Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: hJ5M1PcfWJuf0unh6clhCEMyGa2LTUChe2UTj/UHMXk=
Subject key identifier: 92:33:71:D3:E9:56:E7:35:9C:84:54:23:BB:D1:EE:BD:92:3F:F2:81
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 0198D47404567A9EEC78082F8698A81368CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 1200
Signing time: Sat 23 Aug 2025 01:03:49 +0000
Manifest this update: Sat 23 Aug 2025 01:03:49 +0000
Manifest next update: Sun 24 Aug 2025 01:03:49 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: lB1pDDr+R6rdnB75fAv+2eG4oZAAvtPMWdg7CrPhoEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:04:56:7a:9e:ec:78:08:2f:86:98:a8:13:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Aug 23 01:03:49 2025 GMT
Not After : Aug 24 01:03:49 2025 GMT
Subject: CN=923371d3e956e7359c845423bbd1eebd923ff281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:f8:b7:54:ef:02:cc:ec:d7:18:d0:fb:47:
63:d5:11:30:f9:3d:23:79:79:45:33:5d:22:ec:24:
93:6f:d6:7d:4a:94:f4:0e:a0:24:cf:5e:70:d9:a2:
32:5f:6c:ab:88:08:f5:46:db:1f:6d:69:c8:1e:fd:
d1:c2:11:34:95:52:62:ed:fb:7d:31:71:84:e4:45:
ae:d0:35:59:e5:41:88:3d:07:b4:62:e2:b5:d2:71:
ef:74:0c:f8:a8:d3:14:fe:f7:2c:b0:76:f3:ee:dc:
60:8f:a5:f0:fe:86:cf:a2:8c:36:51:fc:2e:6f:88:
17:d1:14:4d:1a:8a:fc:b9:b7:5c:37:45:69:3d:b2:
b8:7a:31:07:e9:f0:c5:8e:7a:ec:82:16:38:e8:46:
dd:cb:cf:e1:28:13:bf:73:f7:b6:24:7c:10:a7:b8:
49:34:8b:a5:bc:0b:73:b4:fd:2d:15:16:5f:71:03:
58:f6:f3:cb:7a:5e:28:ed:b7:73:42:05:0a:4b:eb:
16:96:99:a3:93:8b:e3:68:af:b5:9e:49:49:3f:66:
04:be:c0:42:8c:61:db:37:9c:cc:c0:bc:40:ed:d0:
db:b5:0d:d9:1d:ff:7f:fb:ee:7c:fb:60:e3:fc:66:
e4:01:82:e6:70:a9:5f:46:89:3b:19:ca:62:d8:53:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:71:D3:E9:56:E7:35:9C:84:54:23:BB:D1:EE:BD:92:3F:F2:81
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:c5:f2:e9:3f:5a:10:da:91:5f:fa:8c:eb:ba:66:0f:3a:
c5:20:bd:23:22:c4:f5:cb:6d:59:62:fb:b8:47:19:ed:d8:3e:
83:cb:08:7e:ea:0d:57:34:e6:13:44:62:fb:b3:fb:2e:94:8b:
12:0a:99:88:1e:1c:35:a1:da:b0:ce:af:6a:f4:ac:19:56:b6:
42:cd:5b:5b:45:4d:b5:15:4c:37:a0:2b:b7:60:08:06:fd:bd:
25:b1:8f:ff:7f:94:71:1a:63:50:f7:71:91:51:15:9b:0a:e2:
9c:55:15:3d:b9:01:c3:af:0c:6c:bb:e5:d4:db:79:0c:36:7e:
f1:fa:7b:58:c8:a3:6d:db:f1:fd:26:19:a7:b8:75:77:80:b0:
48:7a:c6:66:c6:04:8e:be:9b:e3:7e:e9:8c:c3:f9:bc:b4:d2:
53:c9:43:bf:21:0f:fa:d6:4f:a8:1e:44:69:b1:ee:e6:55:a3:
a5:45:b4:10:26:dd:bc:74:59:6d:3b:a8:28:95:a4:27:01:77:
3c:b7:0b:db:19:ca:a7:aa:8c:81:c1:50:c3:39:93:2f:03:27:
ff:5c:ab:b7:47:86:b0:00:91:b5:87:f4:72:23:32:1f:c6:cd:
57:d0:67:f6:4b:84:b6:51:1c:71:c1:8d:9d:ad:13:c4:79:49:
03:a4:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:47 2025 by rpki-client