Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: c9c9AbQP3tv4zaGa9fqdZFsW5CSejn/S3Rcl6EpBGr4=
Subject key identifier: 87:1E:0F:B7:8D:68:B8:FC:51:91:5B:F2:A7:18:1E:48:61:B8:B1:73
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 01974A7B5DFDB97D256EEADB2D5F4CD36BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 1134
Signing time: Sat 07 Jun 2025 13:01:28 +0000
Manifest this update: Sat 07 Jun 2025 13:01:28 +0000
Manifest next update: Sun 08 Jun 2025 13:01:28 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: 2lDMti5u6wSuLnVtFTRqiLrvT62KIZkFIpkW5pkUtEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:5d:fd:b9:7d:25:6e:ea:db:2d:5f:4c:d3:6b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jun 7 13:01:28 2025 GMT
Not After : Jun 8 13:01:28 2025 GMT
Subject: CN=871e0fb78d68b8fc51915bf2a7181e4861b8b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:ce:76:95:cc:8e:d5:92:00:8b:de:6e:03:
a0:87:7e:d4:eb:09:63:42:02:b7:1f:72:09:46:70:
11:19:ff:79:60:b3:dc:bd:91:50:5a:ec:c6:92:71:
26:34:ce:c4:1d:76:bb:45:7a:a9:25:10:2f:f8:8a:
bb:db:3c:b0:79:d9:13:ca:39:26:d6:9c:fb:fa:1f:
2b:da:f8:38:6d:8c:8d:aa:ed:d1:52:03:1c:87:fe:
c8:a9:af:2a:de:ed:6d:86:19:5e:41:13:7b:70:58:
d6:9e:f4:ac:7b:45:73:22:80:33:6d:c0:6b:11:2c:
1a:f2:df:a5:f1:a5:5e:07:d1:c1:12:60:1e:da:dc:
cf:e6:13:b5:a6:a7:38:b4:75:54:99:02:7e:c4:00:
6d:01:88:e1:e1:85:f4:ce:cb:c8:00:2c:a9:7e:97:
6f:60:5b:50:58:ef:ef:41:cb:7b:16:f1:8b:99:ad:
9f:03:86:a1:98:90:2e:92:ab:f0:bc:ca:d0:8b:36:
90:4f:2f:44:43:17:18:08:cc:84:d5:3b:ea:9d:6b:
b2:7d:63:5f:a0:49:9b:3d:2e:d6:c3:9a:71:48:ab:
93:c5:ac:a1:4c:4d:e2:15:ce:aa:30:f9:46:66:b8:
2c:c5:11:7f:27:e3:07:e4:a7:96:30:84:1f:91:43:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:0F:B7:8D:68:B8:FC:51:91:5B:F2:A7:18:1E:48:61:B8:B1:73
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:45:36:e0:84:7c:02:5e:49:00:08:88:49:c0:0a:b8:a6:
57:67:3f:2e:be:9d:81:1a:67:10:13:36:fa:9a:1a:6e:3e:6e:
22:62:86:8d:8f:64:0c:69:3c:8d:16:66:ac:b7:b4:54:df:e2:
45:80:b5:1f:f1:75:04:a4:0e:b9:86:b0:65:70:56:50:50:e8:
03:6c:e7:14:1b:5e:bf:6f:6d:d9:9c:db:0d:60:52:9c:7f:62:
43:f7:12:86:1f:74:91:77:13:61:7c:bc:d2:14:30:0a:9e:75:
49:7f:6d:63:71:3a:d2:d9:6a:4c:9e:5e:70:49:00:81:ad:c9:
7a:65:ca:03:c7:11:aa:30:b2:ff:0f:ca:59:d2:53:96:26:d2:
01:d8:62:02:b9:50:0c:7f:52:b9:2c:9e:40:95:7d:64:1d:2a:
22:a5:5a:40:64:4b:e5:05:b6:bb:3f:7c:f7:03:dc:ed:4b:37:
58:68:6c:32:4a:94:ac:81:f5:c2:74:cc:54:a4:77:5c:08:5e:
b1:3a:1f:80:5f:a9:46:a2:4d:b9:aa:24:97:98:03:4d:99:fb:
a9:f9:a0:16:87:45:7c:d3:6b:a7:cc:08:8f:9f:7c:97:c4:58:
90:e4:7a:6d:86:1d:3b:db:cd:cd:31:60:68:bb:45:9c:e3:24:
44:38:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:33:12 2025 by rpki-client