Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: ErRYDq8Zr0MEReZt5EDo9gmGL6saN7SbzsEHtOEfspU=
Subject key identifier: 6B:08:8E:96:B4:B0:D3:83:1C:60:DF:9C:CE:74:9A:AC:3D:80:2B:65
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019654C9C68915718C6AD453884C200CB474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 20:00:31 +0000
Manifest this update: Sun 20 Apr 2025 20:00:31 +0000
Manifest next update: Mon 21 Apr 2025 20:00:31 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: KFMfHl2QCDB/p9s4MRrj54LKOucgz6qFsUjRM2+RJPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:c6:89:15:71:8c:6a:d4:53:88:4c:20:0c:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Apr 20 20:00:31 2025 GMT
Not After : Apr 21 20:00:31 2025 GMT
Subject: CN=6b088e96b4b0d3831c60df9cce749aac3d802b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:b9:3b:d1:25:ec:e7:cc:51:17:77:00:3a:
d4:69:d6:02:5a:ae:09:c3:8b:6c:fc:ae:5b:9a:a0:
d6:ba:36:c8:73:95:62:94:ef:2d:82:b6:0b:0f:e4:
1c:89:17:0f:1c:52:33:f6:b6:14:48:b7:5d:4f:7b:
02:f3:b6:71:3f:6d:e2:77:3a:1f:a1:37:fa:c2:bd:
35:e0:84:69:cd:99:29:e0:4b:f7:e8:c7:72:dc:89:
ae:a0:a0:f0:dd:bf:23:60:9c:22:e7:30:38:f5:09:
b3:3b:63:da:8d:3c:30:21:fd:3d:67:2a:40:ab:4b:
5c:f8:be:56:69:61:8c:b8:c5:e2:a9:e1:43:34:3d:
12:28:63:00:0f:89:10:e7:72:2c:00:72:18:2a:59:
a6:3b:f1:e3:96:12:4e:9d:56:21:1c:d9:7e:f0:86:
1b:8f:1d:5e:26:8c:dd:13:b4:aa:cf:d8:bb:34:14:
74:1a:2f:6b:cd:6d:50:2f:73:ac:84:fb:9a:75:3b:
3f:4d:2e:10:31:0f:83:64:cd:9d:6b:09:c5:64:14:
4b:5f:97:73:22:95:4f:e7:c6:cb:a9:b6:a7:1e:bf:
75:8f:97:de:85:51:d8:b6:df:28:ef:b8:f6:f5:c1:
2c:4d:d0:42:d8:89:89:bc:ba:fb:0b:66:07:76:99:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:08:8E:96:B4:B0:D3:83:1C:60:DF:9C:CE:74:9A:AC:3D:80:2B:65
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:88:62:74:38:67:27:c9:2f:6f:c7:e0:38:c0:22:b4:fc:fa:
6b:21:08:6d:b0:c7:4b:dd:d1:ea:04:43:a2:d5:f1:c1:30:0e:
35:24:50:60:f2:05:fc:54:13:86:d0:84:25:c8:3b:37:65:f2:
9a:da:30:cc:52:d2:95:7d:5a:29:d7:f5:b3:1b:72:a1:22:36:
1c:bc:85:0a:d5:53:33:59:0b:8b:38:f0:99:dd:2a:4b:09:fa:
f3:f5:71:0c:70:66:8d:28:fa:e0:58:25:1f:34:8e:5e:61:05:
98:7b:1f:e1:02:66:d9:e0:34:d6:17:6a:39:01:b7:e7:06:74:
92:5c:47:f2:a3:1a:cd:49:96:aa:2a:af:93:57:7d:43:99:ae:
e8:44:83:4b:11:c5:01:77:74:7c:38:43:86:53:08:f3:80:dd:
c8:f0:27:88:7f:97:a4:3b:c3:3e:80:fe:f0:4b:bb:19:f6:d8:
68:0d:3c:08:a3:26:7a:ec:5c:d9:d1:4d:b6:a2:16:15:db:f3:
0d:8b:b2:0d:63:f4:1e:49:5b:40:21:86:58:98:ab:23:f8:c5:
67:3c:e1:97:95:6a:e0:cc:09:d1:5e:20:18:69:8d:d1:7a:83:
5b:fb:42:30:8d:e4:98:bb:ad:3e:be:bc:6c:d5:92:b3:71:26:
fe:2f:97:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUycaJFXGMatRTiEwgDLR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjkxOWEzZmViMGVjOTY2Mjk5ZmYwZmFlOGRlZmNiNDE1
ZTIyZmUwHhcNMjUwNDIwMjAwMDMxWhcNMjUwNDIxMjAwMDMxWjAzMTEwLwYDVQQD
Eyg2YjA4OGU5NmI0YjBkMzgzMWM2MGRmOWNjZTc0OWFhYzNkODAyYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaK5O9El7OfMURd3ADrUadYCWq4J
w4ts/K5bmqDWujbIc5VilO8tgrYLD+QciRcPHFIz9rYUSLddT3sC87ZxP23idzof
oTf6wr014IRpzZkp4Ev36Mdy3ImuoKDw3b8jYJwi5zA49QmzO2PajTwwIf09ZypA
q0tc+L5WaWGMuMXiqeFDND0SKGMAD4kQ53IsAHIYKlmmO/HjlhJOnVYhHNl+8IYb
jx1eJozdE7Sqz9i7NBR0Gi9rzW1QL3OshPuadTs/TS4QMQ+DZM2dawnFZBRLX5dz
IpVP58bLqbanHr91j5fehVHYtt8o77j29cEsTdBC2ImJvLr7C2YHdpktZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsIjpa0sNODHGDfnM50mqw9gCtlMB8GA1UdIwQY
MBaAFIW5GaP+sOyWYpn/D66N78tBXiL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEt
NDdkYzA4ZDdlM2JhLzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEtNDdkYzA4ZDdlM2Jh
LzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4hidDhn
J8kvb8fgOMAitPz6ayEIbbDHS93R6gRDotXxwTAONSRQYPIF/FQThtCEJcg7N2Xy
mtowzFLSlX1aKdf1sxtyoSI2HLyFCtVTM1kLizjwmd0qSwn68/VxDHBmjSj64Fgl
HzSOXmEFmHsf4QJm2eA01hdqOQG35wZ0klxH8qMazUmWqiqvk1d9Q5mu6ESDSxHF
AXd0fDhDhlMI84DdyPAniH+XpDvDPoD+8Eu7GfbYaA08CKMmeuxc2dFNtqIWFdvz
DYuyDWP0HklbQCGGWJirI/jFZzzhl5Vq4MwJ0V4gGGmN0XqDW/tCMI3kmLutPr68
bNWSs3Em/i+XSA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:54 2025 by rpki-client