Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: 8evWU32wak4wvQSsaeeV7yw0wl5dKkKYvxL0y3PE5qg=
Subject key identifier: 6B:AC:DB:00:99:08:D1:94:BB:81:2D:70:31:BA:F9:39:B2:A8:50:AD
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 0198D4723C6457E781A682DF59DFB7774453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 11A3
Signing time: Sat 23 Aug 2025 01:01:52 +0000
Manifest this update: Sat 23 Aug 2025 01:01:52 +0000
Manifest next update: Sun 24 Aug 2025 01:01:52 +0000
Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: NoaMa/1jiYEQdUSBhpY/ma1BS5lkuxeGmK6+vCLvxHc=)
2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3c:64:57:e7:81:a6:82:df:59:df:b7:77:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Aug 23 01:01:52 2025 GMT
Not After : Aug 24 01:01:52 2025 GMT
Subject: CN=6bacdb009908d194bb812d7031baf939b2a850ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:dd:3a:da:1a:68:9f:79:3a:2b:ab:e3:37:
2d:53:db:04:7c:1d:dd:cf:ae:ce:9b:f2:cc:66:ba:
ad:0f:2d:68:00:f2:ae:20:bf:ab:77:50:c5:3d:61:
b8:9d:0c:8c:1a:7e:72:1b:18:29:b7:56:f2:5a:b0:
33:c5:fb:6e:3c:c7:8a:51:00:e8:76:5c:3f:c5:83:
c7:50:f2:74:b4:e0:f6:6e:3c:04:d1:b4:fd:60:19:
0e:74:26:95:b5:4d:3a:e9:b6:a9:7f:e5:5e:d2:86:
51:a4:1b:77:91:cc:ca:d4:55:26:98:c0:2c:0d:e5:
82:63:e8:61:41:98:1f:0b:82:35:2e:b3:ec:09:a6:
46:b5:af:44:4c:0a:e3:a2:33:de:7c:3e:92:da:ea:
5b:17:50:d1:3c:86:04:fb:89:ad:8c:b2:27:05:c0:
66:0e:dd:eb:fa:0a:eb:58:e8:49:4a:ce:af:33:63:
79:87:b2:e6:4c:6e:e3:21:c8:8c:05:bf:78:73:9e:
a0:a6:94:a3:88:e1:3c:b9:fc:74:7b:5c:39:21:8d:
9d:90:6e:07:cc:59:07:0a:0d:dc:ac:4c:ad:ee:47:
3d:10:cc:92:7d:c9:9f:7e:4f:de:67:57:6f:58:dc:
ff:ba:37:c4:fd:a7:d2:b2:5b:0d:dd:b9:ca:d5:ff:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AC:DB:00:99:08:D1:94:BB:81:2D:70:31:BA:F9:39:B2:A8:50:AD
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4e:81:f8:93:a6:e7:e9:c1:4f:f4:d3:70:38:20:b9:0a:40:
45:73:1e:da:70:d3:5c:2e:fa:8b:92:cc:e4:b9:0a:a6:47:5a:
dc:1b:11:3e:68:36:35:37:d3:53:4c:a4:a2:ef:9f:fd:f0:a0:
59:67:65:9f:6b:89:74:a7:7c:36:51:7e:63:65:e7:86:62:b2:
ba:4a:bf:9f:f8:2d:3f:22:3c:17:76:aa:0d:ec:aa:cd:39:a3:
90:44:a5:ac:d9:5a:58:03:92:10:81:06:14:91:be:a9:55:6c:
50:06:91:f5:a2:05:5b:20:cc:b5:9d:87:e6:62:01:15:4a:d0:
66:fe:ca:42:a1:f2:64:71:5e:63:be:ab:f3:18:b1:58:9f:28:
4f:95:1b:e7:4e:e9:b0:6e:25:c5:98:80:25:3f:ea:48:d9:82:
9e:80:8a:2f:2a:7b:49:cd:a4:65:ca:ae:cb:e2:68:e5:22:b5:
4b:35:b8:97:d4:87:ca:de:2d:db:85:09:35:58:92:9a:8e:23:
04:6a:d9:14:39:95:3a:bb:14:46:f7:42:0e:93:9e:4d:af:09:
bb:06:17:39:93:bb:10:59:0d:90:e9:70:f3:c2:89:48:b3:62:
34:3a:80:2a:e2:2c:ea:89:c5:95:51:20:a6:10:36:e8:32:8b:
5c:e4:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:29 2025 by rpki-client