Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
File: hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft (raw, json)
Hash identifier: baY45IzW11651WQg0dP6iPnSz2m9++K7F1aLp4estTw=
Subject key identifier: FB:8A:CC:57:14:B4:7A:15:1C:92:85:E1:AD:CA:88:D2:F4:21:7B:F8
Authority key identifier: 85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
Certificate issuer: /CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Certificate serial: 01975E388676632962C379C459B87575E0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 09:00:52 +0000
Manifest this update: Wed 11 Jun 2025 09:00:52 +0000
Manifest next update: Thu 12 Jun 2025 09:00:52 +0000
Files and hashes: 1: hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl (hash: txYUvneyF70CkSDPFtJYxiswxYjg+lYw0gGip+BJWlg=)
2: zES562T2jGbv7XzrHC02CT1oz_k.roa (hash: UbLmo0xCkOQvRcwSPHG5xE6YElRiJFtnaVmOwj9fHBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:86:76:63:29:62:c3:79:c4:59:b8:75:75:e0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Validity
Not Before: Jun 11 09:00:52 2025 GMT
Not After : Jun 12 09:00:52 2025 GMT
Subject: CN=fb8acc5714b47a151c9285e1adca88d2f4217bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:a8:37:40:ef:ee:33:d7:d6:8d:4f:69:e1:
ba:d5:98:bd:a2:59:d5:15:bd:9b:a0:51:da:7d:f5:
9a:96:b2:b6:a2:89:70:b0:29:e1:81:e9:c2:e3:85:
69:a2:df:6b:3d:2d:f0:4d:4b:73:c4:eb:ef:49:dd:
33:e4:56:21:06:fc:a1:c2:8f:d9:3a:64:f1:6b:70:
55:a3:bc:ba:20:3b:43:f4:12:82:f1:0e:76:f7:16:
82:a8:ab:1d:8f:90:78:48:70:ce:c5:71:05:ab:43:
40:79:5f:e4:ad:9f:c6:69:4b:26:0e:32:09:02:80:
ff:60:3b:74:24:de:c6:86:20:54:bc:19:d7:49:7f:
04:08:5f:88:14:da:e2:4b:24:fe:fc:a6:cc:23:8c:
e9:a0:1d:22:08:28:81:d6:89:e3:80:37:24:68:2e:
bb:6b:76:ad:3f:75:d5:86:4c:1b:99:ed:04:32:b8:
82:cb:93:29:44:5b:85:b1:c8:40:cc:38:03:b3:7c:
ce:be:ad:69:11:e2:69:74:69:eb:4a:ee:b9:65:3d:
16:be:bd:22:a0:d0:11:45:82:b6:cb:56:0b:5a:61:
d4:a7:78:18:46:41:71:1c:2f:db:ba:e0:56:8f:06:
fc:a0:b7:c5:09:66:ae:bb:2c:ff:30:c5:21:33:01:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8A:CC:57:14:B4:7A:15:1C:92:85:E1:AD:CA:88:D2:F4:21:7B:F8
X509v3 Authority Key Identifier:
keyid:85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:33:99:bc:49:87:19:12:04:81:61:2c:4f:db:76:0d:f2:a0:
72:76:d3:84:42:9c:04:5d:98:ba:ff:25:59:12:fa:86:fa:d1:
3b:26:0c:26:fe:16:01:3c:bc:71:54:a6:58:ec:47:2f:27:98:
af:33:d1:d1:e3:2c:d0:7c:63:48:98:d2:cc:6d:ab:12:c3:36:
18:b6:07:40:0c:2f:0f:ab:72:89:0b:19:02:59:42:09:14:63:
5d:25:d7:e0:de:85:0c:91:e2:eb:65:01:93:47:41:d0:dc:8b:
a1:d2:1b:ab:69:53:12:db:99:1b:a8:57:38:42:41:33:fb:c6:
db:fb:00:da:bf:65:ba:93:25:e3:ef:2e:6b:31:c0:fa:96:a9:
3d:3d:d2:ef:f1:79:c7:bc:77:3f:f5:97:c2:f1:73:94:6b:0a:
68:f5:3c:46:fa:4d:82:c5:25:e8:e2:27:bf:72:d6:e8:06:a3:
f0:67:68:7f:0a:01:7d:5c:08:2a:74:92:3c:7f:1f:89:0a:6b:
5f:d8:90:ba:63:e5:f6:f6:b3:04:5e:09:49:2b:4f:37:7f:c5:
49:a7:23:66:f9:fc:b3:ad:09:b3:9d:b1:74:30:cd:cf:e7:3a:
d7:d6:03:c2:f3:1f:76:1d:8a:a9:77:d5:ea:c5:dd:d3:5f:d9:
1d:b5:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:57:45 2025 by rpki-client