Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: 6LyqE1teYanCrrSKYPKDjaAm9Yyca8dFKWPVgMlbA1s=
Subject key identifier: 12:55:1B:63:B1:7B:7B:99:B7:A9:62:60:D1:39:0A:0B:53:9B:E0:A7
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 0198470908634ECC7AA097F45C8E93677683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 14:00:30 +0000
Manifest this update: Sat 26 Jul 2025 14:00:30 +0000
Manifest next update: Sun 27 Jul 2025 14:00:30 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: WAfGLfl5GCs+nCOVkR1rDn4R/YrvnAYh3b09d/MlEys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:08:63:4e:cc:7a:a0:97:f4:5c:8e:93:67:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Jul 26 14:00:30 2025 GMT
Not After : Jul 27 14:00:30 2025 GMT
Subject: CN=12551b63b17b7b99b7a96260d1390a0b539be0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:e1:10:4d:88:c6:95:76:02:e4:90:e2:29:
e9:77:80:ba:26:66:ce:04:55:70:6d:3e:ca:eb:0a:
5f:a5:ef:77:75:86:6d:3c:85:9e:b3:3a:82:b5:95:
9b:08:c8:d5:9c:e9:27:7a:d0:ab:7e:5f:c4:1c:85:
54:13:17:a4:af:12:2c:1a:0b:5b:5e:d8:3b:c9:ef:
1c:89:96:35:16:8f:e6:d6:1f:b4:91:9c:29:ed:31:
b3:ed:43:ac:f1:f3:d4:e3:6d:c8:6f:dc:bb:e1:3c:
02:76:ca:b8:40:f7:98:b3:39:8d:44:8d:e0:40:d6:
4e:9a:93:6a:c7:2b:b3:c3:7d:2c:c3:ed:25:bf:d6:
85:98:6a:08:e7:d3:77:81:e6:3c:de:28:12:01:a6:
95:1e:12:35:46:72:50:0d:92:f5:e1:6c:69:9a:57:
bf:b9:a3:ce:61:99:1a:aa:ab:0f:7d:91:2d:34:6e:
d6:38:f0:d5:69:fa:4e:77:fe:3b:07:ef:92:94:1c:
b6:fd:a3:f6:a3:7c:7d:25:11:52:25:0c:61:34:a3:
f5:4a:2a:f8:dd:9c:7f:96:12:d6:60:a8:50:84:e2:
3c:1c:91:ab:f8:25:2b:3f:99:be:d4:c3:37:7d:a3:
6c:4a:ef:85:1b:2a:9e:bd:dd:49:01:63:b6:f4:88:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:1B:63:B1:7B:7B:99:B7:A9:62:60:D1:39:0A:0B:53:9B:E0:A7
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f7:f1:bc:87:6f:a1:d6:dd:6a:f2:f2:b9:6f:ed:9a:be:39:
f8:fb:3d:30:38:57:02:d7:56:40:91:be:44:b4:30:a8:d6:ea:
f7:f8:1b:12:bb:90:3e:32:dd:38:44:01:0e:d0:ed:c9:38:e1:
87:ea:c4:01:1c:be:e3:4a:ee:d3:8b:79:28:a1:80:b0:25:9f:
98:c9:68:5a:ef:32:93:e9:46:68:96:da:22:ed:e2:c8:ee:15:
92:87:44:ae:1c:16:77:07:1f:f5:2f:7d:9b:6e:51:44:5e:d8:
d6:c2:6b:71:60:79:e2:ba:02:c1:8d:8c:09:65:e3:b6:6b:71:
29:74:1b:d0:2b:41:20:e7:0e:db:39:9d:6d:2a:2f:76:9f:ff:
0b:7e:df:24:3a:df:3a:e8:ec:77:61:cc:75:48:05:3a:2b:67:
4d:08:aa:e3:c3:c9:ac:54:ed:74:37:72:2d:56:3b:5b:e2:97:
3f:ae:48:7d:ac:c3:22:94:fa:ad:e1:0e:9b:de:37:d3:25:28:
10:c7:4e:f3:00:88:0e:2d:74:39:80:47:55:71:db:22:eb:71:
5f:22:6c:84:be:8d:3c:7f:6e:1e:5b:dc:67:b9:6e:24:c4:1d:
fb:e3:1d:7c:45:eb:44:34:a4:01:97:4b:00:a1:1d:85:fc:81:
e2:6a:a0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:15 2025 by rpki-client