Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: XWB7tugsiwu/u/im2aDYrKBaXR8HSQDH+l5VGRrYdQ0=
Subject key identifier: CE:36:48:9A:3A:DE:01:66:4C:F4:C8:3C:E2:1B:2E:9F:08:9F:5F:3E
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 01993501C71580D82A4894DB0371C99ED657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 1232
Signing time: Wed 10 Sep 2025 19:02:12 +0000
Manifest this update: Wed 10 Sep 2025 19:02:12 +0000
Manifest next update: Thu 11 Sep 2025 19:02:12 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: 8rvxd3wITIPqwrfiBRzcyRKTCRzknprLv///WMne3VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:c7:15:80:d8:2a:48:94:db:03:71:c9:9e:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Sep 10 19:02:12 2025 GMT
Not After : Sep 11 19:02:12 2025 GMT
Subject: CN=ce36489a3ade01664cf4c83ce21b2e9f089f5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:66:b8:4c:10:34:03:17:53:3e:8e:94:b6:
13:d7:a1:e4:f8:0f:0a:1b:9d:46:15:c2:7b:e8:b3:
b9:32:60:9b:77:81:0f:17:81:c8:69:81:1e:90:95:
8f:f8:6d:73:03:3f:7d:02:ec:28:49:3b:dd:9c:62:
4b:6c:56:5b:39:9b:0b:0e:ff:d3:be:fd:e0:ae:0c:
ef:8d:9f:29:af:17:41:d4:bc:3f:77:c9:bd:32:db:
68:f0:3e:97:22:41:2b:aa:f3:5f:13:61:05:56:60:
85:40:b0:e6:a1:51:1a:8e:2c:14:29:7f:0e:05:67:
97:ef:58:b5:8e:a3:b8:88:17:bd:c0:82:66:30:23:
d8:75:06:45:52:99:6e:df:10:88:cb:08:7f:3b:72:
99:2b:3f:6f:4b:96:fc:11:97:a3:ac:9e:ec:bc:36:
81:64:7c:00:59:2c:2d:ed:16:fb:cc:3e:68:f7:9c:
5c:cb:dc:94:e1:0b:4a:dd:cb:c7:73:5d:9c:af:47:
e9:1f:13:9e:be:d1:8f:79:d9:26:97:b9:10:b1:27:
03:55:45:6c:29:bd:34:13:be:3a:76:1a:1a:10:2f:
1a:05:02:ac:0c:52:a5:d4:22:1e:d0:13:93:3d:94:
4b:e6:ec:eb:08:73:9e:26:76:8b:9c:a2:73:7d:b4:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:48:9A:3A:DE:01:66:4C:F4:C8:3C:E2:1B:2E:9F:08:9F:5F:3E
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3a:46:8b:85:45:72:35:52:f1:56:ed:4a:06:ad:77:c5:34:
e5:1a:7d:0f:4c:38:8f:55:f0:a0:08:7a:8e:38:9b:4a:a0:49:
76:4a:d2:ff:c6:9e:b5:c8:df:6e:94:ca:fd:d4:89:e0:a0:5d:
03:db:cc:fe:10:0a:0f:53:1a:fa:94:e0:e1:a2:33:cd:d7:15:
e3:ba:b3:73:52:6d:39:73:58:5d:2c:4b:cf:4f:a1:d8:1a:7d:
f2:bd:88:a6:90:b2:a0:5a:82:b1:1d:c1:d3:d3:03:2b:a0:fb:
3c:19:7e:ff:5d:b9:9d:96:4f:ca:d4:40:b9:e0:cb:bd:b4:b3:
9e:24:ca:9f:65:ed:9e:93:66:38:80:61:30:66:87:f3:28:18:
5e:81:14:ce:74:d9:a7:de:55:7a:b3:cb:c5:fe:c9:ba:80:3b:
ce:71:65:91:5b:a5:fb:22:a1:58:00:1f:11:00:2e:f5:d5:ed:
95:dd:da:83:48:be:35:07:4b:c0:09:4f:13:a9:41:4a:eb:01:
40:8f:f7:72:1d:90:f2:ef:0b:95:be:b2:3c:14:78:3a:94:b3:
af:63:d4:72:b5:c4:9a:d5:ce:e0:35:f7:62:c6:94:a7:35:11:
3c:60:2d:af:c7:0e:cd:2d:0c:f0:ee:08:2a:64:58:e0:cb:cb:
12:5e:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:06:00 2025 by rpki-client