Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: L9HPvC0I3UKlhBsV1aORUGhIsG2p517RcRvQWR6hkEk=
Subject key identifier: FA:01:9B:E1:E7:F8:DF:03:75:5C:54:3D:BD:DB:EE:FE:29:18:62:75
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 0197B6A1846B5F3221A764896E0C347A9B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 116C
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: ZNaJieDc+ilxCEjOsmFIPYxrD0g7qxDQ9Od0nDB66+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:84:6b:5f:32:21:a7:64:89:6e:0c:34:7a:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=fa019be1e7f8df03755c543dbddbeefe29186275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:a5:a1:d1:1d:9e:d8:32:8a:99:60:7c:71:
00:1b:b5:76:dc:10:7b:c6:70:44:49:c3:b4:4d:29:
21:4f:3a:7e:40:3f:ba:2e:3f:16:fc:a6:40:5b:cb:
6c:ea:14:d5:10:bc:bf:08:b9:bb:21:45:fc:f2:2c:
87:db:e3:9b:50:b9:91:fe:f1:86:75:4c:9a:7c:22:
9a:cc:12:08:cc:49:ee:cc:2c:41:a9:8d:9b:14:b5:
01:54:4b:09:d5:d0:a2:8b:3e:71:01:13:37:d8:26:
d0:f7:2d:53:ea:b0:7c:a3:a8:5c:a3:15:41:9e:f5:
72:e1:4e:64:f7:40:d1:45:16:56:30:8a:28:e4:ee:
a5:37:ff:ed:a5:ee:1c:44:8a:c4:33:7f:77:08:08:
c9:a1:d2:16:b3:50:81:f1:d6:d6:da:10:60:80:32:
44:20:d8:6e:d2:a2:73:5d:47:7a:52:ed:0f:68:a9:
7c:cb:fd:4d:3b:8e:a2:50:e6:4d:e5:1b:80:94:c5:
fa:b7:f5:29:b5:d6:35:d0:55:0c:41:4f:93:db:b9:
8c:8d:0f:1e:0c:1e:87:ac:61:eb:4c:b4:08:36:dd:
fd:d1:65:26:69:6e:28:dc:77:cc:4b:8b:bf:d1:25:
4f:2c:ae:2c:82:62:98:83:9b:9b:14:36:c8:3f:60:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:9B:E1:E7:F8:DF:03:75:5C:54:3D:BD:DB:EE:FE:29:18:62:75
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0d:90:7b:b5:0e:a3:30:9c:a3:92:eb:ec:dc:73:bc:cc:9d:
29:29:25:f2:d1:43:3a:ef:2e:3a:55:71:7c:78:b3:85:46:aa:
9b:b7:ec:0c:59:cd:39:30:2c:65:58:7a:08:c5:8b:f9:7f:40:
9d:0e:27:97:2c:d4:c9:86:4b:a9:13:3a:6e:eb:dd:67:3d:b3:
e5:7c:e9:04:82:a2:b5:63:57:99:53:4e:7a:27:bf:33:43:99:
a4:73:50:fa:38:7d:ac:25:e2:b9:7c:c5:bf:e0:6e:7c:96:17:
19:d0:00:a2:94:95:01:57:7b:43:4f:a6:08:b6:d1:e4:0b:29:
e5:19:51:f9:64:eb:02:13:61:31:ef:56:83:ec:95:9d:80:71:
52:3a:5c:f2:a7:62:41:6c:37:5c:09:5d:fe:b4:83:83:b3:d3:
65:b3:f0:dc:4e:8a:f8:17:60:37:f7:96:ff:cc:79:75:9a:76:
d8:31:3f:ca:4c:29:ef:72:1f:a4:36:c3:19:b5:5a:3f:be:61:
67:89:9e:15:0f:84:cd:da:b3:0c:3b:72:ea:79:ba:87:c4:d0:
c2:02:0d:9a:28:68:b0:74:8d:e6:c0:cb:90:25:70:17:32:c9:
36:84:fc:b4:40:af:09:a3:9a:94:31:3a:29:4f:f3:af:af:3b:
9d:4a:33:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYRrXzIhp2SJbgw0eptjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl
NGJiNTIwHhcNMjUwNjI4MTMwMjA3WhcNMjUwNjI5MTMwMjA3WjAzMTEwLwYDVQQD
EyhmYTAxOWJlMWU3ZjhkZjAzNzU1YzU0M2RiZGRiZWVmZTI5MTg2Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ2lodEdntgyiplgfHEAG7V23BB7
xnBEScO0TSkhTzp+QD+6Lj8W/KZAW8ts6hTVELy/CLm7IUX88iyH2+ObULmR/vGG
dUyafCKazBIIzEnuzCxBqY2bFLUBVEsJ1dCiiz5xARM32CbQ9y1T6rB8o6hcoxVB
nvVy4U5k90DRRRZWMIoo5O6lN//tpe4cRIrEM393CAjJodIWs1CB8dbW2hBggDJE
INhu0qJzXUd6Uu0PaKl8y/1NO46iUOZN5RuAlMX6t/UptdY10FUMQU+T27mMjQ8e
DB6HrGHrTLQINt390WUmaW4o3HfMS4u/0SVPLK4sgmKYg5ubFDbIP2BTjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoBm+Hn+N8DdVxUPb3b7v4pGGJ1MB8GA1UdIwQY
MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt
OWFkZTM5NmY3YzRjLzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj
LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA2Qe7UO
ozCco5Lr7NxzvMydKSkl8tFDOu8uOlVxfHizhUaqm7fsDFnNOTAsZVh6CMWL+X9A
nQ4nlyzUyYZLqRM6buvdZz2z5XzpBIKitWNXmVNOeie/M0OZpHNQ+jh9rCXiuXzF
v+BufJYXGdAAopSVAVd7Q0+mCLbR5Asp5RlR+WTrAhNhMe9Wg+yVnYBxUjpc8qdi
QWw3XAld/rSDg7PTZbPw3E6K+BdgN/eW/8x5dZp22DE/ykwp73IfpDbDGbVaP75h
Z4meFQ+EzdqzDDty6nm6h8TQwgINmihosHSN5sDLkCVwFzLJNoT8tECvCaOalDE6
KU/zr687nUozfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:42 2025 by rpki-client