Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
File: hbYRoLfUM0t6I5XozOew48m4OOg.mft (raw, json)
Hash identifier: DHxpHzsdQPsaJNupN4NsrYsV/i+76Kh88WfysSada0U=
Subject key identifier: 79:3B:1B:15:51:78:6D:CD:8E:14:1C:08:D7:5A:3D:48:50:A3:5D:E6
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 01978056B5462728C49EB4740D9C29DE1EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
Manifest number: 10A1
Signing time: Wed 18 Jun 2025 00:00:55 +0000
Manifest this update: Wed 18 Jun 2025 00:00:55 +0000
Manifest next update: Thu 19 Jun 2025 00:00:55 +0000
Files and hashes: 1: GqM4YVlqC8-erWafuFUuhTFle_c.roa (hash: i4cVcC9yh3IAaqw92giD4QCQEZ24C42b9AxtQz5mdqI=)
2: V5ey2q7KwpxyFqlUebHjJUU7ouc.roa (hash: Yxgk3WfNc3AICgrW7BBAgfdy4JGwXPs53GHlVT7wvGA=)
3: hbYRoLfUM0t6I5XozOew48m4OOg.crl (hash: aKmahY7wYgOFWUjx1syFCrzDcYe7C+P36QgjwY6VCMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:b5:46:27:28:c4:9e:b4:74:0d:9c:29:de:1e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Jun 18 00:00:55 2025 GMT
Not After : Jun 19 00:00:55 2025 GMT
Subject: CN=793b1b1551786dcd8e141c08d75a3d4850a35de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:f7:d2:0f:30:eb:c1:14:50:58:5f:27:85:
2f:7c:4c:8e:1d:56:24:ac:17:f8:9c:a6:e4:e4:9e:
40:39:0a:57:f6:ae:f8:03:ef:8a:4e:5f:57:81:1f:
6b:2c:02:5f:66:1c:6a:b2:82:02:54:ef:29:89:36:
f5:ea:10:62:16:3e:9b:d3:ad:d9:54:70:75:9a:26:
e8:f7:bd:de:c1:d2:0c:b8:c3:3e:47:72:da:32:73:
f9:fb:37:7a:90:81:14:5c:55:64:e3:24:b6:db:65:
45:d0:10:fd:ec:ee:4f:c0:7c:e9:81:ed:f3:19:7d:
35:24:fd:bb:28:47:3a:a6:c0:10:c2:9a:76:7b:8c:
1c:26:d2:75:29:4a:ba:78:51:50:7f:9f:74:c8:15:
e9:4d:c0:ee:2c:41:bc:c3:7b:d1:4b:88:d8:7d:92:
60:8c:4c:62:b0:85:0f:3f:3e:a8:a2:9a:1b:e2:4d:
80:0b:3b:61:a6:d5:f4:31:69:78:ec:23:bf:35:89:
98:d8:e7:58:a1:e1:92:8d:12:31:28:de:44:d3:2b:
c7:27:9b:90:3e:9a:23:28:a4:3f:d4:88:eb:83:78:
53:15:53:ea:ce:cd:5d:a6:7b:20:6c:bf:ee:f3:5d:
9c:77:84:b6:6b:af:4a:2d:39:19:3d:e8:35:35:ff:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3B:1B:15:51:78:6D:CD:8E:14:1C:08:D7:5A:3D:48:50:A3:5D:E6
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:62:14:4d:ee:dd:de:6b:75:38:10:f6:94:6e:d8:0a:86:
bf:03:c6:da:fa:f2:4e:60:9b:9f:c6:7c:3d:68:dc:4b:49:9e:
b2:f5:6a:1e:3d:f2:5e:a4:2d:f3:14:f3:2a:15:a2:3e:cf:ba:
12:f1:bb:eb:20:3a:d1:85:ac:a1:1f:43:3b:54:2e:fd:d6:5c:
80:1b:c1:51:f2:e9:23:10:ef:c3:a7:d7:94:11:ed:bf:52:a4:
64:49:8e:a7:83:2b:4c:e6:f5:e2:f4:6d:da:4d:3c:de:56:fa:
11:26:4d:96:09:29:f1:99:42:0d:c7:36:2a:39:25:4f:16:53:
9a:02:c6:83:09:20:19:df:8f:df:bc:55:ba:f9:68:45:09:15:
4b:fd:23:7d:fa:20:48:6d:f9:93:fc:71:fd:9e:b3:30:35:4b:
49:e8:e7:f0:f5:79:e6:19:93:d9:b5:ed:e8:7c:9b:55:07:d6:
bc:92:86:b7:57:d5:43:91:78:d4:44:6e:4f:cf:1c:e9:71:56:
0d:5c:b0:84:8b:cd:41:3f:17:26:db:50:67:3a:54:f0:96:bb:
09:1e:d0:30:38:ac:4d:97:4d:2b:fe:64:aa:48:d5:15:bc:11:
d6:8c:a1:a9:b4:53:fe:2c:9f:f2:b2:d8:62:b5:52:b6:d4:a4:
1b:44:66:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAVrVGJyjEnrR0DZwp3h7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjYxMWEwYjdkNDMzNGI3YTIzOTVlOGNjZTdiMGUzYzli
ODM4ZTgwHhcNMjUwNjE4MDAwMDU1WhcNMjUwNjE5MDAwMDU1WjAzMTEwLwYDVQQD
Eyg3OTNiMWIxNTUxNzg2ZGNkOGUxNDFjMDhkNzVhM2Q0ODUwYTM1ZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdL30g8w68EUUFhfJ4UvfEyOHVYk
rBf4nKbk5J5AOQpX9q74A++KTl9XgR9rLAJfZhxqsoICVO8piTb16hBiFj6b063Z
VHB1mibo973ewdIMuMM+R3LaMnP5+zd6kIEUXFVk4yS222VF0BD97O5PwHzpge3z
GX01JP27KEc6psAQwpp2e4wcJtJ1KUq6eFFQf590yBXpTcDuLEG8w3vRS4jYfZJg
jExisIUPPz6oopob4k2ACzthptX0MWl47CO/NYmY2OdYoeGSjRIxKN5E0yvHJ5uQ
PpojKKQ/1Ijrg3hTFVPqzs1dpnsgbL/u812cd4S2a69KLTkZPeg1Nf+5KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk7GxVReG3NjhQcCNdaPUhQo13mMB8GA1UdIwQY
MBaAFIW2EaC31DNLeiOV6MznsOPJuDjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmIt
ODhjYjRlNzEwNmVhLzEvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmItODhjYjRlNzEwNmVh
LzEvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1NiFE3u
3d5rdTgQ9pRu2AqGvwPG2vryTmCbn8Z8PWjcS0mesvVqHj3yXqQt8xTzKhWiPs+6
EvG76yA60YWsoR9DO1Qu/dZcgBvBUfLpIxDvw6fXlBHtv1KkZEmOp4MrTOb14vRt
2k083lb6ESZNlgkp8ZlCDcc2KjklTxZTmgLGgwkgGd+P37xVuvloRQkVS/0jffog
SG35k/xx/Z6zMDVLSejn8PV55hmT2bXt6HybVQfWvJKGt1fVQ5F41ERuT88c6XFW
DVywhIvNQT8XJttQZzpU8Ja7CR7QMDisTZdNK/5kqkjVFbwR1oyhqbRT/iyf8rLY
YrVSttSkG0RmRQ==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:15:21 2025 by rpki-client