Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: N2EcFDxyFtrVVr25pkRsFN7j7A0KaDPSMic/rjAlcI0=
Subject key identifier: FA:13:72:4B:D8:88:67:71:79:5F:32:A7:F9:28:09:A4:35:D8:63:32
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 0197B820D114F03A63BB615B6A92C7DD4E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: vTHRbzsqvFhZhqNUlI2RB6Id517oxuW3j1a4Ubga3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d1:14:f0:3a:63:bb:61:5b:6a:92:c7:dd:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=fa13724bd8886771795f32a7f92809a435d86332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:04:d6:8f:5d:b7:3a:ba:b2:3b:26:69:1a:
aa:81:35:f9:36:5e:40:67:51:86:ca:f1:c0:1d:39:
81:4f:b7:ea:bb:93:20:45:34:03:1c:da:93:2d:de:
e6:a3:9c:94:0a:18:91:9f:2f:84:95:b6:13:9c:70:
b5:89:96:67:51:83:72:1c:06:fe:4d:a7:e9:f3:af:
ad:f0:67:df:e3:be:1f:33:76:ad:fc:f2:89:9a:db:
1e:77:17:2a:cc:e9:61:40:10:fa:9f:15:0e:a4:ec:
47:a3:f4:99:d0:dc:20:dc:eb:45:22:76:87:f6:bc:
4e:33:16:37:15:ab:a1:f0:bb:cc:00:d8:97:d1:bb:
81:ed:eb:b3:dc:ef:70:af:53:87:6a:2d:99:4a:66:
26:17:7c:e9:91:98:ac:77:ac:ce:0b:dc:b8:30:5e:
c6:bd:0e:94:a3:be:8f:64:f1:a1:54:db:e8:d9:0c:
3f:c8:dd:8c:2c:59:53:d4:a4:e9:1c:42:9d:c6:03:
86:ad:a7:df:13:a7:83:1b:06:e1:da:08:28:64:aa:
98:9f:de:4e:44:f4:25:e5:e6:44:90:d9:b6:a6:f3:
28:ac:8a:8c:f1:f6:01:aa:10:e0:31:2d:66:dc:63:
39:03:37:bd:dd:37:51:d7:af:1a:ac:7b:7b:84:f3:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:72:4B:D8:88:67:71:79:5F:32:A7:F9:28:09:A4:35:D8:63:32
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:20:e4:fc:cf:03:b5:c6:10:8a:bb:4e:30:46:e0:f7:25:e9:
11:07:c5:25:92:0a:23:1b:ff:61:f8:2c:0c:40:20:e2:2b:35:
57:d4:24:4d:18:73:09:78:13:e5:5f:e9:79:d4:63:0f:57:e9:
ac:63:db:1d:47:d2:24:67:6a:fa:8a:3e:9b:d1:36:40:ca:38:
96:73:84:2a:3e:f4:97:3c:68:38:9c:96:cc:00:5f:68:27:e6:
c0:2b:ae:0c:9b:f1:8c:81:2b:41:5f:af:16:47:7f:9f:a4:9f:
ee:b9:c8:4e:ab:f1:89:f2:72:8c:09:3a:89:78:02:3a:87:90:
5b:7c:1d:44:61:32:a4:54:a9:c6:17:1e:ac:2e:c2:21:6c:e0:
58:fb:26:85:ff:f6:9b:90:3d:5e:bf:99:69:77:8d:e8:60:4d:
6d:15:d1:a4:8d:05:77:dc:16:29:58:e6:74:9b:b3:93:a1:20:
2b:11:86:b1:01:6c:9b:64:6d:7e:76:6a:80:ac:12:10:ab:52:
06:af:11:77:56:45:57:f1:8a:95:fd:bb:ff:c1:3f:36:e7:21:
27:e2:f8:d1:58:06:00:2c:dd:56:fd:73:99:3b:93:42:8d:54:
75:99:49:2e:f5:a0:84:ac:d1:76:04:f4:78:8b:1e:1a:fa:c2:
10:b2:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:20 2025 by rpki-client