Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: Zn5UpMGwji27awGft0xypKlmo18YUexlQsHQg6+jE/Y=
Subject key identifier: 3C:76:78:6B:27:D7:CE:67:4E:20:BD:1F:A3:F7:C3:33:22:25:25:1B
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 01988B7D29E6DCF22ABF54A0EF0D90BF3D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 21:01:32 +0000
Manifest this update: Fri 08 Aug 2025 21:01:32 +0000
Manifest next update: Sat 09 Aug 2025 21:01:32 +0000
Files and hashes: 1: bo9Zt5WveGJLmto-uiWetgZCX7Q.roa (hash: zzs00ivzGHR02cC1o3Qz5YlQGqmECC+fSU4iyTugi54=)
2: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: vHiBCXFczgYMEdsakwgprNxpHG+Pl310TEJqBXYqZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:29:e6:dc:f2:2a:bf:54:a0:ef:0d:90:bf:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Aug 8 21:01:32 2025 GMT
Not After : Aug 9 21:01:32 2025 GMT
Subject: CN=3c76786b27d7ce674e20bd1fa3f7c3332225251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:40:07:f0:f7:b8:c2:c8:f9:9d:0c:94:44:
08:82:80:f7:52:eb:04:c7:da:1b:db:5e:34:e3:88:
d8:ca:ab:c4:db:96:1c:af:8d:c8:fc:0e:0c:a7:96:
e0:84:a6:22:85:a3:63:7c:92:c0:1b:a3:86:d0:ae:
ea:f6:4f:13:59:a6:b1:9e:9c:17:8f:93:15:4c:3f:
2d:fb:08:61:57:e0:c4:c1:c7:87:b2:50:56:b6:9a:
d8:5e:80:fe:53:31:88:4c:03:7f:ad:cb:85:07:58:
e6:92:90:ab:d4:bc:3d:ba:fe:93:f9:3b:d1:89:10:
5b:5d:1c:ae:91:28:1f:c4:76:54:b6:6a:9a:93:a3:
70:4c:9e:7d:c4:ca:bb:eb:26:e3:dc:84:52:b2:5b:
84:e2:a6:e1:08:ad:7c:94:ce:7f:87:24:94:6c:b7:
d8:e8:7a:21:27:97:72:0b:16:29:e9:33:43:48:ad:
7e:af:9e:09:5c:25:6b:fc:5b:38:77:71:65:d1:61:
26:28:73:0f:88:4b:57:87:17:80:ba:ef:75:a5:17:
f3:fa:b5:0f:96:53:be:12:70:3e:9d:f9:98:b2:7d:
c6:0d:eb:9a:32:9c:23:30:bf:b3:43:2e:5e:f7:f8:
12:86:10:6f:52:92:a0:b0:b4:de:a8:5e:69:96:f1:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:76:78:6B:27:D7:CE:67:4E:20:BD:1F:A3:F7:C3:33:22:25:25:1B
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cb:25:49:98:66:73:3e:aa:e6:dd:72:e3:51:b2:d0:f8:1c:
35:a2:09:a2:2c:ef:85:80:40:9f:a8:17:8b:69:d0:7e:9a:23:
10:6d:a8:ce:b5:dd:60:89:b4:e5:f2:6c:3b:f2:dd:ca:db:b8:
31:66:bf:c2:6e:7e:75:36:81:71:85:e6:14:22:67:b7:80:01:
59:6d:fe:0a:f2:1e:4b:ac:b3:42:bf:94:e3:09:ea:6c:50:76:
83:72:6d:db:73:38:7d:5f:99:ad:9d:1e:71:9c:57:18:e9:1c:
43:55:4b:1f:7f:d1:b5:47:9f:e8:13:11:94:f3:7f:bd:c3:29:
5f:90:de:cc:92:d8:ef:f6:5a:c8:f6:bb:d9:2a:96:0a:e5:37:
43:75:50:95:72:a6:6a:8f:8d:52:40:44:80:74:73:50:5b:51:
5f:a5:d6:9e:0a:ee:1c:83:af:a2:d3:2d:8c:a6:bb:c4:39:0a:
83:02:16:62:9c:c9:8e:04:b2:06:70:2b:ce:57:ea:41:07:96:
e5:f0:d6:a7:fa:ca:e7:f5:9f:5c:0a:07:5d:1e:26:3d:62:02:
59:91:5e:dd:cd:fb:af:91:7c:c7:ff:e0:57:ea:28:b1:6b:1b:
7f:8b:33:d1:68:ef:ec:12:20:ef:46:cb:88:f6:98:53:c0:63:
fa:d5:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:05 2025 by rpki-client