Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: bmX6c/yeyoe3C/yphbgAaCw/ZI6A/i/YOp5EkMvJyFE=
Subject key identifier: 77:2E:E8:BA:B8:70:14:9E:DF:B5:F5:66:BA:67:2C:23:13:22:7D:CF
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 0199FDD9BC36A10D4AE2F5E0C52616ABAEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 129A
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: Er7FEAWGlm+fctI9+xINj65EXt/OzSubGSLbMEWgxZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bc:36:a1:0d:4a:e2:f5:e0:c5:26:16:ab:ae:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=772ee8bab870149edfb5f566ba672c2313227dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:f0:7b:a4:62:8b:f0:61:e6:72:e9:a6:23:
30:2b:05:99:70:7b:a6:d7:00:83:b8:06:c4:01:f1:
c9:d9:3a:b4:cf:60:43:5e:8c:8a:c9:c9:c6:fd:27:
e2:77:e1:76:9b:6e:d6:ca:ca:ad:6f:c4:03:bc:cc:
8b:78:18:81:43:3a:6b:1e:39:64:1f:09:a4:16:aa:
85:da:d7:43:3a:97:76:e4:e3:ae:b8:76:01:4f:25:
33:ca:dd:70:ca:76:54:5e:18:8e:2e:b3:d5:e5:1d:
c1:88:a1:db:13:68:ca:9d:bd:15:da:1c:83:9c:a4:
1d:dc:a8:c6:b0:8b:80:a8:f4:1d:cf:72:ac:b1:24:
b3:99:34:26:32:9e:9f:85:99:ec:7b:ec:1c:06:b5:
8a:49:9c:f5:85:20:50:b2:a0:77:f2:b8:d2:27:9f:
28:13:7f:c9:5e:e3:6b:ac:dc:04:65:c4:e9:f4:fa:
38:94:5c:03:69:16:02:db:ae:70:c8:ab:c7:68:01:
84:d2:d8:f6:8f:0a:bc:fa:0d:14:0d:37:a5:c1:a8:
54:c2:46:04:e6:0a:41:12:44:7a:30:01:12:e7:de:
56:6f:34:11:af:d3:c6:52:50:6a:84:ef:8d:ca:28:
e7:40:0a:de:e9:b9:f9:f7:9c:b9:1a:9d:94:0b:e9:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2E:E8:BA:B8:70:14:9E:DF:B5:F5:66:BA:67:2C:23:13:22:7D:CF
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:03:63:2a:b1:2e:5a:e8:41:e3:8b:0c:45:84:6c:4b:ad:1b:
85:01:a4:d0:5a:a9:80:a6:ce:ff:4b:8c:44:57:39:a2:ab:62:
c9:4f:87:16:15:4f:69:7d:96:a6:6d:c5:80:10:45:a7:47:33:
c0:42:31:08:70:3b:54:2a:22:59:a9:be:26:db:e3:76:50:dd:
27:1b:eb:c0:a7:59:21:b0:c3:76:b9:d5:42:62:4c:25:5f:1a:
9d:18:54:95:46:ae:b0:b3:29:76:c8:57:8f:09:73:41:b2:6d:
2e:80:25:f4:ef:a5:33:27:39:21:36:5f:f6:fa:c9:f7:ba:b2:
f5:31:fa:a5:b4:7a:37:67:77:52:52:24:4e:70:6f:73:38:79:
8a:b1:67:e6:ab:21:f4:da:71:83:e4:d6:54:57:ff:be:ed:d4:
9e:b0:25:f3:29:0f:86:64:b6:f5:29:17:42:3f:aa:17:11:14:
f5:f6:f6:a9:9f:37:20:a1:02:d8:d4:65:5a:df:d9:38:fc:08:
3d:2d:63:de:d4:b6:0f:57:d1:98:48:eb:fd:81:db:0b:0f:dd:
6a:90:28:41:2f:d9:ac:b1:91:7a:df:b7:4e:ae:aa:60:a9:45:
bb:77:69:cb:87:87:ad:fe:71:fb:f4:d2:a7:fe:9e:7b:2d:cc:
f8:4b:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:30 2025 by rpki-client