Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: eDZUBf5mIfNOx8RB7rj696zpXwgtVLyjEh9AKn7WgYs=
Subject key identifier: 8A:AB:62:6B:D9:3E:8A:D9:52:DE:3B:5A:DA:15:77:61:A1:FD:DC:A5
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 0198D515F4570C38D0E9F047987770303F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: tT2jKPuCvjgHssXGk5tmO610QipMcu3HEQAS+roCVRM=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f4:57:0c:38:d0:e9:f0:47:98:77:70:30:3f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=8aab626bd93e8ad952de3b5ada157761a1fddca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:80:2a:6f:7e:23:c6:d9:2c:71:d0:02:58:
42:5a:52:66:23:0b:60:04:f4:b2:5a:fb:86:57:36:
1f:89:71:ac:2b:d4:79:16:db:31:9c:77:c4:40:04:
eb:75:11:97:aa:aa:2c:9b:98:7f:5b:1f:98:8b:12:
47:18:10:cd:2c:33:1f:2a:3d:fa:99:00:e7:6c:d2:
81:5a:5a:5a:05:28:58:2a:f5:38:90:49:b3:f5:9e:
a5:d8:56:07:8a:64:bc:0d:82:9d:8f:91:e9:31:22:
a0:28:5f:5c:83:7e:7c:39:ba:77:de:19:be:33:51:
15:de:ac:63:d8:c0:98:61:ce:d3:a1:a1:68:5c:da:
44:1e:df:61:3f:2c:f4:b8:50:0b:ae:11:94:1a:98:
94:b8:f0:97:b9:96:12:7a:a0:a9:c4:f0:cf:47:04:
9d:c9:9b:6a:6b:98:54:79:d5:1c:f4:56:df:46:9b:
b5:f1:4e:62:eb:99:bf:a6:14:5a:45:cd:b9:92:9f:
b8:24:94:f4:0d:39:16:9f:61:26:1b:79:6c:30:13:
fd:60:ec:25:06:95:71:c7:13:a8:4b:cd:60:84:92:
c8:f4:35:50:25:b9:6e:a5:ed:6f:d6:ff:24:47:94:
de:01:c3:95:fd:1f:b7:72:b8:2a:62:8f:2c:b8:8e:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:62:6B:D9:3E:8A:D9:52:DE:3B:5A:DA:15:77:61:A1:FD:DC:A5
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:25:47:54:4f:fc:af:39:53:57:48:76:23:aa:6d:a3:80:5d:
89:12:c0:05:84:f4:b8:15:c0:48:07:1e:3e:90:dc:64:65:f8:
19:71:03:9d:b5:e2:88:50:90:6f:96:66:b8:05:8d:fe:f5:b2:
70:50:5b:d0:1b:6a:34:9d:d5:8f:c3:6f:ab:49:df:96:85:4e:
8a:23:a1:ff:e5:0c:9b:28:5a:1e:8c:05:26:fb:88:12:d1:0d:
b0:84:1e:4a:b9:e9:73:73:72:fd:ad:88:ca:16:14:0f:b4:40:
a8:cf:46:f6:a3:9e:d5:1e:cf:8c:11:00:a3:39:e1:7c:98:c2:
2f:6e:93:bf:06:5e:a1:10:d3:70:3a:e2:a7:9d:b4:b5:05:7c:
b1:2b:77:f0:56:23:d7:d0:4c:a7:b0:08:7c:02:ab:ec:3c:08:
37:c4:93:6d:b5:2e:60:19:3a:25:35:0b:6f:e2:78:3f:42:34:
66:d4:ba:24:63:6f:5f:1d:47:1e:2b:b2:8e:b0:c3:46:8e:2d:
e6:d8:ab:8a:ea:1b:45:14:97:97:2b:90:75:fb:67:93:13:ca:
f7:8e:68:2f:a6:e7:cb:2b:17:56:46:9d:e8:e8:c8:03:e0:37:
de:59:d5:b0:98:1f:e0:48:59:7c:8a:93:27:8b:da:17:60:b6:
8b:65:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:43 2025 by rpki-client