
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: Cy/W4yWLGhkMrg2PJ11MqkNqMfzwFjbJ42fnipC62Xg=
Subject key identifier: 31:ED:BF:E8:29:79:E8:96:2A:DA:75:DF:2D:8C:AD:B4:60:C5:72:8F
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 0198D4723DEC65E2986941EDA464C8074280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 0898
Signing time: Sat 23 Aug 2025 01:01:53 +0000
Manifest this update: Sat 23 Aug 2025 01:01:53 +0000
Manifest next update: Sun 24 Aug 2025 01:01:53 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: h7lqsifEMsCZbX9f4soTM4xbt3yrRj5r9YtGmX9b5Gc=)
2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3d:ec:65:e2:98:69:41:ed:a4:64:c8:07:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Aug 23 01:01:53 2025 GMT
Not After : Aug 24 01:01:53 2025 GMT
Subject: CN=31edbfe82979e8962ada75df2d8cadb460c5728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:1c:9e:1c:d0:98:f6:5c:0d:35:67:d6:ab:
80:1a:1c:9f:cc:cc:a4:d8:a2:91:f5:92:1f:da:59:
33:46:0c:e0:da:f8:57:5f:74:62:b9:dd:bf:f2:25:
45:01:45:7c:6a:7c:26:58:13:fc:7f:fd:c1:35:9e:
cf:af:48:9e:4f:dc:ca:35:75:23:43:9a:20:1c:14:
02:82:d7:c0:8b:f4:a0:15:49:53:f4:57:3d:7e:eb:
5b:9d:97:3c:48:9b:aa:cb:68:ca:f8:1f:4c:3e:4b:
79:76:82:3b:15:ff:66:bb:ca:92:6f:d1:25:d9:97:
32:00:db:66:01:64:a4:e1:33:b1:f9:23:9e:10:97:
e5:29:ea:36:5e:98:bd:dc:52:1c:01:3d:ff:5a:6f:
73:91:59:19:10:d8:f9:5a:c6:1f:fc:4c:1d:e8:82:
59:8c:73:72:29:18:62:da:e9:00:14:0d:3c:4d:37:
cb:07:86:4b:ad:90:06:4f:2c:55:a2:7d:70:72:14:
19:ca:de:bf:fc:48:a6:fe:3f:3f:57:eb:46:11:7e:
04:2e:9a:04:b1:d4:49:c5:df:c4:0c:32:be:35:97:
f9:11:60:28:84:87:e3:9f:00:25:3d:92:43:7d:47:
06:10:ab:2e:72:69:cb:2e:dc:34:49:f2:5f:97:f7:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:ED:BF:E8:29:79:E8:96:2A:DA:75:DF:2D:8C:AD:B4:60:C5:72:8F
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:21:ec:15:2f:a0:f0:b5:1b:7f:56:01:e2:d2:14:08:fa:
eb:69:11:97:0d:ab:12:95:c7:c5:ca:a1:fd:39:45:79:92:8c:
c0:df:7d:76:75:e3:f2:5b:3e:e0:fc:bd:e8:68:cf:63:45:5a:
9a:9f:b3:9e:15:22:43:12:6e:99:a5:fb:03:a3:4e:88:3c:68:
75:a7:14:8d:fb:5b:ad:e7:12:37:a2:ec:a8:88:83:95:2c:52:
e0:ab:1a:9c:02:6f:09:ec:9d:03:b6:8f:93:b6:2f:d2:91:30:
b0:e0:78:84:2a:ec:4e:48:b3:ab:57:d4:d6:92:89:dd:65:9f:
59:7c:4a:5b:61:3a:09:db:23:e6:d1:67:88:0d:6b:9f:ce:45:
09:e5:f5:7d:da:39:cc:a0:6b:9e:98:71:aa:8f:2f:0d:3a:21:
2c:9e:25:8e:0e:09:31:55:cc:4f:9f:38:3f:8f:f5:46:bf:50:
4e:f9:e4:75:7c:85:bf:69:fe:c7:60:04:f2:91:b6:af:3d:7e:
35:f5:2e:a7:2d:af:7d:bb:75:98:db:72:f2:2c:b1:c3:df:d2:
80:36:3c:b3:82:6d:d1:65:c6:76:aa:cf:e3:9a:ba:18:f1:51:
52:61:1c:3d:59:3e:32:a3:5f:83:c7:34:79:3b:53:67:4e:d0:
8b:19:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:41 2025 by rpki-client