Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: 0u5+IPZ4lEjYHe6aSTpqUHYI5yjwRPZ5iALtDRyNukQ=
Subject key identifier: 27:C5:E9:DD:5B:EB:F9:C1:6B:79:96:35:7A:98:F4:C9:7C:A8:AE:53
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 0197B745B758420E392EBA1F302FC362A2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: fRQkpWMYv5Tdwj4BWRK00oS3PDa9rEbsoP9JOUfumpw=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b7:58:42:0e:39:2e:ba:1f:30:2f:c3:62:a2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=27c5e9dd5bebf9c16b7996357a98f4c97ca8ae53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:83:4b:f3:c6:1e:f0:44:14:1c:ad:9b:d9:
23:ba:d3:ff:9a:93:e7:47:93:34:d4:8f:e1:06:00:
43:cc:dc:58:04:6c:dd:cb:a9:c2:34:ca:87:6a:c8:
88:4b:f0:3c:c2:c5:55:78:7b:ef:af:02:65:64:21:
4e:66:76:c3:44:ed:1e:1c:0a:aa:1d:aa:a3:21:f1:
d7:d7:0b:52:84:23:24:b8:a0:f7:8f:e8:2e:97:0e:
6d:ee:63:b7:a1:7b:05:90:24:b3:ca:68:46:03:bd:
49:60:b0:e4:a6:99:f4:e0:83:2b:ea:ed:2e:9a:3e:
de:ca:02:bc:ab:b3:56:55:94:3a:c0:d5:69:45:a9:
47:92:f4:61:81:14:2f:f6:89:48:da:fe:94:6a:3e:
59:4d:8e:f1:bf:75:91:6d:e9:40:11:a8:43:f8:2c:
a2:ea:99:7f:90:82:88:e9:d1:ce:df:4d:9b:81:ac:
ab:3a:58:50:d5:77:b4:46:2d:dc:b4:d2:40:60:24:
4c:49:a6:f2:f8:92:35:96:53:8e:e0:eb:d7:99:5b:
a6:d7:30:53:69:79:8a:cb:fa:5d:77:de:55:02:68:
ac:4f:ac:dc:ad:b8:fa:75:8f:cd:f1:64:48:85:e6:
07:d5:45:31:cf:ae:02:8c:b8:c6:cf:6c:21:01:bd:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:E9:DD:5B:EB:F9:C1:6B:79:96:35:7A:98:F4:C9:7C:A8:AE:53
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:de:22:c1:82:b5:9c:8e:38:b9:28:9e:65:21:17:2a:1f:79:
76:90:d0:22:38:ff:50:57:b9:f5:b1:f3:ea:42:de:22:38:01:
1f:32:6c:8e:15:9e:3e:57:dc:7c:1d:3f:b1:40:2d:06:e0:e1:
94:d9:e1:4b:56:73:54:9e:bc:52:6c:c9:2f:dc:2d:b1:6d:b7:
34:ba:8d:c2:fe:8f:99:82:fb:97:03:67:db:47:29:8d:af:d4:
4c:32:25:55:58:d6:a1:1e:d0:cb:6c:d3:73:18:d9:08:81:5c:
5b:82:61:e0:bd:d5:58:d6:b2:07:1f:04:48:04:ec:0c:d1:29:
f7:f2:f0:36:2d:17:a6:97:9d:eb:6d:e5:9a:be:e8:89:d3:25:
df:cd:6c:df:08:f6:cf:60:69:69:5f:67:91:83:9d:56:47:21:
93:4c:32:83:20:87:26:e1:77:15:da:ac:40:1c:d7:c4:41:58:
65:dc:de:6e:e8:6a:ae:95:9d:a4:3c:ec:0a:a6:f5:b1:8d:e0:
d7:aa:e7:1b:67:b3:ea:37:0a:5d:78:af:58:bd:25:cc:7b:82:
85:cb:74:e5:95:9e:aa:17:87:79:a9:fd:a5:4c:7b:1c:8c:d4:
5e:85:57:d2:ec:28:b8:56:11:91:ce:08:a4:23:ec:ad:02:c2:
cf:7a:44:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbdYQg45LrofMC/DYqLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh
MmEwMGEwHhcNMjUwNjI4MTYwMTI4WhcNMjUwNjI5MTYwMTI4WjAzMTEwLwYDVQQD
EygyN2M1ZTlkZDViZWJmOWMxNmI3OTk2MzU3YTk4ZjRjOTdjYThhZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uWDS/PGHvBEFBytm9kjutP/mpPn
R5M01I/hBgBDzNxYBGzdy6nCNMqHasiIS/A8wsVVeHvvrwJlZCFOZnbDRO0eHAqq
HaqjIfHX1wtShCMkuKD3j+gulw5t7mO3oXsFkCSzymhGA71JYLDkppn04IMr6u0u
mj7eygK8q7NWVZQ6wNVpRalHkvRhgRQv9olI2v6Uaj5ZTY7xv3WRbelAEahD+Cyi
6pl/kIKI6dHO302bgayrOlhQ1Xe0Ri3ctNJAYCRMSaby+JI1llOO4OvXmVum1zBT
aXmKy/pdd95VAmisT6zcrbj6dY/N8WRIheYH1UUxz64CjLjGz2whAb1MWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfF6d1b6/nBa3mWNXqY9Ml8qK5TMB8GA1UdIwQY
MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt
MGI4MDFiZjgwZDUzLzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz
LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP94iwYK1
nI44uSieZSEXKh95dpDQIjj/UFe59bHz6kLeIjgBHzJsjhWePlfcfB0/sUAtBuDh
lNnhS1ZzVJ68UmzJL9wtsW23NLqNwv6PmYL7lwNn20cpja/UTDIlVVjWoR7Qy2zT
cxjZCIFcW4Jh4L3VWNayBx8ESATsDNEp9/LwNi0Xpped623lmr7oidMl381s3wj2
z2BpaV9nkYOdVkchk0wygyCHJuF3FdqsQBzXxEFYZdzebuhqrpWdpDzsCqb1sY3g
16rnG2ez6jcKXXivWL0lzHuChct05ZWeqheHean9pUx7HIzUXoVX0uwouFYRkc4I
pCPsrQLCz3pE7A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:48 2025 by rpki-client