Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: I4Xk/UR0vvK9fC7bv+IzaCiWCGZcA1JMyg3ZhKFzzMw=
Subject key identifier: AE:0C:AA:6A:E2:77:C7:55:AF:CE:7D:CE:52:F0:B3:47:DA:C2:59:6F
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 0197488C9747BCC8B3D30D221B7FCFCDC4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 10D6
Signing time: Sat 07 Jun 2025 04:01:02 +0000
Manifest this update: Sat 07 Jun 2025 04:01:02 +0000
Manifest next update: Sun 08 Jun 2025 04:01:02 +0000
Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: ZJgMPGn2i6IE8dQL5YeiOQWenPBjl7T8m38PVnshXc8=)
2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:97:47:bc:c8:b3:d3:0d:22:1b:7f:cf:cd:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Jun 7 04:01:02 2025 GMT
Not After : Jun 8 04:01:02 2025 GMT
Subject: CN=ae0caa6ae277c755afce7dce52f0b347dac2596f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:7e:d9:e8:29:c8:9f:19:dc:01:a2:38:71:
45:28:7b:4e:04:42:f7:36:6c:74:35:0e:f3:24:b7:
02:b5:fb:96:44:7c:0a:b3:fd:56:32:28:bc:f2:45:
20:90:16:de:ae:39:bd:e8:15:6c:f8:73:6a:9a:4f:
27:87:af:68:18:c1:0b:32:e9:7c:7a:69:fd:52:0a:
55:a4:49:5a:ce:ae:b0:ca:d0:45:b5:d3:b4:13:38:
b6:54:ac:c7:fa:c6:93:11:3f:c9:60:e0:03:96:28:
59:09:5e:31:45:52:36:45:62:19:00:4e:a0:79:f5:
b9:b3:3c:cc:ca:73:ca:ec:df:5c:e6:60:d5:b0:70:
8a:e8:6f:38:7a:b4:2a:b1:b6:4c:4e:3f:ed:eb:ca:
c9:be:61:59:17:c0:1e:6d:ed:21:51:e9:46:18:32:
be:67:a0:0e:2c:dd:65:da:7c:3f:f4:01:f2:85:d2:
cd:e6:b7:1a:e3:1c:bc:21:a1:f1:59:00:a4:c2:8a:
7d:e9:b5:32:df:d6:0c:14:f5:af:fb:1e:73:4c:06:
1a:28:9e:68:e8:07:23:7e:43:79:5d:35:5a:d5:d8:
df:c2:78:80:b1:b9:8a:37:95:76:63:e1:c2:bd:d2:
57:52:1a:90:47:84:3b:dc:51:ba:8d:7e:34:e8:fb:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:AA:6A:E2:77:C7:55:AF:CE:7D:CE:52:F0:B3:47:DA:C2:59:6F
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:7b:13:23:a4:02:81:70:e5:9d:f6:28:26:7a:e7:1e:cf:
79:bc:2e:b6:a0:dc:84:23:60:0a:d6:3d:40:7d:fc:99:3f:8d:
56:d3:12:f7:28:aa:ff:d3:ac:f6:27:8a:52:67:fd:62:ba:f4:
b2:85:34:14:57:c8:fd:71:e7:12:0f:7a:9f:ee:39:b5:ed:d1:
c2:4c:58:81:39:53:7b:16:d4:57:95:cc:59:9a:9b:9f:68:98:
bb:e8:39:fc:23:34:59:21:8a:d8:7c:d6:5b:aa:06:43:ba:68:
2b:70:86:3c:49:9d:6b:4e:9a:a3:0d:7b:e1:50:da:92:65:eb:
81:de:0a:cb:7a:7f:fb:22:4e:d9:7c:c2:80:4c:2c:d2:a0:a2:
ac:f5:26:a0:49:74:13:ee:40:6a:f6:d7:8a:0c:a9:70:1e:09:
a4:91:13:69:dc:8b:d6:ea:65:44:0d:83:a7:68:67:f0:59:56:
e3:e9:f0:8e:f1:4a:5c:dc:ca:c4:5a:a6:da:9d:d3:e1:6f:5c:
27:b3:79:f1:0e:1c:4e:7e:8d:94:53:51:44:ab:91:a4:da:41:
e9:ae:16:fc:95:e5:db:10:a3:3b:55:ee:bd:ec:38:88:32:2d:
36:36:5e:a7:7f:17:a8:6c:57:9d:8e:0d:e8:ae:98:7f:dd:75:
88:64:05:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjJdHvMiz0w0iG3/PzcS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3
NDY5NDIwHhcNMjUwNjA3MDQwMTAyWhcNMjUwNjA4MDQwMTAyWjAzMTEwLwYDVQQD
EyhhZTBjYWE2YWUyNzdjNzU1YWZjZTdkY2U1MmYwYjM0N2RhYzI1OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj1+2egpyJ8Z3AGiOHFFKHtOBEL3
Nmx0NQ7zJLcCtfuWRHwKs/1WMii88kUgkBberjm96BVs+HNqmk8nh69oGMELMul8
emn9UgpVpElazq6wytBFtdO0Ezi2VKzH+saTET/JYOADlihZCV4xRVI2RWIZAE6g
efW5szzMynPK7N9c5mDVsHCK6G84erQqsbZMTj/t68rJvmFZF8Aebe0hUelGGDK+
Z6AOLN1l2nw/9AHyhdLN5rca4xy8IaHxWQCkwop96bUy39YMFPWv+x5zTAYaKJ5o
6AcjfkN5XTVa1djfwniAsbmKN5V2Y+HCvdJXUhqQR4Q73FG6jX406PuT9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4Mqmrid8dVr859zlLws0fawllvMB8GA1UdIwQY
MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt
YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh
LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG17EyOk
AoFw5Z32KCZ65x7PebwutqDchCNgCtY9QH38mT+NVtMS9yiq/9Os9ieKUmf9Yrr0
soU0FFfI/XHnEg96n+45te3RwkxYgTlTexbUV5XMWZqbn2iYu+g5/CM0WSGK2HzW
W6oGQ7poK3CGPEmda06aow174VDakmXrgd4Ky3p/+yJO2XzCgEws0qCirPUmoEl0
E+5AavbXigypcB4JpJETadyL1uplRA2Dp2hn8FlW4+nwjvFKXNzKxFqm2p3T4W9c
J7N58Q4cTn6NlFNRRKuRpNpB6a4W/JXl2xCjO1Xuvew4iDItNjZep38XqGxXnY4N
6K6Yf911iGQFVg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:52 2025 by rpki-client