Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: TSqsWY+uPz38P/MhrKe8VrFEunsAnysqgGm6s5/JB8o=
Subject key identifier: 81:98:B0:0A:78:C4:63:0B:85:19:1C:75:DD:EB:74:08:42:34:96:0B
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 0199FC8F6D8ECC5DB7EEE3F75B7373C9BA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0C29
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: QL1zeiejqmpsVVEkrqtMRR+HbWMRDRyXLC6OdkyrLYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6d:8e:cc:5d:b7:ee:e3:f7:5b:73:73:c9:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=8198b00a78c4630b85191c75ddeb74084234960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:0e:b6:9b:2b:48:5f:ad:c7:b6:b0:9c:a4:
c7:08:40:dc:30:07:06:d4:26:df:c2:fb:34:b5:02:
63:de:01:3a:8e:e2:17:f5:82:e1:5c:e9:ed:5f:0c:
41:94:25:ec:9f:dd:e2:22:c5:9e:89:d6:84:df:b5:
eb:6b:f8:d8:0e:87:a2:67:51:2a:70:59:05:c4:53:
29:e2:24:f2:b6:45:d2:1c:2e:c5:97:c6:01:69:65:
03:2a:fe:b7:fe:df:a6:06:dd:5e:8b:2e:92:d1:33:
74:6a:95:58:c0:ee:91:e2:f0:38:85:87:e2:10:04:
25:4b:e7:98:81:ad:e0:d7:74:d4:22:d6:cf:2b:19:
83:07:6f:80:ba:27:42:cd:98:e9:a2:0e:de:7e:20:
cf:79:7c:40:b7:7c:ad:49:d5:1d:d1:8b:7b:e7:fe:
13:68:f1:a5:ed:ab:14:2f:d6:39:55:ec:d9:40:1f:
1e:93:fa:57:77:bb:6b:97:25:9b:a4:e4:ff:97:87:
e5:82:aa:a6:91:ad:5b:09:40:3d:a0:bd:af:e1:58:
58:81:cc:91:e9:63:7d:52:44:92:55:86:41:37:7f:
83:ff:7f:2c:67:c2:13:85:e3:45:ed:f4:ce:14:f6:
2e:26:74:fd:ae:5e:84:fc:18:99:94:37:64:ae:3f:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:B0:0A:78:C4:63:0B:85:19:1C:75:DD:EB:74:08:42:34:96:0B
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5c:62:d0:d4:85:f6:5e:9e:64:5a:77:2a:3d:7b:66:34:17:
73:09:0a:4e:f7:4d:8f:dd:2c:9c:35:26:87:53:23:5f:ff:b4:
28:70:1c:8e:f8:48:c6:f1:f6:1f:94:7a:3f:e0:4b:ac:70:38:
65:d7:04:45:23:95:f0:37:1b:49:8e:2e:76:25:ea:46:00:7e:
ff:0a:c6:35:50:80:e5:ca:b8:17:79:ee:c5:b4:c7:d5:40:9e:
5c:e3:78:1d:e2:02:3a:89:ce:6f:da:d3:e9:ea:f3:5d:2e:76:
98:7c:a5:34:99:8d:1c:9c:3d:fc:91:c5:db:f6:32:d9:d8:b1:
3c:1f:11:b8:34:ac:79:d9:e6:28:7b:bc:0e:35:08:0f:fb:96:
02:58:07:c2:12:5a:28:50:b5:82:4a:e2:bb:25:fa:2a:13:9b:
a0:34:a4:f3:eb:37:86:34:25:47:78:47:c2:2b:d4:0e:a9:8f:
cd:0c:29:21:82:57:30:a5:09:43:75:93:01:d6:e4:71:5d:e3:
a2:7b:3f:e0:1d:ce:51:8f:79:b2:ed:43:fa:d2:72:79:d9:9e:
5f:76:18:4e:67:22:9c:fe:f3:e9:1d:af:0f:f4:5e:99:87:58:
af:96:ef:c3:40:3b:1d:04:5e:d4:28:02:fb:d1:98:f9:d9:c7:
76:a9:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:03 2025 by rpki-client