Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: NOW8qUWbsdHET3hw9o4avjz9maN8GOKPZpEMHw0MJbw=
Subject key identifier: DA:65:16:7C:0C:CA:B8:7D:3A:9C:8B:38:BC:39:8B:DE:FA:15:AA:81
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019A706E44C4F68E3AD9CD4D6922A951A961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0C65
Signing time: Tue 11 Nov 2025 01:01:05 +0000
Manifest this update: Tue 11 Nov 2025 01:01:05 +0000
Manifest next update: Wed 12 Nov 2025 01:01:05 +0000
Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: Mt7VDqgpm5tEC25wmZEHeECWTdXNP7WLzOQC70atmyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:44:c4:f6:8e:3a:d9:cd:4d:69:22:a9:51:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Nov 11 01:01:05 2025 GMT
Not After : Nov 12 01:01:05 2025 GMT
Subject: CN=da65167c0ccab87d3a9c8b38bc398bdefa15aa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:bf:ce:97:6b:a5:a4:88:9f:4e:fe:f9:ef:
ba:85:98:d8:13:4e:97:84:0f:c7:ad:ae:7c:4a:56:
13:9e:28:f8:9e:73:e0:51:51:5c:5b:52:f6:5d:97:
80:09:8e:43:20:3c:64:52:15:ca:bf:1b:65:a5:79:
b4:eb:d5:58:c0:57:b9:ef:05:91:9a:02:9c:82:c4:
3d:8b:f1:e0:63:25:0e:3d:21:4b:f2:15:d3:ec:53:
0f:10:35:9f:e8:50:b4:31:fe:2f:57:70:e1:d4:af:
a8:27:ce:9d:02:22:a6:94:d5:3e:1e:f2:af:a3:7b:
46:c6:c7:e7:29:db:3c:2b:2b:71:20:55:f8:a4:df:
42:e6:27:c9:52:c9:6e:56:ea:89:72:69:61:61:50:
a8:84:8c:24:7e:4e:e2:e1:f6:00:fa:70:c0:d9:fa:
d5:d1:c4:15:ec:e8:c0:e8:a1:94:25:2f:2a:67:b6:
3d:a7:79:ec:f5:9e:74:53:b5:36:70:eb:9e:17:0b:
ca:a3:92:f2:9f:af:90:83:ca:ef:64:fa:f9:ce:da:
5d:02:be:ee:2f:1a:f2:52:6e:33:28:bf:6a:90:3b:
27:5d:e8:93:7e:1c:18:96:e8:8c:28:31:90:6c:8b:
56:3a:22:07:04:1d:7a:a6:ef:e1:34:4c:68:8d:90:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:16:7C:0C:CA:B8:7D:3A:9C:8B:38:BC:39:8B:DE:FA:15:AA:81
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1b:f3:ff:6a:bd:d2:d4:3f:cb:79:f5:b9:d2:49:01:85:89:
d6:8b:a6:66:c8:8a:c8:50:cb:08:4c:7a:b0:51:20:ae:ea:15:
24:64:83:cb:ff:59:93:86:f8:92:f0:44:2c:6d:8b:28:a1:d2:
ea:cf:52:44:1b:bc:65:5f:d2:b3:49:ad:17:41:5c:bb:a3:67:
0c:ee:98:2e:e9:d7:03:13:a0:47:82:8d:d3:5a:9a:de:89:86:
ed:99:77:d3:c2:07:53:09:82:96:30:e9:8b:f8:d5:2a:98:e9:
8c:78:71:54:00:05:04:51:2f:d4:ca:14:71:28:a8:cc:df:4c:
9e:8a:95:74:19:67:fe:64:1d:2d:7e:5a:60:04:c9:4c:5d:14:
52:ce:f3:e8:60:65:2d:4d:ff:09:ac:b0:ff:80:4c:b8:ba:02:
fa:c9:95:ad:29:b7:44:5e:2d:79:a1:d7:78:21:46:b5:d9:2b:
d2:52:e1:3d:66:6a:62:43:d9:2c:a2:ee:9a:d6:b9:89:21:41:
2b:97:f5:f0:08:80:35:b2:77:05:5b:9b:74:f3:0f:3b:0e:2c:
d8:a8:dc:d7:70:12:b2:e5:86:55:d4:5e:9d:3c:c0:e1:92:58:
89:78:98:37:e5:c9:ef:f8:bd:f0:a3:b3:33:5c:87:0b:89:20:
e3:3a:cb:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbkTE9o462c1NaSKpUalhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZmE1NjRjZjk3NTc3YzA3NjMzYmE0ZTY0MGVhNzhjNzZm
YzE3ZGQwHhcNMjUxMTExMDEwMTA1WhcNMjUxMTEyMDEwMTA1WjAzMTEwLwYDVQQD
EyhkYTY1MTY3YzBjY2FiODdkM2E5YzhiMzhiYzM5OGJkZWZhMTVhYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0G/zpdrpaSIn07++e+6hZjYE06X
hA/Hra58SlYTnij4nnPgUVFcW1L2XZeACY5DIDxkUhXKvxtlpXm069VYwFe57wWR
mgKcgsQ9i/HgYyUOPSFL8hXT7FMPEDWf6FC0Mf4vV3Dh1K+oJ86dAiKmlNU+HvKv
o3tGxsfnKds8KytxIFX4pN9C5ifJUsluVuqJcmlhYVCohIwkfk7i4fYA+nDA2frV
0cQV7OjA6KGUJS8qZ7Y9p3ns9Z50U7U2cOueFwvKo5Lyn6+Qg8rvZPr5ztpdAr7u
LxryUm4zKL9qkDsnXeiTfhwYluiMKDGQbItWOiIHBB16pu/hNExojZDUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNplFnwMyrh9OpyLOLw5i976FaqBMB8GA1UdIwQY
MBaAFIb6Vkz5dXfAdjO6TmQOp4x2/BfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDkt
MDczZDBkMTRkZGRlLzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDktMDczZDBkMTRkZGRl
LzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxvz/2q9
0tQ/y3n1udJJAYWJ1oumZsiKyFDLCEx6sFEgruoVJGSDy/9Zk4b4kvBELG2LKKHS
6s9SRBu8ZV/Ss0mtF0Fcu6NnDO6YLunXAxOgR4KN01qa3omG7Zl308IHUwmCljDp
i/jVKpjpjHhxVAAFBFEv1MoUcSiozN9MnoqVdBln/mQdLX5aYATJTF0UUs7z6GBl
LU3/Cayw/4BMuLoC+smVrSm3RF4teaHXeCFGtdkr0lLhPWZqYkPZLKLumta5iSFB
K5f18AiANbJ3BVubdPMPOw4s2Kjc13ASsuWGVdRenTzA4ZJYiXiYN+XJ7/i98KOz
M1yHC4kg4zrL3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client