Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: MAai8oc7r1h4YnhZeDf2mcAJ1BOUFi/ansrXuIgc92s=
Subject key identifier: AB:74:32:41:B6:CE:EC:64:B5:96:56:B8:3D:9D:73:F0:22:CE:78:66
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 0196914CC5B0B6ED6A9350B6414C19165E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 040B
Signing time: Fri 02 May 2025 14:00:49 +0000
Manifest this update: Fri 02 May 2025 14:00:49 +0000
Manifest next update: Sat 03 May 2025 14:00:49 +0000
Files and hashes: 1: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: ZTf8eIsvJnQ7oXLxaAD4JxNMBGp7ESLFh9P28xxrt8A=)
2: kbsmCVo1MuAxbWK2Mk_FNqJ4o-Q.roa (hash: FxGgyIXbAaHbajTUZb5rQl/upi6b8yc9JYqmBZ7HbLE=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:c5:b0:b6:ed:6a:93:50:b6:41:4c:19:16:5e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: May 2 14:00:49 2025 GMT
Not After : May 3 14:00:49 2025 GMT
Subject: CN=ab743241b6ceec64b59656b83d9d73f022ce7866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:28:bb:5f:dd:7b:87:3c:6f:23:42:4f:71:
c8:50:0b:4a:7c:ee:ca:12:95:17:b4:7c:02:d6:23:
21:f9:09:f9:fe:ee:b8:13:c8:6d:7e:56:77:71:db:
b0:fb:1a:45:df:71:2e:7b:2b:01:e9:f9:58:b7:a4:
19:f1:32:f3:2f:fb:d5:a1:d6:75:ca:66:6b:b9:f5:
e9:39:9c:3a:74:bd:83:4b:af:69:7f:bb:22:f1:73:
e7:85:09:f5:e6:06:8d:a1:a2:1b:e4:a9:ff:ed:ce:
1e:fd:43:08:f9:8c:82:ad:26:62:85:4f:90:6c:ef:
4b:09:27:ce:86:38:cd:0a:43:53:5f:f4:49:d2:a7:
f8:c0:4b:7b:47:6e:12:14:77:89:38:f7:c2:59:f1:
5f:ee:21:69:9b:fe:77:a3:bc:e4:d7:78:bb:58:ee:
61:5c:ff:b9:1e:c3:34:81:b3:8e:1e:fe:5c:f6:aa:
62:fa:40:2a:fd:dd:72:b5:82:ad:78:10:43:70:61:
d4:bd:48:c4:9d:b0:9c:cd:bb:31:0c:c9:95:4c:ab:
36:df:9a:c1:80:c1:75:81:eb:a8:31:de:d2:34:91:
ba:59:ef:5c:77:7a:bb:96:11:6e:4e:1d:59:13:f2:
96:9c:80:48:19:f2:a1:48:a8:6f:49:47:22:12:38:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:74:32:41:B6:CE:EC:64:B5:96:56:B8:3D:9D:73:F0:22:CE:78:66
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fe:70:1d:06:87:05:24:dd:59:b6:24:e2:48:37:25:49:a4:
7c:fe:bd:08:79:3b:46:f1:cc:b2:56:cd:b3:e3:90:33:f6:ae:
40:8f:ac:11:03:7c:ca:68:d2:4b:3f:9a:ae:ba:ca:87:1f:fb:
a7:73:75:d5:86:62:1b:99:c5:5c:12:74:d1:f4:9f:d4:db:77:
34:1a:b9:77:5e:81:65:01:ad:8b:a0:9c:27:dc:70:54:72:ae:
66:d8:e9:05:79:c9:df:7b:03:a0:90:35:62:35:95:33:64:51:
be:d8:00:29:6b:29:a6:2c:a0:10:72:94:96:d2:a2:12:ca:a2:
24:3f:ac:16:c7:24:c6:0b:43:9b:48:84:d8:4b:76:3b:ca:f2:
8b:08:17:e0:07:eb:27:b5:ff:64:08:1f:93:50:9d:18:dc:4f:
95:72:0d:6e:4c:99:56:1f:06:e9:74:78:36:a9:48:98:59:0b:
24:67:1d:3f:a3:2c:1c:8f:91:94:f2:e5:d1:ab:3c:3d:f0:4d:
8f:c7:a7:f9:c7:e6:e9:54:eb:c8:4d:4d:19:5b:2d:6e:39:92:
ca:02:08:7f:06:11:83:f9:18:99:86:4e:46:f6:70:5a:0c:56:
98:45:d8:7f:2d:f5:41:c3:cb:be:d6:0e:37:bf:ba:73:32:e4:
37:3a:ed:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRTMWwtu1qk1C2QUwZFl5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Yjg3MWQ2OTM5NTYxMDQ2NTc3OTMyM2I5MWIzNGU2OWJm
Y2Y1YjUwHhcNMjUwNTAyMTQwMDQ5WhcNMjUwNTAzMTQwMDQ5WjAzMTEwLwYDVQQD
EyhhYjc0MzI0MWI2Y2VlYzY0YjU5NjU2YjgzZDlkNzNmMDIyY2U3ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhwou1/de4c8byNCT3HIUAtKfO7K
EpUXtHwC1iMh+Qn5/u64E8htflZ3cduw+xpF33EueysB6flYt6QZ8TLzL/vVodZ1
ymZrufXpOZw6dL2DS69pf7si8XPnhQn15gaNoaIb5Kn/7c4e/UMI+YyCrSZihU+Q
bO9LCSfOhjjNCkNTX/RJ0qf4wEt7R24SFHeJOPfCWfFf7iFpm/53o7zk13i7WO5h
XP+5HsM0gbOOHv5c9qpi+kAq/d1ytYKteBBDcGHUvUjEnbCczbsxDMmVTKs235rB
gMF1geuoMd7SNJG6We9cd3q7lhFuTh1ZE/KWnIBIGfKhSKhvSUciEjgYhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt0MkG2zuxktZZWuD2dc/AiznhmMB8GA1UdIwQY
MBaAFIW4cdaTlWEEZXeTI7kbNOab/PW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt
MjZhMGI4ZGVmMGMzLzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz
LzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUP5wHQaH
BSTdWbYk4kg3JUmkfP69CHk7RvHMslbNs+OQM/auQI+sEQN8ymjSSz+arrrKhx/7
p3N11YZiG5nFXBJ00fSf1Nt3NBq5d16BZQGti6CcJ9xwVHKuZtjpBXnJ33sDoJA1
YjWVM2RRvtgAKWsppiygEHKUltKiEsqiJD+sFsckxgtDm0iE2Et2O8ryiwgX4Afr
J7X/ZAgfk1CdGNxPlXINbkyZVh8G6XR4NqlImFkLJGcdP6MsHI+RlPLl0as8PfBN
j8en+cfm6VTryE1NGVstbjmSygIIfwYRg/kYmYZORvZwWgxWmEXYfy31QcPLvtYO
N7+6czLkNzrtgQ==
-----END CERTIFICATE-----
Generated at Fri May 2 20:59:34 2025 by rpki-client