Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
File: hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft (raw, json)
Hash identifier: WXS8CPErE7xyQGVNbuoKlSNssLRNMVpeMTaEt2pieVw=
Subject key identifier: 10:2C:97:20:8D:76:E6:FE:53:65:68:70:C1:B9:8A:49:35:90:CD:2A
Authority key identifier: 85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
Certificate issuer: /CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Certificate serial: 0197B70F2431B5E31EBA19B038B7AB7E46B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl (hash: 69z2+ZnuRU7uTCuqwxJy9EUcZK+XzbnjOpc/IIAqywI=)
2: zES562T2jGbv7XzrHC02CT1oz_k.roa (hash: UbLmo0xCkOQvRcwSPHG5xE6YElRiJFtnaVmOwj9fHBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:24:31:b5:e3:1e:ba:19:b0:38:b7:ab:7e:46:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=102c97208d76e6fe53656870c1b98a493590cd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:2e:00:66:b2:b3:f7:a8:d1:c0:38:ba:42:
ac:27:7b:6d:df:3d:ec:d9:c3:fd:c7:5d:43:da:e8:
91:8d:36:8b:34:c8:ff:09:9e:91:01:58:ef:d2:03:
4c:58:f3:7b:65:2c:3d:62:7f:21:15:3f:e1:92:95:
72:6b:7e:dc:65:c7:40:c0:2e:68:8f:90:71:7a:e7:
0d:1f:1d:ab:95:e0:83:97:f6:62:5c:0d:02:42:14:
e9:75:52:e7:1a:d3:ae:31:0e:5d:7d:2d:50:14:36:
94:4b:50:e6:14:dc:2b:a9:a1:ac:18:3f:ce:17:10:
b1:c1:1b:1b:19:ed:6f:84:e8:d2:8c:72:11:b6:71:
18:e5:9a:fd:68:2e:55:c8:3d:b4:b8:0a:19:68:f7:
14:08:82:21:79:87:21:cd:ca:92:2b:12:f3:8e:d4:
26:f9:3b:5b:88:a7:82:59:5f:0f:fa:c6:d8:4e:4e:
9b:93:6d:d4:8a:d3:66:0c:4e:93:fc:07:5f:dc:b2:
22:d7:fa:03:61:79:94:33:10:2b:5f:e2:c6:c1:d1:
6c:e8:7c:9c:91:1e:16:36:f6:f3:0e:b4:56:ed:6c:
d9:0a:a2:51:46:52:40:41:fc:2c:2f:30:12:90:cd:
8e:e1:00:53:6a:4f:79:fe:e7:bf:5c:6a:2d:1a:23:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:97:20:8D:76:E6:FE:53:65:68:70:C1:B9:8A:49:35:90:CD:2A
X509v3 Authority Key Identifier:
keyid:85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cc:04:c6:2c:85:16:c1:36:59:8d:78:50:b1:4b:52:31:ba:
f9:05:90:15:45:6b:b1:a9:8e:e4:f2:eb:d1:aa:70:a9:38:35:
fd:87:60:ee:a2:e5:b7:e6:0a:67:98:a6:c7:ce:07:5f:f0:f7:
82:cb:bb:f2:bc:d5:7e:e2:f9:f8:65:22:ff:4c:dc:b2:5d:1f:
fe:d3:38:3f:61:77:33:e7:44:1e:4c:d2:f1:19:5b:af:49:04:
7e:d0:28:3e:ec:27:ac:94:7c:5c:38:39:0c:cb:66:9c:a7:59:
77:3e:37:28:04:0f:ea:e0:7a:02:62:8e:1c:9b:5a:16:1e:81:
a2:0c:50:26:32:5a:f6:fb:61:18:c6:ac:75:7f:a3:cb:1b:b1:
35:5a:0f:03:8d:2c:db:b8:05:94:26:b6:ef:4b:c2:2c:15:5e:
f3:35:05:3f:7a:c2:9a:d7:69:8e:9e:5f:47:ba:2d:29:6c:7b:
6d:cc:b7:9c:fb:aa:2f:5d:ed:70:c3:02:d5:e3:d7:0c:fc:f4:
d5:57:86:e8:93:34:5d:09:2a:a6:bf:e5:7e:29:7b:fe:2a:78:
20:3d:f6:7e:50:33:c7:09:c0:a1:ce:9f:cf:06:9e:03:11:6d:
aa:15:a3:04:7e:47:51:8d:f5:50:bb:a9:37:c0:89:09:58:b5:
ba:c4:92:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DyQxteMeuhmwOLerfka2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YmNiODFkY2QzZjI5MzE4ZjQwM2I4NDgxYmU0NGVjMWZm
NTUwMmUwHhcNMjUwNjI4MTUwMTUyWhcNMjUwNjI5MTUwMTUyWjAzMTEwLwYDVQQD
EygxMDJjOTcyMDhkNzZlNmZlNTM2NTY4NzBjMWI5OGE0OTM1OTBjZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuewuAGays/eo0cA4ukKsJ3tt3z3s
2cP9x11D2uiRjTaLNMj/CZ6RAVjv0gNMWPN7ZSw9Yn8hFT/hkpVya37cZcdAwC5o
j5BxeucNHx2rleCDl/ZiXA0CQhTpdVLnGtOuMQ5dfS1QFDaUS1DmFNwrqaGsGD/O
FxCxwRsbGe1vhOjSjHIRtnEY5Zr9aC5VyD20uAoZaPcUCIIheYchzcqSKxLzjtQm
+TtbiKeCWV8P+sbYTk6bk23UitNmDE6T/Adf3LIi1/oDYXmUMxArX+LGwdFs6Hyc
kR4WNvbzDrRW7WzZCqJRRlJAQfwsLzASkM2O4QBTak95/ue/XGotGiNOSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAslyCNdub+U2VocMG5ikk1kM0qMB8GA1UdIwQY
MBaAFIW8uB3NPykxj0A7hIG+ROwf9VAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJ5NEhjMF9LVEdQUUR1RWdiNUU3Ql8xVUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NjUwNjUtZGE0ZC00Y2JlLTkwNjEt
ODc4MWM0ZmUwMTFmLzEvaGJ5NEhjMF9LVEdQUUR1RWdiNUU3Ql8xVUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81NjUwNjUtZGE0ZC00Y2JlLTkwNjEtODc4MWM0ZmUwMTFm
LzEvaGJ5NEhjMF9LVEdQUUR1RWdiNUU3Ql8xVUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaswExiyF
FsE2WY14ULFLUjG6+QWQFUVrsamO5PLr0apwqTg1/Ydg7qLlt+YKZ5imx84HX/D3
gsu78rzVfuL5+GUi/0zcsl0f/tM4P2F3M+dEHkzS8Rlbr0kEftAoPuwnrJR8XDg5
DMtmnKdZdz43KAQP6uB6AmKOHJtaFh6BogxQJjJa9vthGMasdX+jyxuxNVoPA40s
27gFlCa270vCLBVe8zUFP3rCmtdpjp5fR7otKWx7bcy3nPuqL13tcMMC1ePXDPz0
1VeG6JM0XQkqpr/lfil7/ip4ID32flAzxwnAoc6fzwaeAxFtqhWjBH5HUY31ULup
N8CJCVi1usSSJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:06 2025 by rpki-client