Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: KQyyP+zDRvIJEIqWW/nm7o34bOve32zP+VBQf+P0xo4=
Subject key identifier: AA:F1:4A:0B:DE:4E:36:D1:00:1F:58:29:28:43:16:99:F1:6B:68:B5
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019849666FA124D5531CA1581221D5848BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 11B8
Signing time: Sun 27 Jul 2025 01:01:46 +0000
Manifest this update: Sun 27 Jul 2025 01:01:46 +0000
Manifest next update: Mon 28 Jul 2025 01:01:46 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: ixYh16RdLUxlbIe+KRT9AGmNQwMHEQY4CMgGJsHRkwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:6f:a1:24:d5:53:1c:a1:58:12:21:d5:84:8b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jul 27 01:01:46 2025 GMT
Not After : Jul 28 01:01:46 2025 GMT
Subject: CN=aaf14a0bde4e36d1001f582928431699f16b68b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:4c:cb:09:6a:31:d1:7d:a0:70:11:2d:a1:
cc:c0:f4:a5:1a:cc:c8:ee:a1:81:6f:17:95:62:c2:
ce:ef:ae:cb:72:3b:8e:2e:41:24:5f:d7:72:19:ba:
df:e8:4e:98:22:2e:06:85:4b:8a:0f:85:98:35:34:
a4:89:c1:8c:8e:33:14:49:87:40:70:55:df:85:ee:
35:45:df:21:1d:5c:de:11:19:93:56:11:f2:5e:38:
e7:b0:00:bc:c9:a5:5f:18:eb:39:94:f3:cd:8c:d8:
58:d6:10:57:46:c0:6b:2d:65:fe:a6:a6:92:db:3b:
7b:9a:90:ba:a0:1a:3e:ff:e0:bd:cb:8e:e9:2f:b8:
f6:bb:db:0d:c0:09:df:fa:99:28:37:36:f4:2b:36:
44:9a:b1:a6:21:ad:11:2e:1c:a6:16:df:8e:1a:09:
e2:e0:15:41:9b:c2:95:47:58:ca:31:cf:e3:d6:59:
e7:ae:80:e5:5b:cf:88:26:2d:4a:9a:b3:43:b4:0b:
26:99:34:af:cd:5f:b3:df:8f:9a:12:79:a1:7b:97:
cc:27:57:57:6e:e0:b2:aa:9a:7f:96:fe:08:e6:f9:
ae:27:fe:e8:a4:14:85:37:9d:59:bd:39:77:cb:28:
93:0a:b7:54:55:44:a2:07:f4:c3:3d:30:17:46:69:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:4A:0B:DE:4E:36:D1:00:1F:58:29:28:43:16:99:F1:6B:68:B5
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:c3:1d:98:57:76:37:54:d1:27:68:8c:71:4c:44:19:b7:
ac:fd:7a:df:29:f1:46:ea:9a:6e:9b:18:89:9f:e2:20:11:7a:
ea:4e:c3:70:a8:8d:ed:2b:cb:2e:c8:3c:1b:a1:28:0d:ba:20:
ae:7d:64:43:75:7f:86:44:0e:f7:71:ed:8d:fb:23:cd:98:b8:
21:37:a4:fe:4b:ad:56:de:88:5c:64:57:26:cc:07:a6:9a:7a:
65:53:87:a4:60:1f:4e:a1:46:c0:e3:38:f3:cf:ad:58:a1:e8:
b2:a1:37:fd:b6:44:1f:cb:02:ae:23:a7:a3:bc:2f:ba:30:66:
75:85:e9:52:d5:59:f9:64:c7:4d:90:a2:dd:bf:e2:a2:fb:b5:
46:b3:da:b1:fe:a6:be:fe:b1:20:28:5b:fe:9b:44:8d:15:9e:
2f:b5:c7:f2:59:b6:4e:4c:68:fa:1e:5f:37:c9:bd:99:d2:75:
d4:9a:88:89:04:61:f1:0e:91:a7:79:bf:f5:24:d4:49:d7:8e:
76:1c:33:54:1b:70:4b:19:63:10:67:4a:5b:48:9d:16:21:c1:
f5:7a:57:e4:35:3e:9d:24:00:41:a0:89:8d:7e:0f:13:9b:3d:
01:1a:02:e9:b2:e9:f4:27:ef:63:20:ea:8e:61:b1:e1:63:1b:
97:8f:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:01 2025 by rpki-client