Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
File: hbc7mIsBRCjrr2ehj30Zmbojxk0.mft (raw, json)
Hash identifier: mDmYX65Q3TafD1cxVe3N2kJXXwgS3sLsCRhZl/xVltU=
Subject key identifier: 24:6E:8A:D1:57:63:A6:BD:83:03:0B:63:D1:04:BB:A3:A9:26:0C:BC
Authority key identifier: 85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
Certificate issuer: /CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Certificate serial: 019873E20E0593D48631CEC18E61060D6191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
Manifest number: 1234
Signing time: Mon 04 Aug 2025 07:00:51 +0000
Manifest this update: Mon 04 Aug 2025 07:00:51 +0000
Manifest next update: Tue 05 Aug 2025 07:00:51 +0000
Files and hashes: 1: hbc7mIsBRCjrr2ehj30Zmbojxk0.crl (hash: HCwAWA1kbncD5J/rwdws7gHNHplf2OKsrTl3ihFttFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:0e:05:93:d4:86:31:ce:c1:8e:61:06:0d:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Validity
Not Before: Aug 4 07:00:51 2025 GMT
Not After : Aug 5 07:00:51 2025 GMT
Subject: CN=246e8ad15763a6bd83030b63d104bba3a9260cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:12:81:bb:f9:df:49:c9:89:d9:3a:bb:6c:
03:6f:63:40:88:64:18:ec:2f:68:e1:0f:4f:64:d2:
5d:66:75:00:bc:6f:84:a5:3f:7e:fb:df:03:06:bc:
1d:eb:49:3a:34:53:84:57:c0:de:f4:fd:ad:ef:fb:
9e:d1:04:62:94:91:e5:1f:0c:42:82:3f:c3:26:9f:
84:72:0f:8c:35:76:cc:7e:48:67:e2:87:66:d9:1b:
36:f9:9e:4a:eb:37:20:76:13:b1:dc:f7:13:45:14:
9c:01:c2:b6:37:c1:24:60:77:1b:80:65:96:b9:19:
7f:90:ed:d3:97:5a:1d:1e:8f:7c:d7:b3:a3:fa:95:
bc:b2:2d:d1:e9:72:24:f0:15:a9:a6:a1:45:cc:af:
68:e2:b7:91:8d:dd:33:2c:93:aa:39:ac:b3:e0:7e:
02:bb:6d:bb:ec:cb:24:fe:9a:90:ca:ee:84:05:1e:
ca:2a:fa:de:e5:ad:7f:38:e2:09:cf:1a:52:0e:26:
6c:96:73:d0:3f:59:d6:83:85:94:0d:c4:16:7e:45:
36:e8:89:78:e8:7c:55:51:e9:9f:43:57:e2:98:b6:
94:99:09:af:68:1f:8a:9e:89:2d:3d:1c:00:e4:52:
25:75:68:df:a5:89:69:21:45:7f:1e:0b:81:4e:5c:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6E:8A:D1:57:63:A6:BD:83:03:0B:63:D1:04:BB:A3:A9:26:0C:BC
X509v3 Authority Key Identifier:
keyid:85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d4:62:2f:5e:66:54:dd:66:37:50:3f:da:d9:0c:10:ad:72:
09:3a:ae:ae:e2:5f:38:77:6d:88:ba:c3:c9:cf:ea:a7:a1:47:
9d:47:1f:7b:a7:94:38:0e:c4:83:1f:f0:a1:f2:47:b1:0f:48:
66:9e:1c:25:77:e8:ac:cb:c6:ea:c7:34:f5:6d:65:44:2b:5c:
c5:52:2a:b2:55:1e:af:af:34:33:05:c4:4d:9b:76:bc:26:e7:
0b:76:bf:04:2b:f6:ba:cc:05:f3:bf:45:9e:3e:19:e2:86:b9:
02:ef:f0:00:73:a9:aa:dc:a7:d4:f0:90:30:21:21:8c:e5:40:
55:11:20:cd:b0:7a:3c:a9:a9:b9:57:b5:69:fb:62:a2:c0:09:
64:b2:14:90:d6:0a:40:03:fd:29:78:6f:79:0f:95:7a:41:1d:
d6:ff:0d:30:48:3b:00:7f:e6:ed:14:b3:22:83:a1:0c:e4:00:
0f:3c:9f:88:99:96:e7:9c:23:8c:b6:9f:60:01:bf:9f:00:f8:
47:99:26:db:e1:ba:4f:93:68:d2:9e:dc:c0:6c:44:56:1e:08:
31:42:a5:84:3e:ef:3c:3f:45:c8:33:aa:1c:27:48:82:fe:60:
35:9d:df:a7:9f:4d:ff:75:f4:99:26:cb:34:64:b7:7c:86:f0:
04:eb:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:46 2025 by rpki-client