Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: GERDhEvH8sW8OeUWB3sreODvZIUdXlkzhHl9iMsGXI8=
Subject key identifier: 45:C3:27:C0:72:16:7D:37:30:7D:9A:1A:BF:5B:45:62:22:B5:AA:C2
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 019A24787A88E56BBA8BF03AFBE147626E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 1251
Signing time: Mon 27 Oct 2025 07:01:06 +0000
Manifest this update: Mon 27 Oct 2025 07:01:06 +0000
Manifest next update: Tue 28 Oct 2025 07:01:06 +0000
Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: MxPyBDkI86dpsOGp7Z+2bspSNBCurZgeBVKUPgllZxM=)
2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:7a:88:e5:6b:ba:8b:f0:3a:fb:e1:47:62:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Oct 27 07:01:06 2025 GMT
Not After : Oct 28 07:01:06 2025 GMT
Subject: CN=45c327c072167d37307d9a1abf5b456222b5aac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:79:96:07:2a:c0:07:e1:64:f5:d1:5e:16:
14:a9:69:04:5f:c9:67:4f:c1:6d:61:3a:39:b7:fa:
8d:96:a9:8c:79:85:3b:e3:9d:0f:69:cb:11:50:70:
89:da:4e:87:84:76:9a:7e:0f:b5:3a:47:f9:c4:25:
41:b5:49:d9:81:5e:d0:f8:74:a4:9e:02:a5:9d:c9:
be:b1:bf:42:59:6a:d8:78:7b:38:2b:b1:4c:e6:f4:
da:88:9d:37:7a:59:67:bc:5f:f2:75:1e:4a:c8:b6:
1d:01:a4:86:68:a1:78:76:3c:90:7d:cb:34:d5:8d:
c8:ff:59:47:36:ff:b1:08:41:71:a2:b7:21:f6:00:
fa:fe:cc:41:f4:23:eb:2a:4d:4a:de:cf:84:e0:f5:
1e:96:fc:cb:4e:4c:aa:7e:bd:5d:ad:d7:3d:4b:cb:
14:59:03:a4:84:fe:06:04:2d:d8:97:e8:ca:c1:dc:
12:16:f1:13:7a:17:25:28:b9:ce:b4:3b:06:3d:59:
57:7b:c3:05:73:85:35:de:cb:5c:32:64:8b:70:db:
2b:c5:59:67:7e:c2:55:3b:c9:74:1f:4c:d4:1d:79:
ef:78:ca:f8:14:67:0f:9e:f9:53:f8:15:1d:3e:16:
84:07:7f:dd:a4:69:96:be:b3:30:81:70:e1:98:ab:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:27:C0:72:16:7D:37:30:7D:9A:1A:BF:5B:45:62:22:B5:AA:C2
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e1:69:a8:58:22:ff:4a:36:46:78:89:47:11:d5:35:49:e1:
9f:ec:20:10:ed:6d:f7:56:bf:12:e5:d5:09:bc:a1:43:43:42:
94:ed:84:e7:74:4f:a3:b9:30:8d:ef:be:d6:5c:fb:0a:e5:13:
5b:4c:10:ab:2f:9d:f7:25:cd:a2:4d:e6:a7:ab:b6:d5:c4:3f:
f7:fd:0f:a9:4b:65:6c:f8:16:67:af:d9:ef:d3:60:a1:9b:60:
8b:f9:45:a7:46:e2:12:0e:ae:07:01:a8:c6:55:e8:61:a6:17:
2d:8f:29:74:0c:4d:79:4b:91:de:11:b0:17:e0:47:ac:b7:07:
18:ed:3a:9a:cb:e4:02:05:ce:1d:ce:fd:67:52:63:d4:d2:4b:
01:22:fd:6a:e5:66:15:00:05:6a:01:bc:44:b1:09:fe:88:c4:
c0:74:a5:02:56:05:9d:25:bf:cd:0a:99:46:c0:06:52:83:64:
7e:02:49:b3:a1:12:9f:a9:d1:5f:02:d6:48:0c:51:ce:da:68:
06:13:a9:e7:1f:91:5f:b9:b8:cb:af:2d:9b:f3:7d:45:99:f7:
c9:7f:84:c5:6f:27:23:56:83:b9:2d:81:e5:b8:a1:e9:4a:07:
7d:ac:6d:1a:19:f6:ed:bf:02:6c:73:57:94:99:ac:5b:73:9f:
00:a2:03:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeHqI5Wu6i/A6++FHYm4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3
NDY5NDIwHhcNMjUxMDI3MDcwMTA2WhcNMjUxMDI4MDcwMTA2WjAzMTEwLwYDVQQD
Eyg0NWMzMjdjMDcyMTY3ZDM3MzA3ZDlhMWFiZjViNDU2MjIyYjVhYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn15lgcqwAfhZPXRXhYUqWkEX8ln
T8FtYTo5t/qNlqmMeYU7450PacsRUHCJ2k6HhHaafg+1Okf5xCVBtUnZgV7Q+HSk
ngKlncm+sb9CWWrYeHs4K7FM5vTaiJ03ellnvF/ydR5KyLYdAaSGaKF4djyQfcs0
1Y3I/1lHNv+xCEFxorch9gD6/sxB9CPrKk1K3s+E4PUelvzLTkyqfr1drdc9S8sU
WQOkhP4GBC3Yl+jKwdwSFvETehclKLnOtDsGPVlXe8MFc4U13stcMmSLcNsrxVln
fsJVO8l0H0zUHXnveMr4FGcPnvlT+BUdPhaEB3/dpGmWvrMwgXDhmKso3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXDJ8ByFn03MH2aGr9bRWIitarCMB8GA1UdIwQY
MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt
YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh
LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOFpqFgi
/0o2RniJRxHVNUnhn+wgEO1t91a/EuXVCbyhQ0NClO2E53RPo7kwje++1lz7CuUT
W0wQqy+d9yXNok3mp6u21cQ/9/0PqUtlbPgWZ6/Z79NgoZtgi/lFp0biEg6uBwGo
xlXoYaYXLY8pdAxNeUuR3hGwF+BHrLcHGO06msvkAgXOHc79Z1Jj1NJLASL9auVm
FQAFagG8RLEJ/ojEwHSlAlYFnSW/zQqZRsAGUoNkfgJJs6ESn6nRXwLWSAxRztpo
BhOp5x+RX7m4y68tm/N9RZn3yX+ExW8nI1aDuS2B5bih6UoHfaxtGhn27b8CbHNX
lJmsW3OfAKIDSQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:33 2025 by rpki-client