Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: +x0XjzJTLkyN9quFMz7djSfOLi8tP2uCxNSPOugPrZc=
Subject key identifier: 0B:2A:79:54:15:9F:27:C3:D2:F8:30:B4:9C:E3:E7:DC:42:97:7C:6D
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 0197B745583677C31F0BC290E263A9537195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0AFC
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: W8Q2nQV32yk493NVMCe7iLiBpO1vnN5x4aupRJzWcrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:58:36:77:c3:1f:0b:c2:90:e2:63:a9:53:71:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=0b2a7954159f27c3d2f830b49ce3e7dc42977c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:b6:44:b9:72:0c:de:c5:54:c8:73:36:51:
02:ea:8c:3a:6b:fa:5c:62:83:dd:44:40:ff:ce:d6:
0b:fe:8c:c5:59:a5:dd:2a:09:79:f4:49:69:dc:c4:
d9:73:e1:98:40:9f:a2:41:65:f5:70:7d:96:af:a6:
66:59:43:c0:5b:9f:07:89:76:a7:95:3c:a3:be:a1:
45:eb:f2:8c:6e:1e:0a:58:98:75:b1:d5:b9:bd:43:
bd:05:3d:55:9d:b1:a7:f3:3e:9b:4d:c5:2a:48:af:
88:29:22:53:8e:81:1c:37:85:ce:96:2f:d1:49:d6:
9d:6b:64:0d:5e:37:35:3e:ea:f4:48:9d:dd:5e:18:
35:70:d2:48:8f:5d:03:7e:a9:aa:51:81:8f:fe:d1:
d2:6e:c1:fc:59:90:d7:e4:e2:4a:6a:30:66:3e:67:
22:f0:61:5c:4c:78:d5:98:31:7a:5b:1f:51:49:22:
ec:7a:97:f0:48:42:0f:65:22:37:f0:c7:c2:4f:4a:
b4:2c:1f:05:f0:81:d7:ca:02:80:cd:8d:ee:ab:17:
78:06:94:68:bd:4e:3e:f3:ff:54:4a:5d:86:dc:50:
5d:75:bf:00:5f:7d:44:8c:cd:64:b9:02:49:3a:78:
5e:02:e3:cc:23:e0:fd:81:ae:6a:49:c2:25:36:0b:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:79:54:15:9F:27:C3:D2:F8:30:B4:9C:E3:E7:DC:42:97:7C:6D
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:42:33:28:0a:69:40:e7:1d:d2:47:0d:86:81:10:be:79:17:
c9:2e:38:96:ec:f9:f9:b3:f4:0b:ac:ac:9e:77:37:cf:2c:86:
c2:37:8c:15:b3:cd:a8:bf:6e:3d:e1:c4:cd:cc:e6:e2:58:e9:
94:44:61:d0:d8:54:1a:73:7c:dd:6b:bb:75:e1:9f:95:89:27:
1d:7f:e2:de:58:85:b4:d5:de:df:a6:60:08:58:2c:d7:3d:76:
af:e6:7e:2a:b7:c5:1b:85:0d:06:c6:5e:b9:56:a0:55:5f:6c:
ed:38:c6:3b:d9:a6:14:aa:e5:f5:25:21:4f:ca:b6:f1:e6:1b:
fe:3a:79:91:72:cc:bc:55:ee:ba:36:a7:cb:19:33:3e:4b:f0:
8b:34:b1:c3:87:d3:84:54:83:5f:f8:24:f1:e6:d4:94:91:2f:
f7:78:eb:f0:28:17:78:e7:e0:cc:81:8d:e4:70:b6:80:76:35:
46:a4:27:4b:ab:6e:73:a7:a5:73:43:fd:c1:e7:07:af:42:76:
fb:b7:90:a6:28:d3:fd:e3:cc:af:f5:6f:8b:e7:f9:05:c4:f3:
8f:e1:a6:ce:8b:fd:21:40:89:95:8a:7b:00:2b:3f:b7:a0:c1:
dc:a7:69:a5:e0:21:a5:a9:ac:85:fc:0e:71:29:1c:ba:99:21:
d0:df:e6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVg2d8MfC8KQ4mOpU3GVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZmE1NjRjZjk3NTc3YzA3NjMzYmE0ZTY0MGVhNzhjNzZm
YzE3ZGQwHhcNMjUwNjI4MTYwMTA0WhcNMjUwNjI5MTYwMTA0WjAzMTEwLwYDVQQD
EygwYjJhNzk1NDE1OWYyN2MzZDJmODMwYjQ5Y2UzZTdkYzQyOTc3YzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlu2RLlyDN7FVMhzNlEC6ow6a/pc
YoPdRED/ztYL/ozFWaXdKgl59Elp3MTZc+GYQJ+iQWX1cH2Wr6ZmWUPAW58HiXan
lTyjvqFF6/KMbh4KWJh1sdW5vUO9BT1VnbGn8z6bTcUqSK+IKSJTjoEcN4XOli/R
Sdada2QNXjc1Pur0SJ3dXhg1cNJIj10DfqmqUYGP/tHSbsH8WZDX5OJKajBmPmci
8GFcTHjVmDF6Wx9RSSLsepfwSEIPZSI38MfCT0q0LB8F8IHXygKAzY3uqxd4BpRo
vU4+8/9USl2G3FBddb8AX31EjM1kuQJJOnheAuPMI+D9ga5qScIlNgvGKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsqeVQVnyfD0vgwtJzj59xCl3xtMB8GA1UdIwQY
MBaAFIb6Vkz5dXfAdjO6TmQOp4x2/BfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDkt
MDczZDBkMTRkZGRlLzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDktMDczZDBkMTRkZGRl
LzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0IzKApp
QOcd0kcNhoEQvnkXyS44luz5+bP0C6ysnnc3zyyGwjeMFbPNqL9uPeHEzczm4ljp
lERh0NhUGnN83Wu7deGflYknHX/i3liFtNXe36ZgCFgs1z12r+Z+KrfFG4UNBsZe
uVagVV9s7TjGO9mmFKrl9SUhT8q28eYb/jp5kXLMvFXuujanyxkzPkvwizSxw4fT
hFSDX/gk8ebUlJEv93jr8CgXeOfgzIGN5HC2gHY1RqQnS6tuc6elc0P9wecHr0J2
+7eQpijT/ePMr/Vvi+f5BcTzj+Gmzov9IUCJlYp7ACs/t6DB3KdppeAhpamshfwO
cSkcupkh0N/mrA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:34 2025 by rpki-client