Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
File: hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft (raw, json)
Hash identifier: ULcDo0R/jNK7V/4ilKAVhdhgzafxj+xx6BFXSolq3jI=
Subject key identifier: 54:3F:8F:DF:2E:E7:44:53:CA:02:E8:C0:5B:68:20:59:EE:80:68:6F
Authority key identifier: 85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
Certificate issuer: /CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Certificate serial: 019769CEEF50752A26C732F7D0989E69749A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:00:58 +0000
Manifest this update: Fri 13 Jun 2025 15:00:58 +0000
Manifest next update: Sat 14 Jun 2025 15:00:58 +0000
Files and hashes: 1: hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl (hash: cHxV2hYt3P1rO4QtxANmGkD3YzT/dU7zB3LgWx3cjcM=)
2: zES562T2jGbv7XzrHC02CT1oz_k.roa (hash: UbLmo0xCkOQvRcwSPHG5xE6YElRiJFtnaVmOwj9fHBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ef:50:75:2a:26:c7:32:f7:d0:98:9e:69:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Validity
Not Before: Jun 13 15:00:58 2025 GMT
Not After : Jun 14 15:00:58 2025 GMT
Subject: CN=543f8fdf2ee74453ca02e8c05b682059ee80686f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:d3:ea:d0:db:2f:01:e2:fb:6b:45:bf:54:
36:c9:bb:82:f4:80:c9:e4:01:c4:01:f3:d3:d3:7e:
b0:0b:0b:04:5a:3c:e8:b3:cc:a5:1a:b2:b0:94:d8:
a7:13:b7:60:78:49:ea:7c:0e:cd:c0:e3:ac:bf:75:
c6:5f:a9:4e:c7:71:f1:9c:0c:13:98:8a:05:ac:6c:
90:a1:f7:da:8d:39:8a:5b:89:ee:04:85:60:b9:35:
88:45:8a:0b:46:84:88:e5:e1:28:02:af:f6:93:14:
d5:92:01:6a:27:b4:d0:9e:61:60:92:c5:7b:3e:79:
ed:48:cf:2f:7f:10:07:16:2a:2b:6d:72:c3:7d:93:
14:95:5c:1a:0d:35:aa:0e:4e:63:7a:96:c8:fd:73:
64:18:e9:28:48:7b:c2:f0:47:ff:8e:8a:92:f8:68:
e6:e4:f5:00:f9:4a:ca:13:84:41:ea:06:f7:f8:18:
74:5c:8e:36:03:c5:8b:71:5a:ce:19:af:be:4f:87:
58:09:6b:96:a5:35:06:a4:d2:d2:21:45:a2:cd:3a:
6d:ae:9a:f4:b4:e9:cd:18:15:f5:7d:40:99:0d:dc:
f4:65:d7:f4:48:8a:af:44:2b:55:fd:13:21:68:d8:
56:45:23:14:9d:42:69:d2:42:5f:34:ef:39:1e:33:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3F:8F:DF:2E:E7:44:53:CA:02:E8:C0:5B:68:20:59:EE:80:68:6F
X509v3 Authority Key Identifier:
keyid:85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:72:fe:83:c0:ff:e3:6f:e5:2a:18:7f:b2:ff:fa:6d:b9:a7:
91:2f:81:46:48:b4:e8:de:ea:12:0f:1a:4d:73:52:6e:4b:f6:
e6:7f:47:9e:5b:87:a2:49:91:83:da:e6:6b:28:02:40:0f:15:
36:5a:af:6b:ba:86:41:6d:1e:b8:d3:55:f5:6b:5e:d2:8d:17:
3e:1b:dd:8a:10:3e:fd:57:03:22:c5:6d:7f:40:06:4d:34:70:
6a:4d:0f:f1:8c:44:90:61:3b:20:0a:34:a7:33:c2:97:21:d1:
4e:63:f2:12:42:c6:06:42:35:2a:24:d6:09:bd:25:68:9c:d3:
2f:3c:a0:c3:90:db:82:89:68:ba:e5:b3:85:dc:30:3d:83:af:
e2:4f:60:c4:9a:84:45:f8:59:28:cf:82:e0:2c:84:b2:ed:e8:
70:30:4c:c4:78:5a:b7:97:41:01:96:c1:5d:04:af:0a:9b:c6:
86:5d:22:f4:10:99:78:79:5f:42:ef:5d:60:f8:d6:a6:3c:85:
e7:8a:3e:a8:25:ea:5a:76:9e:e8:7e:d7:b2:c4:24:b0:dc:12:
02:67:0a:2f:f9:35:f7:ce:21:da:f2:94:98:55:83:f5:92:c2:
71:de:8d:c6:d9:6e:84:ec:6c:5d:2f:51:8a:8a:02:55:96:a5:
33:5b:68:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzu9QdSomxzL30JieaXSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YmNiODFkY2QzZjI5MzE4ZjQwM2I4NDgxYmU0NGVjMWZm
NTUwMmUwHhcNMjUwNjEzMTUwMDU4WhcNMjUwNjE0MTUwMDU4WjAzMTEwLwYDVQQD
Eyg1NDNmOGZkZjJlZTc0NDUzY2EwMmU4YzA1YjY4MjA1OWVlODA2ODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OTT6tDbLwHi+2tFv1Q2ybuC9IDJ
5AHEAfPT036wCwsEWjzos8ylGrKwlNinE7dgeEnqfA7NwOOsv3XGX6lOx3HxnAwT
mIoFrGyQoffajTmKW4nuBIVguTWIRYoLRoSI5eEoAq/2kxTVkgFqJ7TQnmFgksV7
PnntSM8vfxAHFiorbXLDfZMUlVwaDTWqDk5jepbI/XNkGOkoSHvC8Ef/joqS+Gjm
5PUA+UrKE4RB6gb3+Bh0XI42A8WLcVrOGa++T4dYCWuWpTUGpNLSIUWizTptrpr0
tOnNGBX1fUCZDdz0Zdf0SIqvRCtV/RMhaNhWRSMUnUJp0kJfNO85HjPqxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ/j98u50RTygLowFtoIFnugGhvMB8GA1UdIwQY
MBaAFIW8uB3NPykxj0A7hIG+ROwf9VAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJ5NEhjMF9LVEdQUUR1RWdiNUU3Ql8xVUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NjUwNjUtZGE0ZC00Y2JlLTkwNjEt
ODc4MWM0ZmUwMTFmLzEvaGJ5NEhjMF9LVEdQUUR1RWdiNUU3Ql8xVUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81NjUwNjUtZGE0ZC00Y2JlLTkwNjEtODc4MWM0ZmUwMTFm
LzEvaGJ5NEhjMF9LVEdQUUR1RWdiNUU3Ql8xVUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXL+g8D/
42/lKhh/sv/6bbmnkS+BRki06N7qEg8aTXNSbkv25n9HnluHokmRg9rmaygCQA8V
Nlqva7qGQW0euNNV9Wte0o0XPhvdihA+/VcDIsVtf0AGTTRwak0P8YxEkGE7IAo0
pzPClyHRTmPyEkLGBkI1KiTWCb0laJzTLzygw5DbgolouuWzhdwwPYOv4k9gxJqE
RfhZKM+C4CyEsu3ocDBMxHhat5dBAZbBXQSvCpvGhl0i9BCZeHlfQu9dYPjWpjyF
54o+qCXqWnae6H7XssQksNwSAmcKL/k1984h2vKUmFWD9ZLCcd6NxtluhOxsXS9R
iooCVZalM1toRg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:36:23 2025 by rpki-client