Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: gS5fx3qIGzOmBu20rnDel7yf1WRLKqX33TMnhyYqV0o=
Subject key identifier: 54:D2:4F:80:B9:78:92:44:F6:FF:BF:A8:40:7B:37:6E:BD:6E:CD:0F
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019A4E869CEC270DA1F322354379893B7504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: +v55DxPit0S2agsDoW2b/+0OhQLcWipN5nDUQMxs9M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9c:ec:27:0d:a1:f3:22:35:43:79:89:3b:75:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=54d24f80b9789244f6ffbfa8407b376ebd6ecd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:7c:e1:92:f9:26:cc:cf:7b:af:10:83:16:
06:a2:d7:17:14:e4:9b:28:9c:10:e2:28:94:88:a9:
4c:d9:d1:48:29:50:c0:b6:8e:f1:f9:06:83:f4:0c:
1f:3e:af:6e:c5:85:c1:78:81:0e:1c:00:35:55:a9:
a2:c6:06:81:b6:f4:6c:37:e6:0b:bb:e6:de:6a:4c:
6d:1a:ec:cb:8b:a4:a8:af:e9:1a:55:9f:61:19:e1:
8c:8e:7e:7b:9f:33:14:2f:8b:39:bc:8c:67:52:d9:
92:ec:ac:89:d3:a1:46:51:f0:24:56:79:cb:4c:1a:
b1:6a:d8:b8:b1:54:f1:c1:9a:c6:1e:d2:c5:54:25:
37:64:1e:1f:75:95:38:01:9b:70:11:29:17:2e:92:
4d:b0:46:9a:60:34:f1:0f:19:ae:2a:7c:02:3f:c8:
84:f8:13:09:9c:a1:99:91:8b:33:d8:6b:fd:87:68:
d6:80:60:e9:11:cc:44:61:f7:3c:41:db:1f:bc:08:
ca:a8:d4:b0:d5:29:74:e3:1a:34:34:4a:37:55:a1:
15:93:36:32:e4:36:0e:17:9f:54:b5:70:ef:d6:7b:
27:32:d1:44:fa:ae:d9:a1:21:3c:74:f2:32:37:1b:
65:84:55:8b:9d:24:29:c8:fe:2a:67:62:c9:63:94:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D2:4F:80:B9:78:92:44:F6:FF:BF:A8:40:7B:37:6E:BD:6E:CD:0F
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ad:93:8b:e9:66:2a:d9:5d:e4:a3:18:81:50:a1:d9:29:1e:
59:af:45:a4:66:32:c1:b5:41:b6:f7:62:89:59:e9:d7:a7:6b:
94:ed:7e:b4:37:d7:78:54:1c:93:d1:9d:4c:0b:f0:85:ef:f8:
4c:de:15:e1:67:11:48:27:9f:12:44:00:c7:e9:1d:78:f6:5c:
e9:79:82:0d:70:e7:aa:4e:3b:a6:3f:93:99:17:33:35:68:32:
22:39:8c:16:7f:19:b5:dd:16:81:9f:88:c8:df:5e:f8:02:94:
fe:55:16:b8:97:8d:47:f4:49:d2:5d:85:89:8d:bb:a9:ed:fb:
57:98:08:2a:d7:ed:da:3e:0d:d4:61:26:0d:99:c0:e7:1e:6b:
7e:57:6f:d1:8b:70:db:4f:13:5c:8e:48:45:fe:70:41:d9:fe:
56:8c:23:36:5f:4b:41:69:3b:bd:7a:d5:e5:4e:81:19:ca:96:
40:49:40:ad:2b:2d:87:2c:d5:ef:e2:8d:4a:a8:fe:2f:8e:8d:
1c:29:07:55:0e:04:3b:f5:7d:15:c9:56:0f:9c:0f:a9:42:3c:
64:a6:c8:90:c0:bf:98:97:24:1c:bc:e2:3b:5e:47:29:6b:05:
58:a0:0b:4c:48:42:0e:cb:ac:ec:30:d9:1f:69:b9:a1:9d:1a:
35:73:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:09 2025 by rpki-client