Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: osXioyTN0kh0X7UuZO12GHctld/mNbhC/xbxOZdREew=
Subject key identifier: 3B:A4:63:B8:84:C4:CE:86:00:EF:D2:FD:69:5F:3D:56:67:C1:CE:6C
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 01975C4A641873E2262CB7BD9030B4C95F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 0475
Signing time: Wed 11 Jun 2025 00:01:08 +0000
Manifest this update: Wed 11 Jun 2025 00:01:08 +0000
Manifest next update: Thu 12 Jun 2025 00:01:08 +0000
Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=)
2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: C5zsbyNPR6tabhTZC9Ax3jcoCF820MSOlPAKTIWyVX0=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:64:18:73:e2:26:2c:b7:bd:90:30:b4:c9:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Jun 11 00:01:08 2025 GMT
Not After : Jun 12 00:01:08 2025 GMT
Subject: CN=3ba463b884c4ce8600efd2fd695f3d5667c1ce6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:9b:24:b9:fb:1e:1e:e9:f5:d1:91:04:13:
e0:64:64:39:c9:e6:e1:59:ec:fa:4c:bb:4f:cf:28:
40:ca:6e:e3:77:54:e3:a4:f7:01:79:a3:d5:a2:55:
da:ab:b2:e0:b8:c1:3f:e7:19:73:51:fa:8e:31:46:
02:9a:f3:d6:2f:a3:85:ee:d2:c8:0b:ee:13:2b:7e:
10:7d:83:ae:73:f9:69:9b:10:e5:6c:eb:45:a0:d1:
3e:99:25:0a:26:84:4d:29:c5:7c:b4:51:0a:ff:14:
ba:5c:66:34:2b:c3:9e:9e:58:41:e1:05:6b:2b:7a:
c3:ff:00:58:18:a3:53:f4:1e:51:30:9c:aa:f1:4c:
ff:c3:af:65:7a:31:55:1e:45:3e:88:1d:e9:40:d9:
09:d5:48:c0:17:3d:f8:19:3f:c2:fb:b8:0a:51:2f:
7e:d2:b4:03:0f:fa:09:55:96:3b:61:1d:ee:a1:65:
8c:af:41:4a:c8:48:ed:df:a5:7b:b9:36:9a:b5:0e:
29:02:a3:16:1e:e1:51:03:64:55:ed:e9:e1:8b:55:
39:4b:f0:6d:69:b8:42:59:16:17:9b:10:5d:1a:34:
58:c2:df:f1:9b:cd:ee:28:f3:de:71:6f:4a:6e:17:
7b:a8:c3:5e:a3:28:f5:a7:32:48:39:11:a7:33:c7:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A4:63:B8:84:C4:CE:86:00:EF:D2:FD:69:5F:3D:56:67:C1:CE:6C
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:47:92:4d:ca:d3:cc:f4:d5:ab:bd:6c:c9:1a:f4:fb:37:
40:4a:3d:16:c3:71:75:f7:65:d4:34:d4:d2:ce:fe:a9:7f:6f:
63:d4:4a:17:f3:f6:8a:34:a5:19:24:b3:66:46:47:67:66:14:
b7:9c:f2:d3:71:d0:34:92:4f:f4:b6:cd:78:8f:a8:c4:6e:99:
ce:92:08:6f:6c:da:2b:2d:c6:b5:a8:77:05:7c:c0:66:b6:03:
01:0b:fb:bd:e5:85:8b:07:c9:74:8d:24:c8:70:4a:6e:2d:d7:
b7:2c:f1:93:e2:cb:51:8b:1a:01:3e:70:15:7d:aa:7a:6c:9c:
f4:53:00:76:6d:5c:c8:2e:ab:d6:b3:31:8b:e6:46:f3:93:c2:
81:5e:20:f5:92:a7:bd:ef:d6:4e:27:1a:4a:ac:60:da:5a:f6:
a5:83:9b:34:a1:82:cf:10:9e:eb:8b:82:c4:18:17:4f:c5:2b:
a8:1f:36:4f:63:f4:1c:d1:26:40:9a:e6:d5:79:3d:c6:92:32:
d1:95:fb:a3:cc:1d:ad:a0:57:0d:a8:a1:55:6c:57:6a:16:eb:
a8:92:a4:6f:8c:ca:e6:11:fe:25:41:6b:2b:25:7b:13:c6:4f:
3d:be:1c:31:48:d8:16:29:76:b7:37:0d:94:e2:06:5c:7e:29:
b8:1c:91:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:38:16 2025 by rpki-client