Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
File: hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft (raw, json)
Hash identifier: OzUvhJVXGijyAyyfANLosK0ZuT3iJJrkbsmDRwJdDl8=
Subject key identifier: 1B:2B:C0:53:78:8A:9F:CF:15:A0:33:F5:72:4D:D7:A7:75:CD:CA:DF
Authority key identifier: 85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
Certificate issuer: /CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Certificate serial: 019849D2E898E63AF33AF4A00DA66CEBDD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl (hash: EWojsONpg+RR9W1Vv2TfN2mw8yVVpWDJSaz9UxoJDws=)
2: zES562T2jGbv7XzrHC02CT1oz_k.roa (hash: UbLmo0xCkOQvRcwSPHG5xE6YElRiJFtnaVmOwj9fHBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e8:98:e6:3a:f3:3a:f4:a0:0d:a6:6c:eb:dd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=1b2bc053788a9fcf15a033f5724dd7a775cdcadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:92:05:fb:83:0c:91:db:28:d0:df:30:0a:
08:05:63:fd:1b:91:3f:7f:dd:9e:4c:9e:1f:c7:ce:
72:06:d5:98:25:4a:23:d4:48:a2:6a:de:55:10:40:
29:1c:1e:79:9b:5e:25:f3:43:81:38:2d:16:7b:5c:
2c:57:2e:ed:66:d8:5d:24:78:44:18:0b:09:b2:ae:
6d:f6:fb:fe:75:92:6b:ff:c6:94:ee:09:d4:68:2f:
0e:8e:a4:f1:9c:fd:fd:6d:71:bf:e7:0e:25:83:a9:
42:4f:a0:4b:20:af:15:89:58:05:41:f2:09:6f:2b:
df:c3:81:73:8f:50:f4:2d:54:3a:af:0e:2b:81:51:
16:8d:64:b5:4c:c2:2e:50:b4:f1:18:a2:ca:cf:1b:
45:3d:41:11:ab:0a:74:a7:fb:6f:53:08:19:9a:cb:
73:9f:7b:f8:11:c3:dd:5b:b1:47:81:1d:d6:74:3a:
6a:8a:6c:95:a4:85:2e:b3:44:d2:63:cd:40:52:00:
d5:ce:4e:fb:79:a2:0a:1c:5f:7f:c5:36:78:41:e9:
ed:1c:1a:35:12:5e:82:cf:1d:85:2c:22:b2:ed:52:
4d:a5:6f:bf:cc:fe:36:56:62:5b:40:c9:1e:ad:32:
15:67:28:02:ac:5b:10:6c:94:b6:41:72:49:7c:25:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2B:C0:53:78:8A:9F:CF:15:A0:33:F5:72:4D:D7:A7:75:CD:CA:DF
X509v3 Authority Key Identifier:
keyid:85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9a:10:12:6b:ec:fa:11:d6:c6:d3:9e:25:8c:e6:23:a0:eb:
63:a2:95:64:51:0e:ff:6e:5d:33:8c:9f:26:14:a5:42:45:c0:
2c:61:e3:11:9e:ba:3e:5d:c4:22:5e:90:59:b6:ea:02:c1:cb:
56:9f:75:05:56:18:9f:32:28:dc:d7:1d:91:6b:89:6f:06:4b:
6c:f8:b1:c9:54:ec:34:77:1a:9c:c7:3f:df:99:61:01:c7:0e:
f2:20:7b:e1:de:32:25:79:67:84:5a:3e:42:35:d3:45:96:5a:
ab:65:ee:27:e0:f3:9d:9d:ad:86:4b:ae:f1:eb:ee:ab:bd:65:
73:0e:87:cd:d8:eb:87:c9:93:06:81:1b:83:da:2c:e3:b1:f0:
d1:cb:14:9a:f7:17:9c:f3:b6:d8:42:c2:fc:5a:3f:2a:f8:2d:
0a:0b:ba:f1:4a:11:11:eb:f1:4d:f6:bc:7e:3d:bf:42:cc:3c:
4d:90:bc:bd:a4:78:6a:f8:ac:2f:f2:c3:d1:e1:64:28:1e:5f:
65:65:62:21:0b:a6:fb:4f:cc:d7:3e:64:fe:d4:09:ed:af:ec:
14:dd:81:af:19:4f:a9:89:06:83:ed:62:57:8d:b7:41:3f:5a:
76:84:b3:1a:89:e6:14:06:4f:d0:ac:6d:56:16:b0:e5:a4:85:
12:7e:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:06 2025 by rpki-client