Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: zlLMdO0k/ymSQN0mbbWOPRWvPb3/fOQqzLUiXRJ/eHw=
Subject key identifier: 1F:57:A0:48:30:78:AD:F2:1D:28:25:04:37:09:A3:B3:11:1D:8F:5C
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019950AE66AAB5685880A42FE682F139FCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 168C
Signing time: Tue 16 Sep 2025 04:00:30 +0000
Manifest this update: Tue 16 Sep 2025 04:00:30 +0000
Manifest next update: Wed 17 Sep 2025 04:00:30 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: fNi0+jxo9aGDugR403MWJxK49dEn7CwG1Lj4tm82ZUQ=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:ae:66:aa:b5:68:58:80:a4:2f:e6:82:f1:39:fc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Sep 16 04:00:30 2025 GMT
Not After : Sep 17 04:00:30 2025 GMT
Subject: CN=1f57a0483078adf21d2825043709a3b3111d8f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:76:11:a0:5b:3c:f0:e6:90:fb:05:45:39:
06:bf:6e:70:ad:08:85:4b:1b:9c:ac:68:9f:00:09:
93:71:d5:fe:c7:c6:39:68:7f:0c:6f:50:a1:8e:64:
77:40:fb:3e:e2:d4:6a:32:32:ab:fa:51:23:ba:ac:
dd:8f:4d:f5:a6:c4:41:de:d5:d3:09:92:d9:ac:fe:
0e:93:bb:73:6a:a2:fe:20:d0:c0:8b:6c:f1:13:e5:
81:cc:a3:49:7c:cd:9c:41:a8:ce:34:24:68:c0:1e:
4f:53:e7:42:04:b9:f3:39:68:71:7f:e7:c1:89:8f:
bc:16:8a:02:7f:81:c3:a7:b9:4e:c6:33:89:21:36:
d9:dc:73:37:92:d6:8e:bf:76:d3:83:0c:f2:6e:bd:
7f:d8:05:d8:e0:86:c1:0e:2c:a1:2f:d7:ba:cf:12:
b1:0e:86:ff:e6:87:40:07:93:b8:dd:1c:ea:e9:93:
88:8b:92:a0:3d:ef:20:bb:96:b8:91:2f:6a:01:01:
be:21:8c:0b:0c:ea:86:68:13:43:8d:5b:d2:10:9e:
ec:c8:5e:d1:e7:68:55:ee:24:0c:f0:54:11:69:fe:
74:78:d0:c4:76:da:7b:15:f8:a3:aa:03:88:82:ad:
08:04:fe:0a:06:ff:c3:5e:8b:48:c3:e0:04:38:b6:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:A0:48:30:78:AD:F2:1D:28:25:04:37:09:A3:B3:11:1D:8F:5C
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2f:1b:4a:7d:a3:77:c0:e7:02:2e:60:87:c9:08:38:4b:a8:
17:bb:c1:b1:21:0e:ce:cf:e3:0a:66:57:b5:ba:b2:0c:91:32:
d1:aa:ec:b4:aa:fa:88:98:17:e7:4d:45:19:9e:72:0c:5b:db:
38:be:1d:ee:19:28:77:0c:0c:82:73:3a:77:15:31:74:d8:a1:
95:af:70:b6:3a:2e:c0:04:ed:5b:ec:e8:2c:c1:d1:1f:66:78:
a1:11:5e:c0:89:48:e1:6f:b6:54:11:57:60:12:c7:78:1d:c4:
38:0f:ec:50:00:e9:82:1a:5d:9d:c8:f1:03:0c:86:f0:b3:e2:
24:f8:70:c9:46:62:b7:e4:c6:30:0e:79:83:18:33:a2:82:ef:
31:12:7a:83:1d:40:fb:28:64:7f:72:78:eb:3e:85:8d:6e:98:
37:9a:ad:ac:01:a4:83:3b:bb:ca:5c:f2:7e:3e:54:97:49:0f:
c6:7e:ba:af:fd:4c:8d:34:10:d3:cb:34:5d:fa:c4:e3:2f:6e:
8e:0d:78:8c:ad:13:00:95:2f:6a:1d:db:e6:83:b1:74:0e:d9:
e4:13:76:ae:01:0d:1b:9c:d8:b1:ab:d8:9a:d9:ad:20:57:61:
da:df:74:42:bb:f1:2d:72:6d:ac:30:db:45:2b:97:a0:12:1c:
c3:65:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:50:46 2025 by rpki-client