Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: gvEWDyNXDIB5yccxuzMEw20bRHuWu3XWsh6W/I0Tnzk=
Subject key identifier: 50:39:96:3E:9A:C1:25:AF:F0:56:70:0C:32:5B:B6:08:6C:76:33:96
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 0197CA5E6327CC5787E8E9CEE6C62AC27188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 04AE
Signing time: Wed 02 Jul 2025 09:01:12 +0000
Manifest this update: Wed 02 Jul 2025 09:01:12 +0000
Manifest next update: Thu 03 Jul 2025 09:01:12 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: +gTLP+LL6SOLsekdJIU+JSvT5AshpJPKwq/bJcGU7Qc=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:63:27:cc:57:87:e8:e9:ce:e6:c6:2a:c2:71:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Jul 2 09:01:12 2025 GMT
Not After : Jul 3 09:01:12 2025 GMT
Subject: CN=5039963e9ac125aff056700c325bb6086c763396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:21:9d:e6:91:0b:47:e6:4e:8c:7d:16:6a:
62:ff:31:75:9c:73:bf:2b:76:34:66:13:2d:29:17:
c4:97:41:90:31:62:5d:69:ee:ef:cb:4d:48:c5:70:
4e:8f:dd:7c:8b:74:a1:50:86:d0:25:f2:07:e4:58:
ab:ac:75:7e:9b:56:94:12:eb:72:54:a6:9b:e7:0d:
9f:33:c4:f1:14:e4:0c:77:39:e7:2e:97:3e:5c:d2:
7f:63:f2:5c:01:de:45:bd:0f:8a:8c:ab:4e:ef:50:
17:d7:42:7b:b2:50:fd:4c:e6:94:f2:64:6e:03:24:
e0:b3:1c:77:59:31:b2:61:34:c1:62:22:2d:0e:6d:
9e:a0:87:95:90:31:97:39:c0:e2:98:b3:6c:d3:2d:
5a:76:b5:4f:bf:ba:11:ed:ee:a2:b1:5b:80:a3:29:
57:95:4b:3d:02:e5:9c:65:4e:bf:c9:33:51:a7:a1:
a0:1c:40:32:0f:29:95:4f:87:eb:c3:ef:15:8f:73:
d0:2f:f2:4b:9b:a6:4b:1f:98:35:da:d5:5e:d9:51:
e1:90:b2:01:61:2a:66:76:0f:93:29:f9:88:60:ec:
54:89:23:59:bf:19:61:ab:00:d7:7c:7f:85:5e:3e:
61:15:42:d0:78:e2:7f:7d:5e:25:80:e8:37:90:8b:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:39:96:3E:9A:C1:25:AF:F0:56:70:0C:32:5B:B6:08:6C:76:33:96
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d1:e4:2d:a5:cb:0b:94:2a:10:f7:ca:87:33:d1:cb:b7:11:
4c:f1:c2:4f:f6:8b:51:39:5a:a7:59:07:96:4a:9d:c2:c6:62:
8d:64:00:d6:21:68:ed:66:7e:d3:74:4f:cd:76:f2:67:46:fc:
2a:16:dc:70:50:c1:7e:f5:af:27:03:a4:32:a4:cd:55:b6:aa:
ac:b1:70:fd:4b:25:4d:78:a3:37:37:1c:67:2b:fe:c0:2c:85:
21:8b:74:8d:86:d2:a9:3c:94:58:68:bb:91:94:ec:b2:10:74:
5b:69:c1:9c:46:7f:89:ab:ab:e2:89:b4:bc:c3:eb:44:17:f6:
28:60:36:8d:36:35:96:bc:7c:c6:35:1f:a9:4b:df:fa:a0:b5:
df:33:00:08:95:59:35:0c:ac:cb:be:38:12:67:29:d0:fe:0b:
4d:6d:bc:5c:7f:4e:bd:59:7b:8c:7a:0d:b7:5a:b5:cb:72:75:
e2:7c:e5:7c:7a:6d:15:af:29:5f:84:e0:68:39:f4:b1:a4:2c:
b9:31:e5:04:8a:c0:9c:75:a6:99:d2:a0:1f:de:25:7a:98:85:
05:e6:ec:00:f3:f2:ba:3f:a6:d4:e1:cd:7d:6f:b5:6a:c7:fc:
02:aa:1b:22:6c:6e:46:75:0c:f1:11:22:19:84:1a:41:73:03:
5d:b6:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:40:30 2025 by rpki-client