Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
File: hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft (raw, json)
Hash identifier: OQHybaeup0Hb0P5bPhNo59SUPwc6G7Ei5NMDVe7w8Qw=
Subject key identifier: 1B:E4:65:7E:5F:66:EB:0B:E9:88:B4:D8:ED:DF:ED:D6:62:3C:E3:40
Authority key identifier: 85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
Certificate issuer: /CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Certificate serial: 0199FC5871A881897D4CA7BDACB7AB0866D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl (hash: JpU2aFxU2mNBIAIGGDA0SMZpzbZPksVFDsTbvUl4ew0=)
2: zES562T2jGbv7XzrHC02CT1oz_k.roa (hash: UbLmo0xCkOQvRcwSPHG5xE6YElRiJFtnaVmOwj9fHBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:71:a8:81:89:7d:4c:a7:bd:ac:b7:ab:08:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=1be4657e5f66eb0be988b4d8eddfedd6623ce340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:15:5f:2a:b1:c8:0d:dc:62:2c:b2:c7:82:
e4:49:7c:e7:aa:e6:ee:28:7a:aa:cf:78:12:36:40:
f0:3c:3f:7a:cc:65:46:3a:79:7f:3e:97:9a:6c:af:
24:6e:ae:24:49:10:07:bd:22:2d:2d:e5:fc:b9:5e:
ea:b0:b2:93:c5:d3:44:e6:07:fc:8d:bf:87:1f:d9:
13:40:5c:fe:10:28:09:df:7e:9f:13:65:32:b3:05:
3c:1d:56:6c:22:b3:ba:03:a6:29:71:ac:90:00:e9:
b1:0a:7b:d3:92:b8:93:53:c1:d7:5c:5a:b2:9a:75:
4b:4f:8b:ab:f3:0e:0b:37:a4:3d:d4:55:55:0c:ca:
72:c0:2a:2a:c9:3f:c6:e1:f9:8d:56:eb:05:62:ca:
ee:d2:b9:04:a1:43:76:b4:68:ea:5d:82:65:2d:13:
bd:09:0d:ff:4a:bc:8a:30:cf:8d:62:32:23:df:f6:
09:c3:17:00:7c:4f:55:6d:a5:62:19:6d:a4:44:dc:
e4:1d:12:5c:15:0b:14:8c:64:19:21:35:61:86:33:
c0:39:87:87:c9:32:58:0e:35:c6:03:48:6c:27:db:
bd:4a:50:9d:4d:48:8f:38:92:a3:7f:6d:39:87:1a:
97:0a:1b:93:fc:65:d4:0e:23:5c:b5:59:1a:74:5d:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:65:7E:5F:66:EB:0B:E9:88:B4:D8:ED:DF:ED:D6:62:3C:E3:40
X509v3 Authority Key Identifier:
keyid:85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:41:3f:03:18:fc:3e:c7:4c:36:56:7d:94:0e:82:9d:cd:f5:
33:7b:b6:7e:64:7c:39:f7:3c:f1:65:5f:ca:f8:11:a6:09:cf:
a5:91:ef:c4:ed:e0:af:c4:99:f5:e0:47:e9:3a:29:6b:a4:d4:
65:e3:0f:28:08:86:2c:e8:62:ec:e6:50:d4:69:cd:ee:47:75:
86:b1:d5:5c:c9:37:91:65:40:41:06:d2:8d:03:27:41:fc:6e:
79:f0:ea:79:a3:44:4e:9a:b7:86:c0:30:42:e9:05:ad:2c:27:
c0:be:d6:82:30:d5:3c:fc:08:b9:ab:e7:df:6f:53:6b:07:de:
24:41:e7:c1:22:07:11:c8:92:c9:f4:7f:5a:81:8f:73:b9:42:
b6:9a:1e:95:d3:d5:72:1b:21:5a:8a:9c:f2:82:3c:f5:15:52:
94:72:9d:12:e2:1e:39:af:a1:6e:ed:8e:0d:e4:3d:9d:5f:d5:
1f:d1:ef:fa:85:ec:24:31:da:3f:13:e4:f6:7d:df:47:3b:e8:
89:d5:80:06:0c:e5:4e:76:50:ca:39:79:d2:38:d1:dd:78:78:
84:ac:ed:b7:1c:0c:6b:8c:63:18:25:84:78:ca:0d:65:1a:de:
aa:03:69:39:ab:39:7a:ea:e3:f4:9c:32:72:da:c0:b1:bf:02:
22:7e:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:51 2025 by rpki-client