb8258f928aa0f54fdc59517d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:42:96:d9:01:e3:d9:0a:79:e8:5a:2f:38:
f7:1d:72:c4:23:eb:bd:1e:48:d0:61:59:30:30:b5:
08:1a:74:4c:5e:64:a4:fe:45:2d:37:30:19:f6:94:
a0:3d:50:e9:96:fe:0c:8a:45:09:8d:14:10:e4:42:
8a:8b:e2:02:76:f4:15:51:13:8d:29:71:83:18:f0:
f5:f1:c6:09:1f:22:f9:15:9e:60:3f:f2:3e:ec:26:
a2:8b:8e:fe:a4:b0:3d:f8:21:06:ea:fc:bb:ce:37:
15:57:b9:80:44:f3:c3:5f:3a:5d:0e:0d:62:20:4a:
a7:09:18:97:a1:98:34:ee:9a:97:04:85:dd:de:66:
34:1a:6f:92:43:d0:bb:d8:8a:31:b9:3e:a5:0c:25:
3c:64:4f:ad:ea:46:07:fb:d3:76:31:fa:aa:94:a9:
13:ad:11:01:28:9a:ad:64:65:1f:02:db:61:34:dd:
cf:95:7b:1e:9b:0f:ce:e6:d9:aa:91:7d:38:ec:0f:
10:2a:80:d4:90:8f:94:99:e5:76:8d:ba:bc:be:52:
d6:47:aa:6d:8a:94:f7:32:a1:2c:ff:af:fe:3b:4d:
06:88:cd:ed:df:8a:be:dc:31:16:c3:4f:49:ca:66:
5f:94:58:9a:85:ad:52:eb:07:59:bb:cd:07:76:29:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:75:26:1C:2F:07:DB:B8:25:8F:92:8A:A0:F5:4F:DC:59:51:7D
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e1:b4:15:2c:f3:58:ea:01:fa:09:62:ae:45:5e:ed:44:9e:
84:d8:9c:b1:46:e1:46:63:be:99:f3:03:e0:e3:ef:55:6d:a9:
fe:10:a4:53:f4:48:96:63:87:b0:7e:8e:fc:83:e3:4b:66:49:
ff:d0:36:2e:b0:01:fe:af:99:07:b1:d1:46:97:87:af:88:50:
db:d8:1a:a9:9e:63:9a:db:d9:2d:04:fa:42:87:8f:1b:ae:81:
cb:55:34:49:fe:76:6f:45:26:0f:13:f0:a1:e2:ff:4d:7c:76:
58:cd:58:98:f7:8e:ca:c1:78:af:44:89:ef:50:8e:a7:3a:7d:
4d:1b:20:47:86:e9:3e:ee:b3:3f:3a:c1:b6:93:10:da:f0:8c:
79:84:30:db:58:fb:41:af:f1:8e:68:c4:6b:e3:89:e2:0c:7b:
35:85:7d:0f:59:e1:aa:f3:c6:e5:7c:f6:6c:c9:03:bc:f0:92:
6d:08:c3:3f:ef:0e:25:e4:ce:14:da:69:ca:35:fd:ef:dc:23:
f5:0e:f5:2c:ea:e8:cb:e3:aa:5e:f2:6e:df:9e:6f:96:76:57:
1b:db:c4:05:8f:49:ca:5f:ad:41:3c:56:10:e9:7f:28:eb:d5:
46:8d:2a:4f:22:e5:da:3d:51:28:32:51:0f:0a:63:7a:13:a3:
28:61:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:45 2025 by rpki-client