Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: 1kUatcEoyxEvou0gkVZ7PVDn4XH8G0EKoaXNoz+eUq4=
Subject key identifier: BF:83:FA:D9:ED:F7:CD:B2:17:31:56:33:02:61:F9:F1:8D:97:5E:08
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 01993501A78417EAB15ADFD8440128BFBE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 11D5
Signing time: Wed 10 Sep 2025 19:02:04 +0000
Manifest this update: Wed 10 Sep 2025 19:02:04 +0000
Manifest next update: Thu 11 Sep 2025 19:02:04 +0000
Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: E5bfBTHpbdu2dL1E1P7cAWMPEQGi01bpbOrEhVWqhXo=)
2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:a7:84:17:ea:b1:5a:df:d8:44:01:28:bf:be:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Sep 10 19:02:04 2025 GMT
Not After : Sep 11 19:02:04 2025 GMT
Subject: CN=bf83fad9edf7cdb2173156330261f9f18d975e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:d2:5f:62:83:ff:66:bb:20:10:42:50:eb:
16:7f:51:91:8f:f5:e4:02:e0:4e:70:81:75:67:ca:
27:92:fe:e0:b2:5b:dc:9b:43:24:13:55:85:b8:84:
2c:1e:11:e8:b5:65:fd:85:88:db:28:ee:bf:f6:48:
3e:c1:e2:ba:00:c4:b0:be:84:71:62:1a:54:8a:92:
7f:c3:97:16:a3:22:c8:f6:f3:f5:83:8b:84:ea:c3:
19:21:75:09:13:95:f2:e0:73:f7:a2:6f:2b:dd:f8:
39:54:b0:88:df:33:4c:c3:d5:98:e7:50:64:a6:17:
21:7c:b0:77:1c:91:ac:b7:e7:c6:e9:63:0f:d9:9b:
22:0f:33:e1:8f:92:24:19:d2:6c:20:5c:4b:9d:87:
f0:f7:94:57:88:89:26:47:b6:d8:dc:6c:62:9e:d3:
2f:28:13:35:90:e2:b5:04:31:26:44:73:63:17:5a:
75:2b:2d:62:2d:d2:f0:57:7c:90:b8:bb:bc:cc:c0:
ed:d3:d4:55:d4:ef:75:4a:96:8f:5c:9d:5f:fc:f9:
c9:3a:35:39:51:70:0d:43:53:23:b9:1c:06:24:ed:
c3:51:d5:61:b1:87:74:8d:30:b3:64:a3:b8:3d:e5:
ba:a6:ba:af:3b:83:33:28:9d:09:8b:66:fb:8d:33:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:FA:D9:ED:F7:CD:B2:17:31:56:33:02:61:F9:F1:8D:97:5E:08
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1e:62:9d:a2:b3:3b:cf:9a:3d:23:e5:2e:d2:2d:af:f0:94:
e1:14:0a:05:c8:a9:b7:6c:f2:6b:61:d1:40:37:20:70:a8:d1:
65:2a:38:35:bb:90:64:6d:a7:65:78:15:8c:9c:27:a9:7d:10:
93:67:8e:8b:4a:f6:90:d5:c2:0b:a3:ab:c3:be:21:a8:95:78:
bc:f3:85:31:b3:28:01:26:06:ec:1a:70:44:a3:36:29:10:c5:
c0:d1:b1:0f:f7:f9:be:e1:02:73:ea:cd:2e:19:06:0e:da:13:
8c:e0:44:f8:3c:92:95:55:9d:f7:47:27:2d:61:b9:ac:cc:28:
f4:ec:7d:da:cd:b5:2a:87:d3:d6:e0:c4:c4:6e:9a:33:6d:f6:
50:91:f5:c4:59:b0:4a:2c:cf:14:33:11:c3:52:6d:c8:b8:7f:
02:44:d3:37:56:be:f2:46:90:8c:1a:47:67:32:b4:dd:2e:1a:
ae:04:8b:ca:af:eb:3b:1b:06:3e:8f:a4:8c:32:f4:51:3e:29:
7b:c1:f8:08:c3:8e:6b:39:00:c3:e2:74:82:0a:83:ff:4b:bb:
b1:3f:7a:8d:7b:f4:0d:87:7d:45:9d:95:0c:8e:35:94:25:f8:
c4:f1:f4:1a:99:75:28:6f:b7:a3:a6:95:f5:e8:cb:2a:0a:62:
bd:00:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:51:46 2025 by rpki-client