Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
File: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft (raw, json)
Hash identifier: OEj97shr+A6dWXKnYGTdMSdjrDYTcWC3L+xONKWyZAo=
Subject key identifier: C7:B7:29:A5:BB:0D:51:A8:8C:4D:0A:5A:42:82:E3:F4:B8:64:E6:D7
Authority key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
Certificate issuer: /CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
Certificate serial: 0197B70F214F890566A9D69CDE85A89581AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
Manifest number: 0421
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl (hash: 4bnzP8+8AN4OimY1tv7XIFAwA77HE1VZZIyne/KRiWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:21:4f:89:05:66:a9:d6:9c:de:85:a8:95:81:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=c7b729a5bb0d51a88c4d0a5a4282e3f4b864e6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:5d:b7:42:fd:6a:2b:95:55:64:ae:f8:c0:
52:2f:c2:5e:6b:07:d3:81:d1:3a:d8:05:71:a0:24:
40:50:20:24:35:cc:f0:43:1f:af:d0:84:78:5e:cc:
ac:dc:90:1c:71:f5:5c:f0:1a:3d:38:70:6f:7a:d8:
3c:1d:ff:dc:db:30:60:93:6f:45:e7:90:9d:a4:ec:
07:d8:5a:71:3a:af:a8:bb:dd:5a:1e:61:e5:c1:e8:
81:64:02:9f:bd:f0:9c:bd:88:ca:0c:a3:5c:07:bd:
ff:1d:ec:df:f8:9d:09:6e:52:59:ca:a8:b9:a3:ca:
7c:07:1b:f7:6f:3a:8a:b4:35:9d:bd:1b:ea:24:9c:
69:7a:bf:95:6a:64:e8:54:a8:d8:9d:10:b9:44:7c:
37:cc:de:22:7f:8a:7a:7d:38:13:16:84:52:5a:d1:
59:05:14:ba:e7:0e:d3:c8:54:9a:30:2e:28:44:a5:
72:21:0d:1c:eb:8f:9a:42:89:1d:59:78:70:3e:76:
10:9f:f1:38:a5:bf:9e:21:e3:84:a2:0a:fa:93:2b:
f2:b4:b8:c5:0a:27:f9:13:a8:62:63:c9:1c:40:64:
af:7a:85:1f:5c:09:d4:25:50:f5:48:79:c0:49:81:
0c:10:7e:b5:b1:d1:58:f9:fe:bd:be:08:39:f2:47:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B7:29:A5:BB:0D:51:A8:8C:4D:0A:5A:42:82:E3:F4:B8:64:E6:D7
X509v3 Authority Key Identifier:
keyid:1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7e:cc:2e:1b:98:62:e1:dd:7a:02:91:54:e0:a7:8b:d3:53:
b2:68:b6:73:e5:2a:82:a6:d1:61:c7:11:68:f7:03:4a:23:81:
0e:02:b3:25:af:30:dc:3d:e5:a7:9b:88:82:4e:90:b3:3e:31:
c3:12:75:1e:1e:eb:87:9c:f7:30:63:6e:ce:18:1a:e4:f8:c1:
56:43:b1:45:39:9c:b0:98:16:7c:70:67:58:95:98:d4:8a:84:
d9:bd:4b:6c:84:e6:2f:cc:69:9b:11:04:b5:6e:d7:8e:9a:26:
19:d0:80:52:e2:df:c5:db:09:c7:cd:08:d6:9b:a8:59:c3:47:
07:45:25:24:88:be:a1:f5:50:55:47:8f:d1:da:9e:c9:17:e5:
fc:dd:d7:08:f8:80:12:b7:82:ab:42:ca:47:35:37:bc:7b:2f:
ea:4c:23:a8:a2:45:a9:c9:1f:80:1e:27:8a:5f:a6:04:7e:cf:
89:fc:19:23:67:22:1c:72:8a:c7:56:ae:59:5e:a9:0d:e5:56:
14:05:6a:ee:82:d4:11:bb:82:49:25:9a:cc:c7:f1:9f:4e:0e:
56:cd:79:30:ee:1b:2f:42:66:4e:cb:a4:92:ab:89:8d:79:3b:
e8:f7:72:1a:14:fa:78:94:83:eb:0f:07:51:4c:63:b1:aa:f2:
5c:83:5d:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DyFPiQVmqdac3oWolYGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjk1YmZjZjU5NWY0NjUwZmYzMTIyNTQzNjJhZDI2NjZi
MWNkNmIwHhcNMjUwNjI4MTUwMTUxWhcNMjUwNjI5MTUwMTUxWjAzMTEwLwYDVQQD
EyhjN2I3MjlhNWJiMGQ1MWE4OGM0ZDBhNWE0MjgyZTNmNGI4NjRlNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS1dt0L9aiuVVWSu+MBSL8JeawfT
gdE62AVxoCRAUCAkNczwQx+v0IR4Xsys3JAccfVc8Bo9OHBvetg8Hf/c2zBgk29F
55CdpOwH2FpxOq+ou91aHmHlweiBZAKfvfCcvYjKDKNcB73/Hezf+J0JblJZyqi5
o8p8Bxv3bzqKtDWdvRvqJJxper+VamToVKjYnRC5RHw3zN4if4p6fTgTFoRSWtFZ
BRS65w7TyFSaMC4oRKVyIQ0c64+aQokdWXhwPnYQn/E4pb+eIeOEogr6kyvytLjF
Cif5E6hiY8kcQGSveoUfXAnUJVD1SHnASYEMEH61sdFY+f69vgg58kdq9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe3KaW7DVGojE0KWkKC4/S4ZObXMB8GA1UdIwQY
MBaAFB75W/z1lfRlD/MSJUNirSZmsc1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NGQ2OTctNGEwNy00MDIwLTlkZGEt
NTUwZTEwMThmY2JmLzEvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83NGQ2OTctNGEwNy00MDIwLTlkZGEtNTUwZTEwMThmY2Jm
LzEvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgn7MLhuY
YuHdegKRVOCni9NTsmi2c+UqgqbRYccRaPcDSiOBDgKzJa8w3D3lp5uIgk6Qsz4x
wxJ1Hh7rh5z3MGNuzhga5PjBVkOxRTmcsJgWfHBnWJWY1IqE2b1LbITmL8xpmxEE
tW7XjpomGdCAUuLfxdsJx80I1puoWcNHB0UlJIi+ofVQVUeP0dqeyRfl/N3XCPiA
EreCq0LKRzU3vHsv6kwjqKJFqckfgB4nil+mBH7PifwZI2ciHHKKx1auWV6pDeVW
FAVq7oLUEbuCSSWazMfxn04OVs15MO4bL0JmTsukkquJjXk76PdyGhT6eJSD6w8H
UUxjsaryXINdgA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:35 2025 by rpki-client