Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: SELXFxUkM6vqvOqfGIUw/gQ7JCNIzIQxEua+JcnqFzs=
Subject key identifier: 9D:72:5F:D9:7D:94:0D:96:CF:09:54:FE:D7:3A:C3:76:99:E5:48:82
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 0197B6A1ED5AE5A5426A8C9E5A0A72B903D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 110F
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: SejgCrvLVYtroKW9hfJfKrIxCBhn+MkaZF/v1GwErQI=)
2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ed:5a:e5:a5:42:6a:8c:9e:5a:0a:72:b9:03:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=9d725fd97d940d96cf0954fed73ac37699e54882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:65:1a:4e:e7:5c:aa:74:85:a3:0c:ad:6c:
e4:09:80:b7:03:16:c9:4d:44:6d:7e:f0:32:65:f0:
7e:79:9a:8f:f2:0b:77:ba:10:88:e7:fc:c4:cf:5f:
c4:68:f7:54:ef:55:7f:ca:0e:6e:0f:b0:bf:ec:55:
91:3c:6e:e4:14:11:75:fd:0e:11:39:c0:06:ea:9d:
12:cd:3a:c1:65:53:18:ca:cf:e8:80:04:83:e0:a7:
42:2c:cc:59:45:fc:ce:74:8d:73:f7:df:60:d0:6c:
c8:b9:92:ef:e9:a0:ad:02:22:a3:64:2e:9c:23:79:
8f:37:75:ae:dd:5f:04:c5:fc:b4:f3:f7:23:f2:3d:
f8:5a:9f:e2:73:90:45:20:f3:2e:a2:50:a6:0e:4d:
96:92:39:14:5e:3e:a5:b2:7d:16:78:c0:aa:a9:0d:
df:34:79:39:11:3c:59:11:ee:c4:9b:51:1f:a1:85:
41:30:66:f7:78:4c:cf:ce:a0:f3:a5:ba:28:3c:b6:
50:5e:76:68:39:b1:80:85:a6:0b:9b:5c:a3:c2:a2:
fc:95:ac:b2:37:0b:32:c9:9a:75:05:c5:b7:03:31:
ac:7e:fa:f2:6b:f4:a4:5e:41:9c:cf:81:5d:f8:9a:
14:f3:1d:54:49:fc:03:d5:43:3e:4b:b3:31:c4:60:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:5F:D9:7D:94:0D:96:CF:09:54:FE:D7:3A:C3:76:99:E5:48:82
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cd:49:11:81:6a:db:21:8e:46:5f:29:74:4f:be:41:bb:5f:
3c:03:76:dd:92:b1:bd:ca:e6:ad:29:24:45:0a:62:2f:8c:09:
9e:e6:2d:3f:ce:19:ad:ad:43:23:20:9e:c8:c6:a0:14:70:e7:
00:39:1f:05:81:68:85:d8:65:e8:cf:8b:13:5b:9f:8e:ec:0e:
e4:ca:6e:ec:82:1e:4c:ae:6f:18:d6:cf:f4:30:53:68:6e:80:
95:90:c8:8c:67:b5:19:35:18:25:16:07:3e:f1:20:7a:da:ae:
b1:8d:02:31:fa:75:03:a8:be:a7:b8:e5:b8:f1:23:ff:6a:d8:
ec:bc:49:03:aa:91:a6:0e:b4:6c:c2:d2:d4:c5:eb:f2:ad:8f:
68:bd:23:8c:0e:24:83:db:c2:c8:0c:39:f1:1f:0c:de:6e:c8:
93:cd:6c:3a:24:cd:d2:a6:93:f0:a7:c4:af:7a:b3:44:5e:66:
4b:67:83:13:db:e0:bc:0a:3d:93:38:97:ac:4c:13:2a:15:c6:
66:77:fb:00:2b:59:30:a8:6d:01:81:ef:b7:ca:65:bf:79:35:
9a:90:ee:cd:06:a7:87:3d:ca:5f:ca:d3:42:0c:e2:16:ce:40:
f6:47:ea:6c:c9:3d:35:74:37:1b:cc:66:f0:79:56:17:e6:b8:
0a:29:b1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:50 2025 by rpki-client