Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: 1/0MbP0/OwbBriw9ZDe7H71Gs8e+C9SgpMSu4/NLxT4=
Subject key identifier: 6B:21:B2:23:B3:5F:D2:66:25:98:20:0F:2E:87:86:CC:16:01:FE:5E
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 0199FC5847E286493BB3473C4F72586F6E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 05D1
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: RZb06WJNp88eBjvvE0a89eY5s6kx1g3M2WSfUjYDkEQ=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:47:e2:86:49:3b:b3:47:3c:4f:72:58:6f:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=6b21b223b35fd2662598200f2e8786cc1601fe5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:66:d7:cf:5c:88:c8:ea:08:6e:8f:da:26:87:
06:eb:d1:7f:c8:f3:1f:de:ae:97:4e:8c:15:66:18:
1b:42:9d:06:32:0e:1c:f1:e8:68:db:1f:d9:8a:99:
45:f4:b1:17:1e:b8:d2:57:ec:6a:42:61:95:35:79:
90:2a:77:d9:4a:2c:c5:5c:b3:29:71:d0:54:40:c6:
e4:1c:94:2a:7d:cc:05:a1:cc:11:c7:c9:52:0a:bb:
36:2e:3f:71:d3:9d:a8:00:ca:a5:4d:7c:24:77:49:
11:a0:f6:bd:b2:8d:b1:98:75:f8:fe:45:eb:f1:14:
67:6b:cb:19:de:3e:2d:cc:bc:d7:a6:80:9b:61:2c:
5d:85:4e:2e:cb:96:c0:87:9e:60:35:d0:92:14:ed:
cb:4b:3a:16:be:3f:33:f1:14:05:58:b8:cc:d3:58:
b1:a9:c8:c9:e6:ea:8f:2c:e6:81:29:01:60:61:5f:
c3:1b:da:dc:59:58:2d:94:44:a4:4f:9a:47:cc:db:
18:a7:5f:50:02:5e:c0:40:04:4c:b8:95:6c:45:be:
20:97:25:6e:b4:62:fe:5b:b7:44:38:13:ca:c5:c4:
df:94:bd:90:d2:a3:06:d1:29:c1:34:f7:d0:e8:aa:
3d:94:b0:3b:8c:01:2c:d0:59:33:a2:87:cf:0b:6c:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:B2:23:B3:5F:D2:66:25:98:20:0F:2E:87:86:CC:16:01:FE:5E
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:df:a0:e2:19:e7:69:2a:8c:32:89:e9:c1:36:cd:b7:bb:66:
ad:14:19:94:4a:8f:d0:3c:1e:6b:2d:75:b8:bc:8a:23:d8:65:
b3:c2:66:c5:bb:d7:a3:ef:b5:ab:8d:eb:d4:89:13:30:de:47:
4f:bc:bd:aa:8a:21:76:e2:bf:39:77:9e:9f:7a:10:d6:f8:ac:
53:64:74:60:e5:07:10:e2:bc:44:cc:a5:8c:4a:22:e2:47:95:
e4:97:a0:bc:ed:2b:bb:f6:f1:00:cb:6b:72:22:76:e6:3f:af:
84:7f:13:da:ed:ae:7e:65:e6:a9:cc:f1:b4:8d:5e:9f:23:24:
9a:13:f1:22:0e:20:5a:94:b4:ca:e2:e4:87:3e:ae:36:1e:08:
c5:bc:19:c9:e8:92:be:a2:bc:44:1e:8e:91:75:03:d3:74:dc:
97:33:60:3c:e0:12:ec:d1:9e:b3:f7:98:27:6c:23:02:b7:c4:
fc:c7:c4:ef:e9:91:f6:d4:5f:3a:08:8e:8c:74:6c:7b:5d:03:
3a:07:f2:a9:5d:3a:6d:09:79:b5:10:b0:fd:c3:fb:76:d8:78:
76:b7:e9:e8:18:53:dd:36:4d:1d:b7:c7:a6:70:1b:11:22:bb:
50:33:d7:56:3f:ba:5a:7a:fe:59:d1:13:b6:1b:88:ae:eb:05:
9e:f6:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:50 2025 by rpki-client