Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: RavilP2kzRSiyve23CSbga7Utn8UigRD1/lymwB9xtY=
Subject key identifier: 87:EE:98:5F:6E:E6:0D:16:36:7D:EF:D7:3A:F4:0D:43:17:55:77:9A
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 0198D4E06CBCD72FF2BA3D4FD9D61C48A058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: bo9Zt5WveGJLmto-uiWetgZCX7Q.roa (hash: zzs00ivzGHR02cC1o3Qz5YlQGqmECC+fSU4iyTugi54=)
2: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: xlJl86KuDcK4uwnuukHCXKDPHcUn9XeoTcelJX8S8kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6c:bc:d7:2f:f2:ba:3d:4f:d9:d6:1c:48:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=87ee985f6ee60d16367defd73af40d431755779a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:32:78:14:02:c6:db:81:09:61:51:a1:86:
36:69:ea:fa:54:26:85:cf:a7:26:1e:88:bc:f2:62:
87:a4:72:a2:0a:22:2e:53:72:5a:4a:b2:41:74:1d:
ae:76:94:33:ad:02:b4:cb:fb:2a:1d:c3:e6:d3:db:
58:39:d5:af:9f:a9:d7:5e:3c:39:44:fb:da:78:f4:
30:b0:5f:0c:24:2e:1c:75:de:8e:98:2c:e1:a0:fb:
53:fb:4c:31:4a:20:c2:a2:0f:9c:0b:c4:f6:f7:d7:
f8:68:2d:b8:e8:8a:fa:00:50:fb:1d:3a:74:96:98:
0a:56:62:34:98:59:d1:cb:06:7e:54:17:c2:58:b8:
76:7e:52:7b:aa:70:49:ea:17:82:89:c7:d6:3f:c9:
4c:fd:3a:19:22:3a:73:1d:20:35:8c:84:03:a8:6e:
d5:e8:64:d3:2e:90:18:0b:a5:76:ff:84:b3:6f:15:
3b:73:34:b0:c0:b6:53:ed:15:6b:78:41:ea:78:0f:
00:9c:66:c1:4d:37:e4:19:5b:42:e6:9a:bc:12:e1:
07:9f:5a:61:d5:58:fd:dd:af:f2:58:7d:d6:ed:b6:
49:9e:86:34:0b:a1:89:2a:ee:c7:ff:4f:d3:14:1d:
bf:d4:52:4c:7e:d5:87:cb:d7:70:cb:c5:d5:a9:cb:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:98:5F:6E:E6:0D:16:36:7D:EF:D7:3A:F4:0D:43:17:55:77:9A
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f3:7c:f5:77:30:01:22:d3:6d:58:72:74:8d:5a:53:77:f3:
f9:5d:ff:11:83:28:d6:de:4b:c1:8c:70:a8:b4:c7:15:c7:00:
58:ea:e7:fa:44:8e:72:5b:84:0d:89:2b:25:5e:86:e1:18:43:
3c:19:55:9e:3a:86:ce:89:73:cb:67:68:3d:41:4a:1d:2f:ba:
5d:48:1c:18:24:75:c2:48:dc:bf:3e:92:3e:10:6b:a3:78:22:
5f:5d:3e:d5:3c:6d:ef:7b:36:ca:01:69:5f:8b:17:b3:35:fe:
fa:19:8d:7e:f0:b0:df:0c:b4:b4:d7:db:1b:94:af:f4:19:5e:
4d:72:40:72:5e:8d:10:68:60:3c:ad:a0:e4:dc:54:11:09:6d:
ed:16:5b:ed:3c:55:65:6f:04:52:50:58:fd:93:3a:78:83:32:
a0:20:f4:2b:c5:4e:eb:88:65:8f:fe:b8:46:ed:e8:f0:14:67:
3d:1b:5b:b3:6a:50:f5:d6:cd:7e:7a:9a:07:8c:06:d2:89:fc:
48:f3:c7:d7:ff:43:bb:be:69:a8:de:fe:14:38:12:1e:76:f6:
66:fd:40:ba:01:76:80:24:52:b0:63:6c:94:0e:15:b9:4f:e8:
9a:d0:16:e8:f9:fe:02:fe:a4:c4:61:12:4f:af:39:2e:8e:32:
47:c2:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:28 2025 by rpki-client