Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: KKJgg50WpqsBJ8peVG7HfpYlvZ2hZLz5xcW7nrLaOuc=
Subject key identifier: 12:58:31:88:43:E1:DA:BF:9F:15:44:D5:1B:9D:C9:E6:86:2E:E8:9A
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 01975E38BEBFA427E1C5A7C577DABC8E32C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0476
Signing time: Wed 11 Jun 2025 09:01:06 +0000
Manifest this update: Wed 11 Jun 2025 09:01:06 +0000
Manifest next update: Thu 12 Jun 2025 09:01:06 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: xiwsPBrCqi3kU0Km2Oj8R4IQZ1isWEw92RAx9jFdZe8=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:be:bf:a4:27:e1:c5:a7:c5:77:da:bc:8e:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Jun 11 09:01:06 2025 GMT
Not After : Jun 12 09:01:06 2025 GMT
Subject: CN=1258318843e1dabf9f1544d51b9dc9e6862ee89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:d3:26:17:7d:6e:e9:b1:0a:ba:ab:84:b2:
3f:77:05:2d:67:80:40:7d:b4:61:52:f3:cd:76:37:
80:72:98:9e:4b:a5:fb:a3:9f:50:d6:84:2e:43:dd:
c7:87:80:0b:2c:8d:80:df:ab:cf:c9:21:52:f7:ac:
66:09:a3:ea:dd:db:51:3c:f4:ce:32:97:ae:4b:74:
f5:9f:cd:34:62:e8:fd:5d:ba:6a:3a:cc:fb:18:1a:
8f:e9:72:36:c4:8f:c7:7c:17:f8:2f:d3:88:d2:65:
94:bf:d4:00:43:12:65:28:d0:b2:89:3e:6f:58:59:
a3:67:e4:4a:6b:b9:f7:58:5e:1a:b8:1e:9a:6e:55:
7c:91:53:8c:d7:19:de:03:7f:d9:7b:b1:94:d1:d9:
fb:b0:b6:83:e1:51:bf:cf:27:50:64:5b:73:56:eb:
be:62:86:8c:d6:3a:b7:79:55:66:3b:23:b9:88:3c:
74:d7:b8:8c:ea:5a:02:72:19:01:b6:fe:e9:a7:79:
fb:e8:de:54:8b:07:9c:8c:a8:55:f0:a9:37:ae:c1:
12:a2:dc:bd:b1:48:34:d0:b6:68:49:ed:de:6f:43:
c5:ff:2a:bd:13:1d:15:79:8e:40:31:20:c6:ba:cc:
76:23:39:dd:a9:b1:a8:b8:b9:c3:c2:8c:4a:c7:c2:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:31:88:43:E1:DA:BF:9F:15:44:D5:1B:9D:C9:E6:86:2E:E8:9A
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:59:56:00:4d:76:f6:dc:2d:6f:a5:49:ce:9b:31:1e:54:72:
37:ca:ef:ce:e2:b4:35:e9:49:76:a2:51:19:83:8a:af:ca:24:
73:34:f3:f9:47:9d:b3:57:3a:d3:a6:6b:3f:8a:36:17:54:1c:
4f:d1:ef:54:d6:28:cd:39:04:86:4e:a3:14:d5:a8:fb:73:ee:
6f:11:85:ba:56:aa:f1:31:bd:62:6f:fb:aa:5b:ee:91:7b:8e:
26:1a:e4:de:25:19:46:cb:1a:85:af:a1:f9:6c:7d:b7:78:9f:
31:5e:ed:dd:fa:cf:a0:7c:32:48:ef:e2:c5:d4:3b:b5:24:ca:
d7:d7:10:f0:c2:99:ec:73:d0:c3:74:3c:26:13:53:29:a4:df:
a2:b0:4c:d7:21:83:fb:b0:ad:2f:5e:05:14:44:5e:07:4e:48:
f4:96:71:77:02:72:7e:32:82:65:4f:1e:75:04:7e:15:40:ae:
d0:b4:75:c3:f7:27:74:00:89:78:cd:35:1a:fd:b2:3c:33:f2:
5d:95:3b:f9:3b:41:f7:c3:cc:e6:ce:e2:6a:bd:4d:e0:17:9b:
ac:85:86:09:7f:04:08:1a:f8:cd:d3:d2:ad:70:1e:60:7e:65:
fd:0c:b2:5a:2f:a6:f3:f3:ac:e5:7b:3f:b1:3f:fc:7f:82:b7:
93:2e:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:34:42 2025 by rpki-client