Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: 56EuIf3CP9D6QL+/yf1rXlzzt/SKIsRisqRYg4qqi3A=
Subject key identifier: 69:29:D2:C6:24:05:D3:8E:45:C5:83:21:FE:1D:90:28:CB:6A:A9:8F
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 019A00359CADE8280790EBE10D4A788BCE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:44 +0000
Manifest this update: Mon 20 Oct 2025 06:01:44 +0000
Manifest next update: Tue 21 Oct 2025 06:01:44 +0000
Files and hashes: 1: bo9Zt5WveGJLmto-uiWetgZCX7Q.roa (hash: zzs00ivzGHR02cC1o3Qz5YlQGqmECC+fSU4iyTugi54=)
2: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: rbJtprXvUemUxDrGsw0HBp7Tl/+mpRlSr2KpSaLYWVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:9c:ad:e8:28:07:90:eb:e1:0d:4a:78:8b:ce:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Oct 20 06:01:44 2025 GMT
Not After : Oct 21 06:01:44 2025 GMT
Subject: CN=6929d2c62405d38e45c58321fe1d9028cb6aa98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:bc:09:37:e0:af:16:8b:22:22:a4:99:d8:
02:e6:e4:74:af:64:bc:92:07:2d:69:57:aa:a4:b2:
33:0b:47:f1:b1:fd:af:22:9f:b2:63:c2:8a:c8:f4:
7b:c5:d9:69:0e:33:46:2e:9c:1d:71:ab:fd:b1:13:
7f:29:99:bd:a1:f5:8f:80:99:4c:54:48:76:8e:1b:
e5:51:20:ee:81:3b:ae:38:63:8b:51:c1:c7:11:2f:
65:14:78:21:5a:8e:e2:83:b4:49:30:3c:36:b1:21:
63:23:59:ec:9d:c4:d4:dc:16:4c:0d:bc:ec:08:ea:
d1:47:65:8e:53:f0:d5:1f:af:f7:68:d0:46:67:87:
ae:a5:67:9d:a3:69:18:62:04:58:b0:c8:eb:47:4c:
54:b1:ec:7b:7e:3a:63:8f:be:eb:f1:6d:cc:71:13:
d7:12:7e:3a:f0:06:d3:ef:ed:f9:06:71:7b:92:47:
40:0b:42:a0:46:89:a7:75:10:bd:3d:25:3f:49:5d:
38:ad:98:01:67:97:c9:ad:95:17:2d:da:d8:5a:af:
fc:02:1b:1f:5b:a4:e0:62:47:79:1d:f0:0e:ca:2e:
a2:76:71:46:82:e2:db:10:94:ba:f1:d3:27:3b:ef:
28:fc:eb:f2:e1:df:2b:f6:33:03:d9:53:ea:3c:dc:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:D2:C6:24:05:D3:8E:45:C5:83:21:FE:1D:90:28:CB:6A:A9:8F
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ba:32:b4:7e:13:3c:d6:9b:a1:f0:70:c1:4f:d8:63:70:77:
e2:10:f9:dd:2a:70:84:04:d5:bb:6e:ef:95:f3:e9:5b:79:13:
c6:8f:32:11:cd:2e:36:80:bd:4d:77:33:c4:56:99:9a:35:de:
1c:69:55:8c:81:87:17:a4:f2:1d:8a:0b:13:3f:ba:a1:21:91:
60:c9:41:09:6d:ff:94:70:97:fb:c0:cb:fb:6c:67:e9:3b:0f:
d0:0e:4d:b4:26:36:5e:14:84:7d:c0:93:88:87:d4:7e:a7:1c:
54:01:62:51:e3:9b:af:4b:27:fa:b7:49:c1:28:6c:5c:e2:f2:
0b:07:79:0f:b3:c2:9a:25:f2:63:8c:52:ad:2b:88:63:7d:56:
5f:4d:18:4f:f3:2c:2c:59:99:c1:b3:be:5a:3d:19:94:5e:7f:
7d:7e:f9:2f:bf:ab:9f:0d:d9:b5:9f:5e:91:4f:69:cd:83:bb:
46:2f:65:9d:f8:57:e6:a9:76:8c:65:50:4f:90:c1:98:91:3c:
35:23:e4:a6:a8:52:10:5b:4e:f4:eb:0c:11:d3:ac:40:2e:b5:
a0:75:18:e2:f1:05:f8:2e:54:87:33:04:2e:93:49:ba:6e:cc:
4c:e5:59:a3:4a:6c:a5:4f:02:72:ee:8b:5d:71:b0:19:24:4b:
7f:95:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:41 2025 by rpki-client