Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: YAo++XPWjl1gYzc8GqcOkBcWGmyH7g7cIk088VP+ABw=
Subject key identifier: 07:93:6C:7B:C7:BF:85:60:46:3A:30:31:04:FB:E5:A3:96:B4:37:69
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019888B22BEA6113EA86CC5A8DA80E1A0AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 08:00:34 +0000
Manifest this update: Fri 08 Aug 2025 08:00:34 +0000
Manifest next update: Sat 09 Aug 2025 08:00:34 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: ESuk9miJZsDjCIRfobLdp2bSzRWBvXybQP/kQeJYEL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:2b:ea:61:13:ea:86:cc:5a:8d:a8:0e:1a:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Aug 8 08:00:34 2025 GMT
Not After : Aug 9 08:00:34 2025 GMT
Subject: CN=07936c7bc7bf8560463a303104fbe5a396b43769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:9c:11:38:a7:ea:aa:6b:fe:d2:04:61:c4:
a4:e4:5a:28:84:45:31:26:38:3b:0f:05:52:64:f6:
90:b6:0a:0c:51:6f:b2:b9:e8:33:81:ae:e4:19:e0:
58:99:db:b0:60:9d:d4:bf:a5:2a:05:a7:bd:78:3b:
06:b0:12:56:97:34:58:20:47:18:a2:90:9e:79:cc:
71:05:7e:b1:ec:7c:fb:06:b9:1b:b6:c6:c0:84:3a:
ec:91:1c:57:a2:43:5c:31:54:da:bb:2a:5b:92:90:
65:d9:a2:5d:5b:c5:6b:f3:83:db:63:af:c6:80:26:
5f:d3:92:29:73:76:25:6a:c8:af:de:66:bb:ff:7d:
78:e8:49:6b:ae:93:36:34:c0:58:86:30:49:00:f0:
2d:93:cf:c6:c1:7f:97:34:3a:d0:74:2b:45:01:17:
51:6f:10:2a:3f:54:03:6b:73:b7:55:b2:52:af:04:
48:32:3d:cc:2b:89:07:32:3e:5b:2b:21:8c:f1:22:
cc:11:c7:ac:98:dd:b8:60:67:92:85:8a:50:30:67:
1b:74:dc:f8:f3:76:35:d2:4f:26:5d:24:ba:8f:37:
2f:57:c8:4a:6e:ca:a4:88:59:08:44:a7:91:a1:6e:
da:b3:e5:08:2b:fc:27:95:b2:01:a9:85:17:37:8b:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:93:6C:7B:C7:BF:85:60:46:3A:30:31:04:FB:E5:A3:96:B4:37:69
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:84:a6:0d:70:f0:dc:71:50:62:b3:e8:4c:4a:b1:01:b0:8f:
75:4f:21:9d:5a:fe:82:ff:a1:56:9e:80:1c:6d:47:2e:f7:94:
15:ad:6a:1d:b1:fb:b3:1a:b9:76:30:5d:d7:aa:a1:51:69:df:
9d:64:42:f0:ee:7e:71:59:81:f8:be:3c:e0:72:ec:46:d1:61:
9a:ff:e5:90:18:50:05:75:5b:76:24:94:f7:82:ae:b7:45:b9:
01:f1:b7:50:00:31:24:19:20:2f:46:b5:52:df:a6:98:cd:2b:
ff:29:45:a3:f6:02:f0:59:27:1f:3a:fb:1c:4b:72:d3:80:b4:
fa:e0:d1:9a:44:4f:33:fb:5e:f7:06:0e:ad:ec:34:56:26:0f:
d8:8e:58:77:d5:e3:ac:5f:ca:49:0f:45:8b:08:aa:fd:90:07:
f6:27:f7:12:c2:c0:87:57:fc:85:ff:bd:29:6c:0e:3d:b6:3d:
1d:fd:fd:2d:de:da:e0:24:ca:ea:e5:8c:d1:ab:30:26:76:c7:
0e:ce:62:6f:ac:04:89:60:72:a6:52:c1:59:d3:8a:2b:6f:11:
50:6f:9d:9d:81:75:f8:bb:5c:1a:c1:db:fe:a1:d5:65:0e:7f:
e7:e0:55:a7:2f:05:8b:3c:49:39:8b:e0:49:4d:00:0d:dc:2b:
9b:2a:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:32 2025 by rpki-client