Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: pcchTNJ1ZnDBeiYI64FXUo71pHh+xnl8YFxa2rPhQgo=
Subject key identifier: F6:43:B5:19:5C:52:C4:5E:C3:7D:A8:B2:03:FE:1B:55:42:71:BC:24
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 01993501B2EE0C7969AB084E50BDD80109D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 08CA
Signing time: Wed 10 Sep 2025 19:02:07 +0000
Manifest this update: Wed 10 Sep 2025 19:02:07 +0000
Manifest next update: Thu 11 Sep 2025 19:02:07 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: NWKdD0+S4P+3dy5Wp5EnyIkfnIrwJAffG8vZ1KwJ0ps=)
2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:b2:ee:0c:79:69:ab:08:4e:50:bd:d8:01:09:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Sep 10 19:02:07 2025 GMT
Not After : Sep 11 19:02:07 2025 GMT
Subject: CN=f643b5195c52c45ec37da8b203fe1b554271bc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:28:6d:8c:b7:63:46:8b:11:05:36:93:fc:
ea:2c:ff:8f:98:75:15:09:b4:d2:5d:8d:4c:00:85:
2c:7f:8e:ed:b1:09:c2:c4:f9:ff:64:bb:76:05:7a:
6e:ea:96:c1:24:30:6c:31:2f:3a:bd:ab:2f:b0:54:
6f:b5:75:2f:cd:9f:10:ec:cc:d2:58:6e:74:d3:34:
46:0b:18:9a:3c:40:8c:3e:75:c8:56:bc:be:c9:21:
0b:19:12:a6:e3:82:9c:e8:1f:ad:44:cb:a3:a3:29:
49:25:65:b8:80:dc:51:96:18:eb:8d:b7:5b:09:c1:
5f:30:44:a5:a6:64:e8:79:89:b3:5b:96:10:bb:26:
bf:01:62:f9:c9:1f:74:4a:bf:64:31:93:8d:52:5f:
1f:29:c1:5f:07:77:02:59:e0:ae:33:06:2f:a9:5c:
00:5a:1d:dc:cd:22:fe:11:4d:29:42:36:67:49:b6:
96:03:f0:38:91:5b:df:69:da:11:f8:4f:22:96:43:
95:8d:ce:6f:40:34:37:99:cb:88:c8:ff:77:b9:e8:
9f:33:60:2f:ab:f3:5e:38:6f:44:0e:0a:d9:20:d6:
4c:d2:f6:78:b6:89:1c:38:3f:d4:64:6c:4d:e6:81:
ea:f0:05:04:12:33:1a:78:0a:55:66:5c:53:d8:d9:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:43:B5:19:5C:52:C4:5E:C3:7D:A8:B2:03:FE:1B:55:42:71:BC:24
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:93:52:f2:64:7f:52:08:6a:ba:7d:3d:79:83:26:3b:ce:
f0:b5:a1:c0:c4:a2:61:b1:8b:12:67:ae:57:40:5d:49:89:34:
15:74:90:84:66:59:f6:c2:1c:13:cd:7f:c9:c6:95:c5:d7:4f:
fc:65:53:4c:0b:a8:e3:94:0a:11:b0:ba:fa:99:94:6e:10:43:
15:92:6d:c2:f6:4e:f6:98:72:9d:66:ab:ab:bf:8d:6b:56:f9:
8d:d6:c4:bb:b7:58:49:10:d7:84:47:a9:af:30:17:98:25:4d:
c2:92:85:f7:19:25:ee:b8:a2:d0:a2:7a:39:74:d8:a9:26:05:
79:3d:b0:b3:d0:67:11:66:9c:d8:f3:0a:dc:95:e3:15:dc:d9:
54:c9:b4:57:9c:54:6c:43:5c:b1:94:c8:7e:1c:80:91:3d:29:
e2:cb:5c:dc:95:f2:9d:a8:75:4d:b1:74:e2:31:35:8e:59:55:
78:53:3d:43:0f:78:e3:d3:65:f3:14:00:57:8b:7d:fc:61:d5:
9c:1b:80:d5:94:a4:61:c5:fa:23:27:7c:46:1a:2e:5a:ad:cf:
78:13:2e:4e:a9:81:75:d9:cb:e4:89:32:d2:ea:0a:c4:c9:c3:
71:fe:72:58:d5:d0:11:40:3a:30:5b:b9:f5:bf:70:f2:6d:1a:
44:ea:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:16:26 2025 by rpki-client