Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: UAO166+7MM6pD7Jj07SpWxTsVQI0EorYURJxYqwSDmI=
Subject key identifier: 6D:02:BA:23:F1:77:C9:8C:83:AE:58:FF:90:97:A8:26:E4:59:FD:C3
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 01976403C04BFC49F0DFE2FFFD0713DE002D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0479
Signing time: Thu 12 Jun 2025 12:00:56 +0000
Manifest this update: Thu 12 Jun 2025 12:00:56 +0000
Manifest next update: Fri 13 Jun 2025 12:00:56 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: TDVV+gDjjjEYlmYg2AqOD1q49W31TqKdESn1h4fxt9U=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:c0:4b:fc:49:f0:df:e2:ff:fd:07:13:de:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Jun 12 12:00:56 2025 GMT
Not After : Jun 13 12:00:56 2025 GMT
Subject: CN=6d02ba23f177c98c83ae58ff9097a826e459fdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:71:34:d7:cc:d2:9a:be:d1:05:45:27:ee:
97:c4:0d:97:1c:4d:e1:02:ff:a5:09:c8:45:5a:45:
48:9b:2c:95:b2:ff:9a:a4:91:23:56:93:44:7a:d6:
89:f8:c7:c2:f0:43:76:de:b5:19:76:3a:70:89:1f:
2d:16:c6:f5:db:db:81:94:8b:ad:26:dd:6c:6d:2d:
47:01:63:25:25:79:f0:c5:76:48:24:a2:5e:c6:f7:
1c:45:6a:51:f0:e6:c5:ae:18:15:8a:1c:2e:42:65:
a7:33:b1:00:24:bc:23:51:a1:bd:23:02:62:46:ba:
89:48:d3:4a:5f:5f:da:91:7e:d0:b9:48:e2:3d:f0:
1d:81:e8:b6:c8:b7:1a:b9:84:6d:16:8e:10:0d:0d:
c0:9c:ad:b9:db:d6:19:cd:75:b3:af:30:35:5d:6d:
c1:7e:8d:52:eb:53:72:3c:0a:38:66:ed:eb:72:9b:
a7:df:fb:98:95:59:df:ff:05:cc:a1:05:94:0e:23:
53:5c:c0:f4:51:e1:02:dc:c4:f8:6a:d0:2b:ff:71:
8d:03:37:39:3b:f0:5c:89:72:9b:57:1f:c1:2b:26:
de:32:08:b6:52:ad:04:c6:24:cc:e8:c5:2a:b3:39:
7a:bb:75:aa:0f:6b:4d:b2:9a:30:51:e6:20:49:75:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:02:BA:23:F1:77:C9:8C:83:AE:58:FF:90:97:A8:26:E4:59:FD:C3
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ad:c5:18:55:7a:b0:1c:f1:1a:d2:61:3d:0a:50:3b:89:56:
32:58:44:73:c1:5e:11:47:c4:7f:59:63:0d:07:7a:ca:6d:22:
bb:5c:6b:8b:29:91:97:78:3b:ea:09:82:82:36:52:83:31:72:
4c:6f:c4:c7:29:aa:57:a4:c7:07:9e:8e:db:ca:61:d3:10:69:
75:10:15:0c:37:a2:d5:ca:a3:ab:8a:e2:4b:09:b0:03:55:cd:
4f:7d:4d:de:0f:70:77:99:b5:7d:37:63:61:bf:45:b7:94:ce:
54:45:9c:38:26:ab:17:9c:b2:df:bc:b5:d1:e5:8b:f8:7a:68:
92:5f:59:2e:13:d2:db:78:2b:21:e0:dd:2e:d7:59:14:86:7d:
70:98:0d:0d:51:0f:cd:24:4b:e1:74:bb:82:01:27:b9:10:05:
05:49:d3:7c:0f:be:d4:c5:0b:ac:42:b2:20:e5:ff:8f:d6:6a:
28:f1:ed:9f:94:80:cb:14:9f:75:09:ed:1f:71:db:a6:a9:aa:
c9:50:2b:c2:18:26:c4:e9:e2:da:81:9f:4d:c4:9d:1d:18:a8:
6b:45:dd:29:35:af:5c:b6:ff:d4:58:5e:3e:9b:23:38:f1:39:
cb:72:c5:fc:21:c7:d1:64:e3:d1:e6:2f:41:2c:00:47:e1:82:
68:bb:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:26:12 2025 by rpki-client