Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: TU1m2C2Qhwq1LZQEeVj7IGMxHQ3i+8MbNdKaRN/U/ew=
Subject key identifier: B7:24:89:A7:C3:47:BE:AF:2A:4D:A1:70:29:D4:AC:EE:79:58:4B:5D
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019750EA912ACA606666B9E29E29DEED379B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0AC7
Signing time: Sun 08 Jun 2025 19:00:39 +0000
Manifest this update: Sun 08 Jun 2025 19:00:39 +0000
Manifest next update: Mon 09 Jun 2025 19:00:39 +0000
Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: pumOMvmRxNsiOuYjt2MXqgpVH931mbGNz8hkm3zmwWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:91:2a:ca:60:66:66:b9:e2:9e:29:de:ed:37:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Jun 8 19:00:39 2025 GMT
Not After : Jun 9 19:00:39 2025 GMT
Subject: CN=b72489a7c347beaf2a4da17029d4acee79584b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:bf:84:da:bf:59:60:8f:0b:6b:a1:6b:ea:
af:b4:51:a0:dc:9a:4a:8d:ef:cc:4b:45:1c:e4:5b:
4f:c2:6d:89:98:4f:cb:11:4f:9e:9f:38:cd:04:67:
e4:e0:fa:74:56:85:f7:2a:5c:df:ae:6e:12:eb:ab:
eb:50:42:3d:93:d6:43:95:a1:83:fb:3d:7d:79:ce:
a3:fc:7f:c7:e2:c8:6f:09:8f:f6:04:82:63:5c:59:
05:15:bf:2a:90:be:b6:65:86:1d:73:af:af:f4:55:
15:66:e9:13:a0:f4:16:3a:b2:e8:b8:7f:e8:a4:24:
ec:52:55:31:23:5c:89:4d:cb:8c:b0:99:cf:41:ea:
30:a8:fb:ff:23:06:43:91:5d:67:67:b3:85:45:94:
8b:27:60:7a:41:eb:4f:8f:c6:5c:a7:7b:88:63:99:
96:07:b2:26:a2:0f:b7:b7:91:05:6a:3f:5e:fa:a5:
9e:04:1d:72:9c:92:38:aa:f3:24:67:1e:44:98:17:
d8:18:6a:66:70:e1:e2:86:1d:6e:98:bf:0c:15:74:
ba:13:4c:a5:d4:f7:41:13:93:c1:6a:c2:74:9a:1c:
8b:54:b5:20:59:c6:62:26:b7:9a:2f:25:9a:25:64:
65:84:2f:23:0a:0d:80:31:fa:89:a3:fa:8c:10:07:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:24:89:A7:C3:47:BE:AF:2A:4D:A1:70:29:D4:AC:EE:79:58:4B:5D
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7f:0b:c2:ba:a5:6d:3f:a7:da:67:41:1e:f9:a0:a9:77:ee:
fd:7e:b3:66:d6:28:51:71:73:ed:eb:2e:fb:b4:f8:09:27:a2:
cb:f5:a3:52:8c:8b:fa:c7:26:cf:64:fd:f8:a9:4d:ec:ef:c5:
41:ae:32:77:cc:5f:66:47:00:c1:93:27:68:f2:87:b7:7d:bf:
20:d6:4e:a4:91:e1:93:94:2e:1c:e9:22:60:b4:8f:ec:7f:16:
85:0a:73:c5:86:96:db:68:1a:d9:4c:bc:a6:3f:ab:38:51:b7:
e6:26:15:cf:02:cb:c2:8b:3f:ef:67:af:c6:e7:50:0e:ff:49:
42:43:80:60:4f:2f:89:54:af:d3:be:81:24:75:b7:9e:83:12:
d8:72:06:ac:8c:f1:20:e7:23:38:8d:8a:a5:18:26:42:95:24:
fe:4a:0f:ad:93:6a:cf:e1:f5:2f:05:82:5b:68:0d:ec:d9:b6:
4b:09:43:93:53:11:77:f3:5e:6e:d6:e1:17:a4:91:ce:cc:f6:
51:ed:86:fe:7e:b2:2f:f8:5d:e5:5d:b6:2d:2b:72:cb:4b:8b:
1c:f2:c9:cc:b8:ab:b6:42:5d:38:a5:4d:c3:0c:6a:3b:28:b4:
f1:0d:4c:69:ab:81:9e:45:96:01:03:11:b0:c8:36:57:4d:a4:
42:a4:3d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:00 2025 by rpki-client