Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
File: hbc7mIsBRCjrr2ehj30Zmbojxk0.mft (raw, json)
Hash identifier: YK2HYB9ds6Q7/YCJEXgtyXMtRD09ZD4vrcr3rAosUVw=
Subject key identifier: 5B:49:37:B9:98:23:E7:F7:F2:3F:05:C6:1D:1A:B9:8B:88:4E:96:27
Authority key identifier: 85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
Certificate issuer: /CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Certificate serial: 019849666E75F4701F7A09DE5AA9798D7724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
Manifest number: 121E
Signing time: Sun 27 Jul 2025 01:01:46 +0000
Manifest this update: Sun 27 Jul 2025 01:01:46 +0000
Manifest next update: Mon 28 Jul 2025 01:01:46 +0000
Files and hashes: 1: hbc7mIsBRCjrr2ehj30Zmbojxk0.crl (hash: Zfy+xZkSq+e9HwGhs19YsCv1SVC5PWDj96dVUOghyhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:6e:75:f4:70:1f:7a:09:de:5a:a9:79:8d:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Validity
Not Before: Jul 27 01:01:46 2025 GMT
Not After : Jul 28 01:01:46 2025 GMT
Subject: CN=5b4937b99823e7f7f23f05c61d1ab98b884e9627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:77:e6:48:7b:e4:4a:58:93:6a:4e:12:58:
7f:2e:93:bf:81:66:70:46:3c:0d:d2:f4:e6:df:d4:
b1:42:89:4d:c8:80:bc:0b:7e:5c:74:58:48:1b:98:
97:21:72:52:a8:a6:31:c3:f6:bf:83:bf:fe:49:b9:
16:32:e6:17:53:8b:43:e4:06:75:5e:ff:81:b2:b4:
3f:7c:a3:81:26:08:19:f4:d8:aa:6b:e6:52:58:a0:
f8:c7:a8:10:99:23:3c:08:17:12:b8:dd:5c:f1:e7:
78:3e:5f:d5:43:66:c8:8b:86:6c:32:c0:e4:b8:a5:
2a:89:8e:20:8a:e9:6c:04:cd:1a:b6:74:1a:a6:80:
42:49:51:73:37:83:11:4c:a5:2e:4e:57:a9:b6:6d:
0b:35:80:f3:f5:a4:6c:5a:5e:82:7f:c5:72:8c:eb:
fc:b4:91:2e:10:06:b4:d8:3a:ee:50:29:fc:53:c6:
eb:26:34:0f:f6:f8:23:66:5b:d9:2d:02:78:b6:c0:
b0:08:99:d7:ed:5d:85:5c:c8:58:f8:58:8c:7d:da:
60:d9:61:53:53:93:54:77:15:f2:05:de:8f:e4:31:
d5:2c:67:e5:2a:bb:cc:f5:e2:2f:2f:79:16:4e:b6:
ee:87:03:1d:03:83:e4:f7:0e:08:83:06:c2:db:92:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:37:B9:98:23:E7:F7:F2:3F:05:C6:1D:1A:B9:8B:88:4E:96:27
X509v3 Authority Key Identifier:
keyid:85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c9:7c:90:04:95:e9:7d:cc:08:a6:43:7b:32:7d:25:89:79:
a2:39:b5:58:e3:fe:73:0b:fd:73:15:4c:56:2e:04:8d:66:40:
5e:64:c8:12:61:f0:68:e5:5e:09:50:d2:5d:83:f8:02:3e:1f:
8c:b7:44:7d:ea:5a:5d:b6:d3:66:6a:e3:ea:64:e2:83:5e:df:
96:b7:7f:60:8a:6b:aa:54:d3:d8:df:24:59:28:cb:a4:70:21:
09:fb:9c:f6:6e:db:6c:e6:cc:56:4f:cf:3f:aa:13:cf:0c:e3:
44:18:29:4f:c8:44:f5:2d:e2:33:35:8d:c6:e8:22:53:d7:14:
bf:d9:e9:d7:0b:af:ed:58:80:5b:4f:bb:69:af:e3:94:95:91:
76:9b:6a:f4:74:79:3c:70:a6:ec:33:d8:37:3d:9c:53:6a:87:
fb:44:f9:69:9a:8b:57:bf:12:fc:05:f7:3c:94:c2:75:55:ea:
a5:23:aa:5c:74:c0:7c:5e:72:45:21:73:04:98:62:34:db:67:
6f:bc:a4:b7:a7:01:f4:81:c2:be:bf:3f:65:79:f5:43:12:18:
87:70:45:80:f4:81:b0:d6:74:28:5e:6c:84:2a:31:c5:35:ac:
4d:37:28:ab:d7:08:3d:91:25:7d:08:eb:bf:dc:c1:fc:a8:f6:
91:20:4b:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZm519HAfegneWql5jXckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjczYjk4OGIwMTQ0MjhlYmFmNjdhMThmN2QxOTk5YmEy
M2M2NGQwHhcNMjUwNzI3MDEwMTQ2WhcNMjUwNzI4MDEwMTQ2WjAzMTEwLwYDVQQD
Eyg1YjQ5MzdiOTk4MjNlN2Y3ZjIzZjA1YzYxZDFhYjk4Yjg4NGU5NjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EB35kh75EpYk2pOElh/LpO/gWZw
RjwN0vTm39SxQolNyIC8C35cdFhIG5iXIXJSqKYxw/a/g7/+SbkWMuYXU4tD5AZ1
Xv+BsrQ/fKOBJggZ9Niqa+ZSWKD4x6gQmSM8CBcSuN1c8ed4Pl/VQ2bIi4ZsMsDk
uKUqiY4giulsBM0atnQapoBCSVFzN4MRTKUuTleptm0LNYDz9aRsWl6Cf8VyjOv8
tJEuEAa02DruUCn8U8brJjQP9vgjZlvZLQJ4tsCwCJnX7V2FXMhY+FiMfdpg2WFT
U5NUdxXyBd6P5DHVLGflKrvM9eIvL3kWTrbuhwMdA4Pk9w4IgwbC25Ju3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtJN7mYI+f38j8Fxh0auYuITpYnMB8GA1UdIwQY
MBaAFIW3O5iLAUQo669noY99GZm6I8ZNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJjN21Jc0JSQ2pycjJlaGozMFptYm9qeGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iODUwZGUtMGM2Yi00ZGMyLWFkOWUt
Y2ZlZGUwOTAwN2FhLzEvaGJjN21Jc0JSQ2pycjJlaGozMFptYm9qeGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iODUwZGUtMGM2Yi00ZGMyLWFkOWUtY2ZlZGUwOTAwN2Fh
LzEvaGJjN21Jc0JSQ2pycjJlaGozMFptYm9qeGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcl8kASV
6X3MCKZDezJ9JYl5ojm1WOP+cwv9cxVMVi4EjWZAXmTIEmHwaOVeCVDSXYP4Aj4f
jLdEfepaXbbTZmrj6mTig17flrd/YIprqlTT2N8kWSjLpHAhCfuc9m7bbObMVk/P
P6oTzwzjRBgpT8hE9S3iMzWNxugiU9cUv9np1wuv7ViAW0+7aa/jlJWRdptq9HR5
PHCm7DPYNz2cU2qH+0T5aZqLV78S/AX3PJTCdVXqpSOqXHTAfF5yRSFzBJhiNNtn
b7ykt6cB9IHCvr8/ZXn1QxIYh3BFgPSBsNZ0KF5shCoxxTWsTTcoq9cIPZElfQjr
v9zB/Kj2kSBLpQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:28 2025 by rpki-client