Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: K59ElgVwvLh2Jgx2B9PjeFHMA34/VoYpGx20q9YvRgk=
Subject key identifier: 8E:F5:F2:2A:DF:B8:FF:A6:21:54:31:DA:DA:D8:45:A0:26:A5:CD:98
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 0199221F480985462636F04EFBF8F37FCD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0560
Signing time: Sun 07 Sep 2025 03:01:39 +0000
Manifest this update: Sun 07 Sep 2025 03:01:39 +0000
Manifest next update: Mon 08 Sep 2025 03:01:39 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: 1+1L/wA3M6iZFYybN0oqVJ+jhYuHX/Jy9vSIF1z/0fw=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:48:09:85:46:26:36:f0:4e:fb:f8:f3:7f:cd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Sep 7 03:01:39 2025 GMT
Not After : Sep 8 03:01:39 2025 GMT
Subject: CN=8ef5f22adfb8ffa6215431dadad845a026a5cd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0f:85:0c:1d:56:5c:c2:60:12:4d:2a:0d:59:
72:f9:fc:e6:38:2d:60:d7:f7:be:2d:6e:76:59:a7:
b5:1b:6d:8e:c7:53:dc:8b:21:0b:bd:59:08:66:51:
a8:ec:06:62:ef:c0:91:68:6b:b7:4c:05:e1:e4:f4:
7e:61:2f:33:c2:50:53:e1:d9:63:f5:ba:6a:a3:68:
61:bd:89:3a:32:85:85:49:9e:eb:05:9a:cf:a8:b4:
ae:39:b6:4b:e1:2a:c7:75:b5:5b:da:c0:f3:1d:9c:
36:af:5a:f2:f4:c6:be:cc:f2:a7:db:5e:71:7c:a5:
8a:df:2b:66:6e:06:ea:4f:ad:fe:1b:91:d7:57:75:
80:db:98:68:e0:cc:a7:5a:db:3d:6e:cf:f2:1c:49:
5b:b7:43:3e:d7:ec:5d:ab:6c:6d:e7:55:91:8b:97:
c6:83:e8:c0:93:be:f6:00:d9:8a:17:a0:49:72:7e:
5b:5c:fc:e3:c5:80:ec:81:36:99:87:ff:06:ab:0e:
1c:70:33:ac:67:0e:15:b0:07:63:a9:7a:54:2f:ba:
a7:b7:2b:39:78:fd:bd:97:26:64:58:e4:75:d9:5f:
94:32:2f:6c:ed:b2:aa:9c:8d:73:93:8c:6d:6f:77:
53:81:e9:06:b3:b3:9d:a2:7e:c1:36:58:65:63:f1:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F5:F2:2A:DF:B8:FF:A6:21:54:31:DA:DA:D8:45:A0:26:A5:CD:98
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9e:fb:ac:e6:8d:6a:48:0a:47:70:a8:44:b9:77:79:06:46:
74:dc:e4:6c:e1:f5:6b:cd:08:66:b8:6c:1d:ce:64:5a:3c:43:
4b:54:52:40:c3:93:b1:41:f4:4d:57:bc:09:b8:33:6b:b0:fa:
e1:f1:20:e9:2a:57:c9:af:e5:25:21:50:dc:6b:58:67:9c:5c:
0f:1f:d7:82:78:61:69:c5:68:50:70:7a:7f:7d:ac:9e:00:41:
a0:8f:71:9a:50:5c:a6:62:2e:02:66:39:9c:82:fb:a6:f7:24:
ee:fb:65:9b:82:34:8a:ee:62:4e:01:89:b2:32:e8:8b:7b:4d:
19:48:4e:a8:24:66:88:65:e8:aa:c2:b4:65:94:e7:42:29:81:
87:11:5e:bc:68:91:fb:12:dc:1c:47:e2:59:00:25:fa:14:51:
38:7b:6c:64:6a:32:32:7f:fe:3e:8c:43:cc:a8:8b:b5:23:0a:
7a:0b:54:86:7f:fa:e4:cc:13:c5:8e:c2:27:30:e1:40:26:b7:
f7:11:13:c2:8d:45:b3:a0:45:6f:57:1e:9e:3f:04:c4:40:5d:
98:77:27:d5:af:0c:07:78:e8:88:32:5f:89:a9:df:99:16:90:
17:f1:43:72:31:9f:f5:98:59:f7:8b:2a:ba:c7:c2:35:00:21:
e7:a9:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:23 2025 by rpki-client