Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: 57DF53AH5DrW/VEKrhs2k5gtANOO/q6EOFuMvm5ZsOs=
Subject key identifier: 21:95:DD:01:4C:DF:1A:13:23:95:1D:0F:6F:2D:A0:E1:D3:1B:B5:B8
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 01976D3E35078DA2E4F4C020B9161799DB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:01:22 +0000
Manifest this update: Sat 14 Jun 2025 07:01:22 +0000
Manifest next update: Sun 15 Jun 2025 07:01:22 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: DRLqfGmUDtWWKfAm0S09BPPlzqYPta0u0BSOsSlP6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:35:07:8d:a2:e4:f4:c0:20:b9:16:17:99:db:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: Jun 14 07:01:22 2025 GMT
Not After : Jun 15 07:01:22 2025 GMT
Subject: CN=2195dd014cdf1a1323951d0f6f2da0e1d31bb5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:e5:db:e7:ac:38:8a:7a:46:47:52:49:da:
ea:f9:7c:08:b0:56:dd:5b:59:f9:ae:10:20:a8:24:
8d:19:9f:de:98:37:f6:af:ba:94:47:3e:eb:ef:c5:
f7:53:37:96:4d:21:a6:ab:f6:b8:f0:a0:22:48:8c:
ee:50:d1:1c:7b:b3:b3:22:fc:56:8b:6f:15:45:cf:
f6:81:87:4c:54:b8:69:6a:24:9e:cb:a9:04:ce:e5:
33:bb:97:0e:65:97:2b:cd:98:ee:d3:a9:a2:4e:d2:
2e:27:5c:3a:01:0f:0f:85:bd:a3:64:9d:1c:cc:32:
79:48:da:51:4e:a6:03:86:1a:57:e0:44:83:17:cc:
76:71:02:83:62:6e:32:e3:a3:11:e4:7e:b5:4a:55:
68:4e:43:c9:9e:ed:94:44:49:b4:5e:39:2c:1e:18:
29:d9:72:1b:7a:0d:d0:40:d6:f5:b6:26:d8:fd:83:
42:3e:e7:93:ba:10:b5:53:36:00:b0:10:76:c4:1d:
e2:ae:a8:37:ce:f5:97:07:1c:75:93:d2:85:4e:8d:
63:0b:9b:d1:14:5d:a4:6a:6f:4d:de:49:82:8e:5b:
cd:23:d1:c3:64:e1:12:d7:ba:47:34:2d:b3:35:29:
37:61:7b:e9:68:f5:8c:77:fa:3c:9f:bc:87:e6:ff:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:DD:01:4C:DF:1A:13:23:95:1D:0F:6F:2D:A0:E1:D3:1B:B5:B8
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:52:3a:64:0c:1c:ee:52:fd:51:0e:68:40:31:ae:bf:10:d8:
f5:4b:54:f4:3c:6c:ab:76:56:97:3e:e9:5d:ee:cc:d5:41:df:
73:33:e0:74:7b:df:a4:af:be:de:b8:98:1e:0a:9e:53:87:76:
95:e4:15:b2:0e:c1:a3:a6:80:ef:22:0a:e3:ba:6f:d4:72:7b:
76:57:ef:75:da:6d:50:73:2f:69:1b:9a:90:df:9b:67:d0:d3:
56:39:9d:a2:83:27:db:26:82:f5:83:22:30:2b:a5:bb:93:db:
d6:ab:0a:f4:84:45:c5:21:9f:1c:d7:95:aa:19:08:ea:59:c2:
8a:75:b3:e9:3c:f6:7b:66:80:31:e8:9c:e4:fd:81:bb:43:26:
f9:ea:e3:c8:25:84:21:ee:ec:da:51:8d:09:21:23:e5:29:10:
3c:b9:b0:4a:84:c5:d5:09:b8:2a:6c:0b:d0:3b:ef:70:0f:ad:
ac:c8:dd:67:34:45:95:13:9a:e4:9f:0c:ec:dd:8d:e2:d3:2c:
56:1f:2c:0b:ed:08:3a:0e:91:15:1c:5f:1a:9c:fb:86:9f:5e:
a3:d6:0d:0c:23:a3:1e:5e:a6:0d:b2:bb:77:60:6f:8e:ca:b8:
68:b0:d3:d7:bf:5b:5f:c7:71:87:aa:6c:94:44:1c:d8:3a:12:
1a:7c:0b:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPjUHjaLk9MAguRYXmdszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYmJkM2UxYmNlNjcyNTFiNThmMjZjZmQyNWZkNDAxNTY0
MTY2MDMwHhcNMjUwNjE0MDcwMTIyWhcNMjUwNjE1MDcwMTIyWjAzMTEwLwYDVQQD
EygyMTk1ZGQwMTRjZGYxYTEzMjM5NTFkMGY2ZjJkYTBlMWQzMWJiNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jnl2+esOIp6RkdSSdrq+XwIsFbd
W1n5rhAgqCSNGZ/emDf2r7qURz7r78X3UzeWTSGmq/a48KAiSIzuUNEce7OzIvxW
i28VRc/2gYdMVLhpaiSey6kEzuUzu5cOZZcrzZju06miTtIuJ1w6AQ8Phb2jZJ0c
zDJ5SNpRTqYDhhpX4ESDF8x2cQKDYm4y46MR5H61SlVoTkPJnu2UREm0XjksHhgp
2XIbeg3QQNb1tibY/YNCPueTuhC1UzYAsBB2xB3irqg3zvWXBxx1k9KFTo1jC5vR
FF2kam9N3kmCjlvNI9HDZOES17pHNC2zNSk3YXvpaPWMd/o8n7yH5v97KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGV3QFM3xoTI5UdD28toOHTG7W4MB8GA1UdIwQY
MBaAFB270+G85nJRtY8mz9Jf1AFWQWYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wYzBhNjktNjcwNS00MjZjLTllNzAt
Y2Y4YjAxZjZlZjE3LzEvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wYzBhNjktNjcwNS00MjZjLTllNzAtY2Y4YjAxZjZlZjE3
LzEvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1I6ZAwc
7lL9UQ5oQDGuvxDY9UtU9Dxsq3ZWlz7pXe7M1UHfczPgdHvfpK++3riYHgqeU4d2
leQVsg7Bo6aA7yIK47pv1HJ7dlfvddptUHMvaRuakN+bZ9DTVjmdooMn2yaC9YMi
MCulu5Pb1qsK9IRFxSGfHNeVqhkI6lnCinWz6Tz2e2aAMeic5P2Bu0Mm+erjyCWE
Ie7s2lGNCSEj5SkQPLmwSoTF1Qm4KmwL0DvvcA+trMjdZzRFlROa5J8M7N2N4tMs
Vh8sC+0IOg6RFRxfGpz7hp9eo9YNDCOjHl6mDbK7d2Bvjsq4aLDT179bX8dxh6ps
lEQc2DoSGnwLHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:16:21 2025 by rpki-client