Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: GE8utKNm3auYF1s53OfeFsr2eD9Gi3e3WXu0xX8lr0U=
Subject key identifier: 4B:3A:69:E3:15:6A:09:F1:FC:A2:1A:8B:AE:C8:24:4E:8A:AA:4E:EA
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 0198D4E09DC8A81A7B76A82B9645C18B4D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0538
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: S9rDJgmxnXkIvEoEWHi42ZAXquKYp+Yk0/Ne/T45z2I=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9d:c8:a8:1a:7b:76:a8:2b:96:45:c1:8b:4d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=4b3a69e3156a09f1fca21a8baec8244e8aaa4eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:6c:78:b0:5b:25:a7:d0:62:07:c6:41:94:
93:5d:b0:54:7e:50:25:80:00:12:ad:09:be:6b:be:
19:81:2a:84:12:85:7a:15:e3:ec:8b:a2:f0:c8:f4:
14:e4:49:2f:f3:57:eb:f7:95:26:9c:5f:c7:ba:aa:
1d:ff:16:a9:37:69:f5:06:6d:26:3d:f4:73:39:c0:
a9:59:96:41:fb:06:e2:28:97:c1:12:75:2e:8e:a2:
e6:00:0e:54:8e:bf:02:b8:60:ad:6a:0b:e7:dc:d9:
11:fc:33:07:84:de:2d:70:10:ac:87:1d:fa:b6:13:
cf:26:f0:41:dc:a2:83:2e:15:cb:8c:7a:b5:68:fd:
fb:00:dd:d7:27:a6:f5:ed:02:a6:3f:f7:f5:49:ad:
0c:41:72:0c:37:ea:27:a5:f4:ef:cc:90:93:74:51:
33:1c:5d:e1:31:b2:b5:fe:59:df:6f:0d:1f:5d:5a:
69:b8:aa:e6:3e:2d:f5:c8:20:4e:82:d9:70:f0:26:
34:3d:95:60:38:62:86:d0:4e:07:ac:6b:0f:9f:41:
ed:74:8b:3b:c6:a8:99:24:3f:3d:31:41:9a:03:84:
0c:4a:a8:86:a6:0e:93:4d:9f:87:a4:c3:1f:78:e7:
40:b0:1f:0a:86:9b:0a:bf:f6:ce:7a:ce:f1:ae:66:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:69:E3:15:6A:09:F1:FC:A2:1A:8B:AE:C8:24:4E:8A:AA:4E:EA
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:76:4f:60:9e:c1:df:cd:cc:2e:ba:07:6b:c4:c7:24:5e:
88:df:cc:30:d1:af:e0:e6:f0:27:68:17:47:8b:55:54:b1:f5:
a7:f5:3a:3e:76:ef:f6:89:45:e4:30:a5:07:f1:22:da:fb:4f:
c5:13:7b:de:b1:e7:45:5a:09:36:52:f3:da:4c:67:27:26:4a:
19:76:c9:07:51:08:0d:64:54:c0:f1:44:de:9c:a2:db:df:03:
dd:57:75:f1:ff:6b:e6:e3:d7:ce:a2:ae:1a:3d:f4:a2:e1:67:
25:43:12:0e:91:18:f4:a4:8f:50:9e:8a:77:f8:ad:b3:d8:37:
e9:c9:3d:63:11:ff:78:dc:4a:55:13:60:e2:75:42:b6:5a:43:
4c:8f:11:75:0a:b0:0d:aa:de:18:61:32:92:7c:af:89:9a:32:
62:9f:16:af:7a:e8:07:cb:9e:09:7b:08:e1:82:29:4e:13:10:
b9:71:bc:b6:35:98:eb:64:eb:8e:63:93:ea:a1:2c:17:7b:ff:
e3:6e:8f:2f:e6:00:dd:37:4a:7b:d0:9b:a5:3e:3f:da:ec:35:
2d:ca:2c:cb:51:b7:9c:f2:f4:b3:b9:f2:b6:96:ef:16:89:d0:
87:17:e0:e6:3a:e1:4c:8c:93:ed:7b:77:43:01:23:5c:e3:0a:
7f:36:de:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4J3IqBp7dqgrlkXBi00cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Yjg3MWQ2OTM5NTYxMDQ2NTc3OTMyM2I5MWIzNGU2OWJm
Y2Y1YjUwHhcNMjUwODIzMDMwMjI2WhcNMjUwODI0MDMwMjI2WjAzMTEwLwYDVQQD
Eyg0YjNhNjllMzE1NmEwOWYxZmNhMjFhOGJhZWM4MjQ0ZThhYWE0ZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlRseLBbJafQYgfGQZSTXbBUflAl
gAASrQm+a74ZgSqEEoV6FePsi6LwyPQU5Ekv81fr95UmnF/Huqod/xapN2n1Bm0m
PfRzOcCpWZZB+wbiKJfBEnUujqLmAA5Ujr8CuGCtagvn3NkR/DMHhN4tcBCshx36
thPPJvBB3KKDLhXLjHq1aP37AN3XJ6b17QKmP/f1Sa0MQXIMN+onpfTvzJCTdFEz
HF3hMbK1/lnfbw0fXVppuKrmPi31yCBOgtlw8CY0PZVgOGKG0E4HrGsPn0HtdIs7
xqiZJD89MUGaA4QMSqiGpg6TTZ+HpMMfeOdAsB8KhpsKv/bOes7xrmaSxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs6aeMVagnx/KIai67IJE6Kqk7qMB8GA1UdIwQY
MBaAFIW4cdaTlWEEZXeTI7kbNOab/PW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt
MjZhMGI4ZGVmMGMzLzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz
LzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy92T2Ce
wd/NzC66B2vExyReiN/MMNGv4ObwJ2gXR4tVVLH1p/U6Pnbv9olF5DClB/Ei2vtP
xRN73rHnRVoJNlLz2kxnJyZKGXbJB1EIDWRUwPFE3pyi298D3Vd18f9r5uPXzqKu
Gj30ouFnJUMSDpEY9KSPUJ6Kd/its9g36ck9YxH/eNxKVRNg4nVCtlpDTI8RdQqw
DareGGEyknyviZoyYp8Wr3roB8ueCXsI4YIpThMQuXG8tjWY62TrjmOT6qEsF3v/
426PL+YA3TdKe9CbpT4/2uw1Lcosy1G3nPL0s7nytpbvFonQhxfg5jrhTIyT7Xt3
QwEjXOMKfzbe4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:53 2025 by rpki-client