Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: RaCrqe6F1uQCgj2LQSV6x/N7M5DRq9xBI1PItDFOBPI=
Subject key identifier: CF:D8:F9:0D:5B:A9:26:4C:E5:09:E0:3D:4F:1F:8F:B7:98:9B:E8:44
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 01988D6AB2E256C9DAD48A97E2E1429EFB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0513
Signing time: Sat 09 Aug 2025 06:00:36 +0000
Manifest this update: Sat 09 Aug 2025 06:00:36 +0000
Manifest next update: Sun 10 Aug 2025 06:00:36 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: v+L4XEhJKTkddglLBAPZM8FbZXlVJK5y6g8CYPZea0E=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:b2:e2:56:c9:da:d4:8a:97:e2:e1:42:9e:fb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Aug 9 06:00:36 2025 GMT
Not After : Aug 10 06:00:36 2025 GMT
Subject: CN=cfd8f90d5ba9264ce509e03d4f1f8fb7989be844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:30:ab:82:64:74:b5:dc:4b:ff:ff:60:06:
ae:74:03:cd:43:31:ec:53:a5:cf:ca:6b:92:aa:63:
72:3f:48:63:fb:0d:ab:18:4e:58:90:88:24:83:9a:
8c:18:45:cb:97:4b:26:54:07:cd:33:d7:2a:69:86:
72:92:99:12:aa:a4:45:f0:19:9f:ea:be:00:98:f1:
67:86:9c:96:27:7a:3c:f4:65:d3:c6:a2:6a:42:ae:
7b:80:d1:ab:ba:10:c6:78:7c:76:ae:89:dc:8b:87:
6e:7b:22:f1:e8:43:a4:89:e8:cc:27:ac:16:ae:1d:
1e:6b:68:36:87:67:65:39:c2:5d:57:bf:69:49:29:
ef:15:58:7a:f2:ef:35:f5:46:56:ea:0d:2b:92:10:
6c:e4:49:fa:37:da:64:05:87:bf:cb:76:54:5c:ac:
c2:db:d1:e5:f9:34:8e:e3:88:12:6e:31:a0:35:d8:
cc:a5:40:98:8a:43:30:2e:20:37:dd:4d:fc:d0:c7:
60:e5:1a:89:26:38:34:36:66:84:f6:2c:8e:78:2b:
af:c2:59:9f:d7:89:3f:2b:b9:53:72:69:2a:c7:80:
a0:5d:d8:e4:fa:3b:95:c8:1f:ea:6c:30:04:ea:07:
e5:23:1f:8a:0f:c8:64:0c:5f:e7:62:8c:eb:4b:77:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D8:F9:0D:5B:A9:26:4C:E5:09:E0:3D:4F:1F:8F:B7:98:9B:E8:44
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ff:1b:d1:16:3c:36:c5:fa:3e:0c:ee:46:ca:71:e7:25:6e:
91:30:7c:90:b6:1f:86:8b:bd:74:50:b8:3b:a5:1f:93:95:98:
99:75:a1:66:5f:df:06:f9:75:38:fa:fc:1e:ef:93:b2:e8:48:
ce:ce:c5:20:59:5a:d6:d7:68:ef:8b:52:62:31:bf:a7:79:89:
d5:71:3b:4d:36:7e:88:13:23:5a:c2:87:c0:6b:12:22:d7:99:
de:ef:81:ee:03:ed:6b:a7:78:6d:74:1d:f0:fb:19:d8:dc:0c:
a2:b8:de:0a:45:7e:24:9e:12:79:f1:aa:3e:5a:8e:3d:c1:e0:
f8:a9:64:ed:78:14:3f:b0:8c:76:21:bd:4b:eb:72:60:80:eb:
78:33:6a:5f:00:fc:1c:a7:dc:a6:7d:f6:43:6d:d6:04:09:a6:
20:df:04:b1:a5:60:53:e4:61:b7:9a:5d:2b:49:02:39:ce:fd:
e3:c6:3e:65:07:b7:23:32:c5:b8:51:bf:f9:34:a0:74:f0:11:
75:45:02:e6:74:07:60:3b:c1:ed:2d:c5:37:23:93:f9:4c:d3:
41:ae:b9:08:d0:cf:df:62:de:29:32:f9:b2:19:fe:75:d3:20:
db:52:81:10:54:88:78:e8:8a:03:0b:17:98:7a:a6:63:5c:d6:
c5:d6:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:40 2025 by rpki-client