Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: GrrCD95Xtyq5WyHQ620n/79YAi+7b1oq/ORiP8+XDKk=
Subject key identifier: DD:24:5B:03:85:C6:48:A2:B4:C1:BB:55:D5:F7:46:C8:DE:4C:A9:8B
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 019845BF4F22A262302F60B1A7E06BAA7852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 0DC4
Signing time: Sat 26 Jul 2025 08:00:22 +0000
Manifest this update: Sat 26 Jul 2025 08:00:22 +0000
Manifest next update: Sun 27 Jul 2025 08:00:22 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: 70xvxRVBwPsXwVQBx7aHIz8P25tYj6OP5eJNsfl7z5M=)
2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:4f:22:a2:62:30:2f:60:b1:a7:e0:6b:aa:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Jul 26 08:00:22 2025 GMT
Not After : Jul 27 08:00:22 2025 GMT
Subject: CN=dd245b0385c648a2b4c1bb55d5f746c8de4ca98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f9:59:33:a5:cb:f1:16:88:78:6a:a0:de:34:
b2:2f:4f:6d:2b:0e:fa:40:3e:38:95:25:a1:69:43:
c3:9d:13:4c:bb:54:c2:5a:e7:1f:43:c9:43:f9:d0:
d3:00:86:60:ce:38:0b:e1:06:53:13:95:02:c7:22:
13:20:86:d5:66:75:86:c2:62:1c:fb:b6:cd:00:a3:
6d:ec:42:08:97:a4:e1:31:6f:23:fb:77:d7:a5:c6:
92:36:12:7a:a8:58:bf:dd:68:01:e6:92:76:78:79:
36:c2:da:bc:ed:a7:2c:ec:94:39:b3:53:e8:dd:39:
64:66:9a:b9:ef:e2:c2:79:5e:a6:67:05:0b:9b:3c:
25:1a:3f:60:d7:6d:db:ec:ae:b5:53:be:db:c4:b6:
3f:d8:2c:b5:b2:71:02:ed:9e:56:94:ca:a4:b9:50:
94:98:2f:b2:06:e0:dd:75:b2:72:29:5a:ad:1a:f6:
7f:af:eb:c1:f1:3d:6d:f1:3f:d3:10:7d:a8:43:07:
1f:dc:cc:02:79:fb:cd:38:5c:95:f7:1b:8d:06:79:
53:33:8b:86:b7:7b:95:79:25:89:ff:ed:d3:37:b8:
a9:22:fc:75:41:af:75:98:79:17:bd:b7:4a:16:c9:
f7:f9:26:cb:9d:0a:da:c1:04:6f:28:bf:93:ba:15:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:24:5B:03:85:C6:48:A2:B4:C1:BB:55:D5:F7:46:C8:DE:4C:A9:8B
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:d9:c3:df:49:f8:1b:15:a5:47:47:bc:69:cc:15:40:46:
9c:f5:c4:e3:98:8f:c8:eb:f6:b0:2e:b7:8e:06:50:21:23:35:
58:97:32:b2:0e:b4:98:22:0c:f2:9d:05:8e:70:bc:99:a8:64:
6c:b5:13:9f:41:69:f9:57:31:73:11:dc:8a:79:90:4f:0c:ce:
25:83:8a:46:c5:a9:b5:e0:d9:fd:6e:dd:4c:44:a9:73:50:0a:
7b:1a:97:27:aa:4f:ff:b7:44:c8:8e:bb:aa:1a:43:dc:d5:04:
fb:a6:42:05:13:09:35:ba:29:2d:a2:9c:a5:54:21:74:bc:cd:
94:19:0b:7a:19:3c:63:5c:7b:f8:9a:91:bb:53:2d:2f:27:3e:
8a:c2:12:3b:77:24:fb:fa:48:d0:04:ff:6e:f0:2d:a2:70:d9:
22:fa:4e:98:f5:31:f2:96:95:f4:fe:d5:97:96:cc:14:49:dc:
c9:0d:de:39:0e:89:18:a8:60:0d:3b:3a:ae:fc:0d:20:76:c8:
d2:96:f9:49:bb:1f:32:e9:3b:fa:1b:a4:8a:7d:af:dc:e1:2d:
bd:56:bf:de:b7:bb:43:a4:6f:aa:55:45:74:10:82:e6:d1:8d:
b7:b8:eb:03:a0:57:40:d2:20:e3:62:21:ce:35:c5:e9:20:d7:
7c:2c:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:58:17 2025 by rpki-client