Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: eNm4wj0IXftJZcN/FP8QLJgo/ee8CEwnbQBrBVOHqqo=
Subject key identifier: 42:2C:11:2F:CB:77:77:2A:8D:CD:C8:1D:AD:0A:CD:12:FF:9D:AB:D3
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 0199FFC7F52DD88EC4E1737ECF70716E4893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 123E
Signing time: Mon 20 Oct 2025 04:01:58 +0000
Manifest this update: Mon 20 Oct 2025 04:01:58 +0000
Manifest next update: Tue 21 Oct 2025 04:01:58 +0000
Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: 6xync8XOkuAhj+VD03R7yEAdXrgkptLpJB9QtpLxl3w=)
2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:f5:2d:d8:8e:c4:e1:73:7e:cf:70:71:6e:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Oct 20 04:01:58 2025 GMT
Not After : Oct 21 04:01:58 2025 GMT
Subject: CN=422c112fcb77772a8dcdc81dad0acd12ff9dabd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:a3:ef:1d:09:cd:bd:97:0e:0f:07:ad:ee:
ef:c8:41:30:01:a4:9d:52:12:31:e4:8c:8b:e2:c9:
97:b1:5a:13:ff:55:fd:3d:65:7a:49:53:8d:17:af:
c9:6e:62:9d:27:e6:cb:45:3d:d0:65:95:d9:cd:e4:
bb:4a:f8:42:38:d9:00:29:d0:af:03:c9:83:26:b5:
7a:1a:d9:7d:09:0f:a7:2c:86:5a:74:ee:c0:d4:b4:
1f:ce:54:8f:f1:9f:3e:8f:f0:c6:a6:28:fa:e5:4a:
ba:92:a8:ed:1c:36:d1:1a:1c:2b:b0:43:36:ee:9e:
f2:b4:93:15:73:0d:4b:55:13:bb:f8:dd:0a:b9:3d:
95:29:76:e5:33:a7:76:57:2f:bb:cf:e0:a6:a3:61:
90:29:44:4c:17:e6:5d:7e:93:9f:17:d7:7a:ba:12:
f8:08:d0:39:c9:85:fb:e6:c6:2c:fb:24:5b:24:f0:
8e:2a:cd:59:b6:ba:27:88:d2:12:dd:f5:3d:f0:74:
f0:cc:ff:d2:b1:81:80:3f:7c:a1:ed:03:9c:ce:14:
18:58:36:a7:d5:30:79:10:e9:d0:be:78:39:c4:2f:
03:d1:ff:c9:a5:59:3e:09:4d:2e:49:a9:a8:c2:aa:
74:68:f8:57:83:09:07:cf:d8:b3:b2:cf:3c:db:08:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:11:2F:CB:77:77:2A:8D:CD:C8:1D:AD:0A:CD:12:FF:9D:AB:D3
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:99:4b:18:73:ef:4b:50:d5:a3:44:f5:bc:04:19:83:c6:b3:
c4:ea:47:c7:8a:77:9f:cb:76:9c:e5:3d:47:e7:d9:08:b8:3e:
26:73:f4:1d:26:4d:f4:2c:2e:39:67:67:bf:9e:1d:6f:d2:da:
18:a3:f6:a8:2b:3a:13:11:cc:27:c0:de:e7:4a:60:1b:18:7f:
ea:19:3c:ee:70:4b:a0:43:ed:c8:e1:46:d7:69:1c:8d:63:28:
a2:4b:e8:b8:6b:38:12:13:b4:d8:9d:ff:80:f3:34:8c:c4:4c:
05:9a:38:12:48:5a:92:b1:d4:9a:e4:ff:b1:91:3b:35:be:9e:
5d:74:90:82:2b:ca:6c:32:aa:a8:15:bf:3a:74:32:73:3e:f2:
e0:5a:d0:e4:8f:79:2f:a6:ce:50:bb:3d:8d:30:eb:fa:80:6f:
0c:6c:63:71:c1:04:99:2e:53:b1:48:9a:ef:f7:00:1c:5a:2a:
51:d3:72:fe:38:bc:c6:bc:50:e6:4e:b8:8e:21:8b:62:a9:e3:
57:53:9e:b1:29:3d:e4:c7:05:77:c3:90:53:f7:17:f8:95:97:
8f:f2:3f:ec:79:fb:eb:b7:42:f8:07:30:2f:94:0b:3f:50:4d:
17:9f:00:52:a2:ba:7f:3e:4a:12:fc:cc:63:0d:71:a2:79:6e:
c9:50:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:35:03 2025 by rpki-client