Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier: GNYkWLyBhdjTHBLA6Q7MXiNxG+PgMRQIjVa6KggPwis=
Subject key identifier: 36:30:A9:FC:15:82:94:9B:7E:D0:24:95:55:85:F5:6A:78:9E:BD:49
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 0198D6980C387C1CA0698AA6AE54D166704D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number: 06B3
Signing time: Sat 23 Aug 2025 11:02:25 +0000
Manifest this update: Sat 23 Aug 2025 11:02:25 +0000
Manifest next update: Sun 24 Aug 2025 11:02:25 +0000
Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: GT1jrHMTgc+ePdNAFBj5U2B0YMZBEcH0Fy7RYteCj4M=)
2: biU2dVHDkmW3ggJsKp9Y0Y3icgc.roa (hash: Q70FfzUUNjte1Czb813dG83AEi9zq10U9CCK5o5IFaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0c:38:7c:1c:a0:69:8a:a6:ae:54:d1:66:70:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Aug 23 11:02:25 2025 GMT
Not After : Aug 24 11:02:25 2025 GMT
Subject: CN=3630a9fc1582949b7ed024955585f56a789ebd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:08:ed:4b:e8:b6:85:be:d8:e6:ba:1d:ea:
51:db:8f:99:6c:e4:5c:ab:8e:54:75:1e:b6:c1:81:
2b:9b:0b:ec:1c:88:30:3e:ac:dd:03:ff:f1:18:5c:
65:55:a8:4c:2d:03:a4:e8:90:e5:16:49:fe:e1:64:
6e:10:24:ca:46:15:01:9d:02:87:e9:31:6c:1d:b3:
b6:45:78:04:fe:47:a0:1c:f4:84:08:2d:1d:a7:33:
81:30:11:1b:99:b8:bf:fe:aa:02:d3:d4:d2:3d:4c:
d8:1c:4e:a6:7a:cd:48:88:8d:93:9b:f6:1f:cb:99:
2f:19:f0:00:ec:38:6f:13:18:4f:41:31:61:15:ff:
1c:9a:9e:a5:27:23:c7:23:da:76:f5:43:d1:fc:ba:
01:42:df:65:c4:ac:96:df:4c:08:53:46:25:25:40:
cd:78:c0:bc:0a:b5:3b:af:b9:25:91:cf:c6:67:a8:
7f:6c:c8:d5:cb:a8:2e:78:6a:56:e4:81:a9:b9:66:
97:41:27:c7:04:bc:0a:6d:9e:58:94:1e:6d:2e:15:
63:e4:c4:58:7a:6c:10:da:13:fe:ce:23:76:6c:dc:
33:1f:00:7e:6d:f3:bf:72:56:ff:88:fb:1a:d5:e5:
dd:2c:fb:ba:29:67:79:1a:1f:44:a5:3c:ce:38:fc:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:30:A9:FC:15:82:94:9B:7E:D0:24:95:55:85:F5:6A:78:9E:BD:49
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f0:4b:0a:0e:19:d2:9f:a8:83:94:ab:50:2b:2b:e0:6f:51:
0f:9b:2a:d5:9c:6c:80:dd:c0:6c:45:c8:56:aa:f9:05:73:0c:
4d:10:fa:e9:a7:ac:b4:cb:9e:d7:8a:7a:c5:bb:83:42:cb:a7:
65:30:86:8c:7f:54:b4:7c:11:7a:e7:3e:bf:57:2a:8d:e9:c7:
28:16:00:9b:96:50:05:6b:17:34:ad:b4:ac:0c:fa:bc:2a:59:
cd:e2:ad:ae:c7:5e:5c:e1:ff:51:cf:76:38:d3:94:67:54:47:
69:6a:a1:5c:75:d0:a7:cb:6b:a4:91:fc:5b:80:b0:94:57:9c:
83:9b:a3:91:eb:ad:df:3e:80:ec:d3:bb:01:6a:82:34:12:e3:
d9:98:d1:cc:08:31:39:16:63:14:6f:4f:2d:9d:68:27:b7:8c:
d4:da:91:51:1c:70:75:45:7c:3d:e4:45:83:d2:0b:48:8b:d4:
73:d6:17:48:84:90:57:94:76:9a:09:f7:ad:91:e2:8e:d8:69:
ad:c1:ca:28:bc:fc:4c:21:df:76:bc:a8:bc:9e:3d:db:aa:c2:
34:46:56:c7:c0:83:a0:05:91:27:0b:9d:7b:ed:36:c3:69:2e:
4d:fb:10:ab:cf:7d:98:16:c2:22:59:6e:2c:65:21:c7:f8:29:
c1:ce:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:30 2025 by rpki-client