Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: Wx/cJXfbkwKfV5HP0MwVBlH5aTKxyzgcijMiBf90yes=
Subject key identifier: 68:54:C2:48:71:F3:9A:FE:7C:CB:6B:42:CB:C1:62:0D:B0:43:C8:8A
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 01974B1F93D5705C5883A0F97106509D3DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 16:00:49 +0000
Manifest this update: Sat 07 Jun 2025 16:00:49 +0000
Manifest next update: Sun 08 Jun 2025 16:00:49 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: cuxkjQng3wMTLTXHwt1saXkDoWtcM4dtojS6UZ1n/yg=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:93:d5:70:5c:58:83:a0:f9:71:06:50:9d:3d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jun 7 16:00:49 2025 GMT
Not After : Jun 8 16:00:49 2025 GMT
Subject: CN=6854c24871f39afe7ccb6b42cbc1620db043c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:db:c4:a6:65:0a:b0:f5:45:95:f0:14:fc:
4b:28:63:ad:1e:c4:73:62:41:24:d3:8d:ea:ad:8a:
2c:74:06:5c:82:81:39:64:ab:bb:1f:ed:47:ae:dd:
00:7c:a1:92:ce:2a:4e:6c:13:fb:7b:ca:32:4d:1d:
9a:b7:f4:fd:b0:b3:b1:16:a8:f2:14:71:58:89:41:
24:16:36:d9:21:d7:51:9d:56:c0:44:ac:a8:5a:df:
d8:89:4a:9e:26:85:f4:b6:1a:e8:8c:9e:a3:c2:50:
63:26:56:5f:27:f7:a8:73:be:8b:93:dc:cf:ff:b2:
12:03:67:22:b5:e7:76:76:28:1f:d8:0c:0e:34:98:
63:fb:c8:f9:5c:aa:d7:b7:bc:41:bb:a5:63:11:94:
5b:35:9c:1f:bc:2c:e7:3b:d2:bb:7e:ba:46:08:08:
06:f3:71:45:9c:0d:32:c7:ef:c8:80:c7:bb:77:a6:
b7:86:ed:14:12:b9:9e:f9:27:04:7b:eb:c7:fa:2b:
2f:1f:60:50:d6:8b:24:cb:9f:75:be:3c:90:83:46:
9a:46:4b:64:af:d7:52:7f:db:eb:f6:0d:63:d5:55:
c6:f2:42:c2:95:f8:4e:cc:ac:69:f0:b4:c3:34:e5:
f9:56:b3:1f:77:19:11:2e:72:7c:db:b5:51:93:b6:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:C2:48:71:F3:9A:FE:7C:CB:6B:42:CB:C1:62:0D:B0:43:C8:8A
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:79:61:2e:7e:4a:62:f7:a1:eb:b1:9f:e0:61:0a:29:01:
12:19:03:43:cc:67:00:4a:02:51:db:91:3d:b4:ea:e6:ec:4b:
94:0e:e5:1b:7f:b3:b4:dd:0f:7a:99:84:df:7b:6b:ee:45:91:
8a:8f:2b:b2:c7:2b:2b:52:59:52:56:e7:95:a5:c6:69:3e:c6:
b6:2a:e6:f5:98:b4:d8:27:2e:66:f1:0c:63:93:d2:98:b1:79:
05:bf:27:43:2c:8f:f0:1a:1a:e1:a0:7c:ee:a3:bb:e8:02:78:
9f:67:d6:7e:79:43:9a:26:ea:ac:14:46:84:ce:ac:73:ff:e2:
c4:ed:7e:e3:78:e1:e4:22:20:31:a9:87:7a:87:ce:87:4d:34:
ef:94:bd:d8:f5:86:10:03:d5:94:ac:58:7b:e5:bc:df:12:f3:
94:4f:4b:4a:37:be:8a:9c:96:2e:5f:75:67:c0:3f:a3:58:ea:
74:50:7a:93:eb:26:59:67:87:50:8f:2b:98:ed:f7:74:c7:8d:
0d:c8:52:57:49:21:35:c0:9a:03:34:e6:28:34:ef:c5:ab:b3:
d8:23:83:01:63:38:d8:00:a6:55:2e:d8:37:34:cf:98:08:93:
af:ec:f6:af:8a:24:56:04:a9:bc:aa:87:c8:5a:bc:fb:21:44:
7b:89:63:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH5PVcFxYg6D5cQZQnT3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh
MmEwMGEwHhcNMjUwNjA3MTYwMDQ5WhcNMjUwNjA4MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg2ODU0YzI0ODcxZjM5YWZlN2NjYjZiNDJjYmMxNjIwZGIwNDNjODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqnbxKZlCrD1RZXwFPxLKGOtHsRz
YkEk043qrYosdAZcgoE5ZKu7H+1Hrt0AfKGSzipObBP7e8oyTR2at/T9sLOxFqjy
FHFYiUEkFjbZIddRnVbARKyoWt/YiUqeJoX0throjJ6jwlBjJlZfJ/eoc76Lk9zP
/7ISA2cited2digf2AwONJhj+8j5XKrXt7xBu6VjEZRbNZwfvCznO9K7frpGCAgG
83FFnA0yx+/IgMe7d6a3hu0UErme+ScEe+vH+isvH2BQ1osky591vjyQg0aaRktk
r9dSf9vr9g1j1VXG8kLClfhOzKxp8LTDNOX5VrMfdxkRLnJ827VRk7ZhvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhUwkhx85r+fMtrQsvBYg2wQ8iKMB8GA1UdIwQY
MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt
MGI4MDFiZjgwZDUzLzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz
LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBJ5YS5+
SmL3oeuxn+BhCikBEhkDQ8xnAEoCUduRPbTq5uxLlA7lG3+ztN0PepmE33tr7kWR
io8rsscrK1JZUlbnlaXGaT7Gtirm9Zi02CcuZvEMY5PSmLF5Bb8nQyyP8Boa4aB8
7qO76AJ4n2fWfnlDmibqrBRGhM6sc//ixO1+43jh5CIgMamHeofOh00075S92PWG
EAPVlKxYe+W83xLzlE9LSje+ipyWLl91Z8A/o1jqdFB6k+smWWeHUI8rmO33dMeN
DchSV0khNcCaAzTmKDTvxauz2CODAWM42ACmVS7YNzTPmAiTr+z2r4okVgSpvKqH
yFq8+yFEe4ljTg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:54 2025 by rpki-client