Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: XUUWefhKr/RYL7cyu0Lrkd7FjznNxYpvtPZXxeFBy1U=
Subject key identifier: 69:FD:CB:D0:41:87:AE:A7:46:D8:A0:E1:5C:BA:11:51:BF:E8:4A:9E
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019A7149BAFED5C770C3FF8A0CBFBCF1DB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: WVboubn4YuNhCQ+CTlsCGG5BwGx5gRScW8sIFB3Nr/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ba:fe:d5:c7:70:c3:ff:8a:0c:bf:bc:f1:db:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=69fdcbd04187aea746d8a0e15cba1151bfe84a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:c5:44:58:16:6b:a5:be:c5:df:b3:ad:6e:
82:fc:f5:49:26:52:df:c5:64:b6:5a:42:3a:fc:03:
d6:cf:51:89:3f:03:3e:15:0c:eb:1e:94:79:26:21:
76:f8:c0:eb:9e:78:d7:bf:3e:a7:db:0a:d0:d5:09:
87:d5:b2:85:b4:ce:62:c4:66:1d:be:2b:03:be:92:
df:ce:f0:c8:17:ac:5d:d1:ed:99:97:f5:e7:b9:3d:
ed:96:9f:26:27:f1:2d:4c:e0:b0:a8:72:0d:02:14:
af:09:f0:d2:a6:06:e5:6b:c4:d7:5c:1f:c4:53:f5:
82:7a:4f:80:ed:d7:e1:f0:86:83:ca:4a:8c:77:65:
f0:50:e8:88:c0:7f:d4:fd:07:6c:a3:b7:7f:44:ee:
d2:ee:9f:84:ca:2d:28:13:16:68:36:ca:f2:11:22:
36:22:bd:45:61:55:90:e5:4b:9d:3e:e4:5f:80:17:
06:38:8c:ba:60:60:1a:5c:ae:e7:26:87:d2:8d:07:
8b:dd:66:27:93:97:fc:1d:45:c8:c1:98:e3:58:e2:
23:e0:6e:2a:1e:82:dd:24:41:91:7e:b6:1d:7b:23:
24:d2:f0:a6:62:b4:19:15:a3:95:62:22:a7:0a:87:
b0:13:90:70:0d:c9:08:77:71:ef:5d:9c:cc:68:b7:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FD:CB:D0:41:87:AE:A7:46:D8:A0:E1:5C:BA:11:51:BF:E8:4A:9E
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:22:e3:51:e8:bf:3e:15:30:57:84:8a:0b:0b:64:8a:27:77:
dd:f8:29:42:45:57:c2:db:7f:5d:c2:0f:db:2b:91:07:dd:ab:
b5:39:43:ae:a6:12:fa:40:7d:bd:90:31:01:4e:1b:88:ca:ed:
14:50:6a:06:2a:98:a0:e3:5a:d2:1e:e8:ed:0c:e9:99:a6:dd:
2e:b5:80:45:7f:01:6c:df:4e:0b:08:a4:8b:a1:e8:aa:db:98:
ff:7c:ac:f3:7a:e8:bc:6d:49:16:db:48:f4:91:21:b8:0d:0c:
fe:65:ef:be:6c:b7:60:97:c1:78:25:6e:73:89:33:77:8a:4a:
fa:ca:cf:eb:41:a8:cb:8e:b4:6f:0a:66:cd:f0:ee:97:a2:b6:
11:af:09:da:fa:0c:16:d2:30:54:d8:01:53:d4:12:e8:fb:66:
bc:67:27:17:13:15:47:cb:fd:c4:8a:9d:3f:8e:31:15:0c:09:
3c:ec:22:7c:5e:65:48:a9:fd:df:a0:0f:3e:4b:56:74:f4:72:
66:5f:34:86:46:60:f8:f2:6c:14:f1:43:94:7e:78:4e:aa:8d:
4d:18:b4:48:a7:e4:30:46:10:3c:af:d5:57:bd:ed:3e:cf:82:
30:14:96:f9:36:ec:a1:e9:94:c0:16:96:cd:e4:da:41:1e:dc:
da:5a:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:19 2025 by rpki-client