Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: U2PeUnBG4w2AHBqkgPx0TzPdZlHE3Fh0RugYcfEk498=
Subject key identifier: 98:20:F1:41:FC:D7:66:8F:E7:D6:26:EF:D9:94:71:DC:D9:32:96:12
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 0197B70EA9998BEE09C72ACB2A2F4C9CBF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: bo9Zt5WveGJLmto-uiWetgZCX7Q.roa (hash: zzs00ivzGHR02cC1o3Qz5YlQGqmECC+fSU4iyTugi54=)
2: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: yt096zKJsO0gZfB31islJU0XZ9IP1FGryBcZhZfI9+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a9:99:8b:ee:09:c7:2a:cb:2a:2f:4c:9c:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=9820f141fcd7668fe7d626efd99471dcd9329612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:53:ce:bf:b9:89:92:ba:9c:81:51:f3:f9:
f6:b5:df:fc:c2:4f:86:3b:de:5a:aa:9e:f2:4c:58:
02:b2:5d:39:f2:7d:35:3f:bf:aa:cb:d9:0c:5d:fd:
a0:99:32:d2:4e:f0:51:17:74:bf:c6:4b:8c:e9:2c:
00:c2:ec:3c:b3:66:ea:11:e3:5e:b2:a8:cc:7a:c1:
fa:55:d2:2a:f1:83:6d:f2:89:d5:e0:4d:26:2f:88:
1e:9a:05:dc:df:d0:70:09:b6:fd:57:3b:57:46:2d:
d4:fc:79:e3:82:67:cf:32:fd:14:05:5e:e8:66:00:
3a:92:06:7d:09:27:3c:23:ed:72:8f:91:5d:1c:9d:
dd:8b:4b:dc:b9:6c:62:28:ae:99:f0:5d:9c:5e:c5:
26:68:1b:a2:b2:bb:06:3f:27:9a:0f:80:55:f9:a2:
64:7f:5b:d4:08:26:bb:18:fb:64:a6:45:22:69:a4:
cd:63:19:94:e8:1a:67:7b:61:91:21:4d:b3:88:d9:
28:43:63:9e:65:1f:42:d2:a2:88:a7:4f:f0:c2:7a:
01:94:a3:83:2e:21:5c:b6:1e:3c:70:87:46:16:9f:
d0:23:e0:e4:9f:15:43:8b:03:f6:be:e8:dc:ef:04:
66:ec:0d:a6:5b:41:f5:a2:b8:2d:d1:aa:07:8b:e3:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:F1:41:FC:D7:66:8F:E7:D6:26:EF:D9:94:71:DC:D9:32:96:12
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:13:72:82:a3:f2:8d:5c:43:ec:62:aa:ab:37:7f:69:c5:ad:
8c:f9:cf:2d:4e:1d:e5:15:5f:4c:24:11:09:e1:e5:ef:63:fc:
62:50:f7:82:3f:4f:55:62:66:1c:c4:90:7f:fc:17:9e:5f:0b:
c4:26:46:d4:5c:9b:0b:07:4e:5b:a5:cc:a8:7a:18:e2:34:0f:
2e:1d:98:93:20:fd:12:25:4d:38:26:52:04:9b:aa:e4:b5:f2:
b4:5e:a9:1a:2b:93:88:29:be:b8:ea:f6:3d:87:72:a9:4f:d6:
1c:27:e9:ba:34:c6:e5:e5:02:66:3d:0e:77:23:8c:75:37:63:
63:e6:d9:3d:99:51:1a:e7:ff:11:f1:9f:4f:e4:08:ea:16:de:
f6:35:67:1d:2b:dd:3e:fa:54:ac:be:60:54:5f:56:27:06:e3:
16:e3:27:ce:be:06:d6:1c:4e:0b:c9:c9:2d:7f:5b:be:84:b7:
97:72:fd:25:f6:41:0a:51:ba:9f:97:77:7e:93:dc:6e:44:6c:
76:fc:4b:71:1b:e9:69:79:e9:ab:bc:14:d3:04:9e:b7:95:a0:
a6:3b:66:1e:ee:04:a9:c9:55:87:fc:ec:18:b7:b5:6f:98:03:
7b:c1:a1:5e:e7:56:4d:ce:6e:f9:0e:93:a3:43:84:80:2f:2e:
14:60:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:46 2025 by rpki-client