Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: 3AjMZzL3OEOXixLPZnjkbvQe1yg3N3YWrXVmACBFrFE=
Subject key identifier: AB:8A:4F:DA:33:C0:4C:2B:9B:EA:97:93:D9:4D:0B:92:5C:74:30:41
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 01974A0C9FB6E066AF687AE9A3085AE2484D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 11:00:30 +0000
Manifest this update: Sat 07 Jun 2025 11:00:30 +0000
Manifest next update: Sun 08 Jun 2025 11:00:30 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: GmgfCn7iUc3/N2uXSbMPblEIdM/qVTj3KgriclI1y2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:9f:b6:e0:66:af:68:7a:e9:a3:08:5a:e2:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Jun 7 11:00:30 2025 GMT
Not After : Jun 8 11:00:30 2025 GMT
Subject: CN=ab8a4fda33c04c2b9bea9793d94d0b925c743041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:2f:31:75:a1:59:72:ff:8e:44:ff:39:30:
a8:9f:ba:a7:e0:cd:ae:5f:20:ce:a2:2c:6f:e8:b1:
1a:19:16:e6:27:7c:a5:a8:59:36:ac:8b:a8:83:53:
29:e7:6b:75:7e:7c:98:bb:98:cf:c8:3c:ba:c6:a2:
e6:68:80:ba:1d:f5:d9:94:61:01:84:d5:e2:8e:57:
fc:d6:c3:e5:d4:14:94:36:41:96:cb:50:15:0f:0a:
12:f9:58:12:e0:f0:03:1b:c2:13:f1:a6:7a:43:00:
57:d2:aa:08:e6:04:6c:44:e7:87:9a:1b:b9:76:3b:
be:78:c2:22:af:f1:3d:3b:94:f3:c3:31:1d:ec:17:
7f:88:28:28:cb:3e:ec:aa:47:cd:e2:b6:ff:de:a1:
4b:ed:e8:66:d1:bf:08:70:b1:7c:79:63:61:a7:10:
82:b0:78:11:3a:85:07:5e:03:29:58:43:0d:06:83:
85:7e:4a:06:8c:d0:c0:1f:ae:ac:f3:54:0f:d9:e2:
54:41:ad:eb:17:b2:9d:e0:66:20:99:9a:b0:83:12:
2c:a8:1d:66:57:30:b3:00:55:98:4a:d2:91:fc:b7:
25:7f:e2:38:6a:bc:11:fa:65:13:79:36:ea:b9:88:
d0:50:0d:5f:7c:e7:18:2e:b9:4c:aa:dd:b7:7b:ac:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8A:4F:DA:33:C0:4C:2B:9B:EA:97:93:D9:4D:0B:92:5C:74:30:41
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:36:f8:68:2c:14:85:25:ca:f4:f8:fb:26:2d:8c:88:6f:e6:
79:25:82:a0:e5:3a:11:73:47:2f:67:9c:8a:d3:f6:98:39:74:
fa:1a:17:b8:4f:aa:51:c5:fe:1c:0b:c1:64:96:ff:fd:14:99:
94:6b:53:4c:12:3d:b6:0b:9b:2d:6d:b8:57:b1:30:61:f7:56:
6f:2e:a6:fd:a9:25:76:f4:74:0b:2f:4a:db:4e:69:20:3a:0a:
c9:41:98:66:18:24:05:fe:37:0b:2c:f1:1b:18:24:5b:9b:10:
f2:ef:8c:e4:c5:d2:d9:f8:42:33:97:e0:9f:7d:bf:04:7a:61:
90:c0:ca:77:fa:47:ed:5a:b0:4b:22:65:24:ef:f0:60:b5:f2:
69:ec:54:6f:32:2a:1f:6c:da:aa:3e:55:c5:ab:df:58:ef:12:
a2:8a:e9:39:56:39:a5:03:24:42:b8:4c:95:31:a5:c9:f3:dc:
cf:ef:19:27:94:b1:fe:eb:b5:f2:d1:c0:3b:d9:a0:28:30:50:
f1:21:fc:0c:71:31:1c:e0:72:21:02:bd:f1:f1:c0:59:c7:06:
5f:db:fd:41:d8:03:f2:18:12:62:bf:49:3b:09:b5:10:79:f1:
82:f1:1a:42:9f:62:40:96:0d:6d:3c:b3:76:b6:80:c7:fb:c5:
38:9b:e9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDJ+24GavaHrpowha4khNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjkxOWEzZmViMGVjOTY2Mjk5ZmYwZmFlOGRlZmNiNDE1
ZTIyZmUwHhcNMjUwNjA3MTEwMDMwWhcNMjUwNjA4MTEwMDMwWjAzMTEwLwYDVQQD
EyhhYjhhNGZkYTMzYzA0YzJiOWJlYTk3OTNkOTRkMGI5MjVjNzQzMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI0vMXWhWXL/jkT/OTCon7qn4M2u
XyDOoixv6LEaGRbmJ3ylqFk2rIuog1Mp52t1fnyYu5jPyDy6xqLmaIC6HfXZlGEB
hNXijlf81sPl1BSUNkGWy1AVDwoS+VgS4PADG8IT8aZ6QwBX0qoI5gRsROeHmhu5
dju+eMIir/E9O5TzwzEd7Bd/iCgoyz7sqkfN4rb/3qFL7ehm0b8IcLF8eWNhpxCC
sHgROoUHXgMpWEMNBoOFfkoGjNDAH66s81QP2eJUQa3rF7Kd4GYgmZqwgxIsqB1m
VzCzAFWYStKR/Lclf+I4arwR+mUTeTbquYjQUA1ffOcYLrlMqt23e6zn0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuKT9ozwEwrm+qXk9lNC5JcdDBBMB8GA1UdIwQY
MBaAFIW5GaP+sOyWYpn/D66N78tBXiL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEt
NDdkYzA4ZDdlM2JhLzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEtNDdkYzA4ZDdlM2Jh
LzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzb4aCwU
hSXK9Pj7Ji2MiG/meSWCoOU6EXNHL2ecitP2mDl0+hoXuE+qUcX+HAvBZJb//RSZ
lGtTTBI9tgubLW24V7EwYfdWby6m/akldvR0Cy9K205pIDoKyUGYZhgkBf43Cyzx
GxgkW5sQ8u+M5MXS2fhCM5fgn32/BHphkMDKd/pH7VqwSyJlJO/wYLXyaexUbzIq
H2zaqj5VxavfWO8SoorpOVY5pQMkQrhMlTGlyfPcz+8ZJ5Sx/uu18tHAO9mgKDBQ
8SH8DHExHOByIQK98fHAWccGX9v9QdgD8hgSYr9JOwm1EHnxgvEaQp9iQJYNbTyz
draAx/vFOJvpQA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:15:34 2025 by rpki-client