Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: +no6vNA3aPHcLwV59DaM6352CD3TR05VAjdSaHoW5Rc=
Subject key identifier: 84:68:F0:51:6F:9A:00:E8:88:E3:D0:20:A3:08:5F:A6:2B:2D:4C:4A
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 019A4EF5004EFA204DAE396F712307BF7800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 1267
Signing time: Tue 04 Nov 2025 13:01:10 +0000
Manifest this update: Tue 04 Nov 2025 13:01:10 +0000
Manifest next update: Wed 05 Nov 2025 13:01:10 +0000
Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: lchM3eWDPiSnAtz1tJTgss5eCP4Ut92ySczIZVxCKyY=)
2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:00:4e:fa:20:4d:ae:39:6f:71:23:07:bf:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Nov 4 13:01:10 2025 GMT
Not After : Nov 5 13:01:10 2025 GMT
Subject: CN=8468f0516f9a00e888e3d020a3085fa62b2d4c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:2c:1c:97:04:2f:12:a9:66:22:d0:b8:e2:
8b:bf:cd:8a:6b:de:b7:37:25:b0:ba:9a:de:2f:ba:
2f:e4:a9:7d:7d:19:ee:ad:b6:78:79:26:7a:9d:24:
5b:12:b9:70:06:1f:7b:2b:1a:e5:5a:9e:af:d1:ac:
2c:34:26:27:4e:b3:e4:6e:01:3f:09:e1:8c:47:b1:
56:75:55:a1:9f:ff:7d:1d:b2:9d:88:f0:60:7f:44:
5b:72:08:b9:eb:4a:63:82:1f:b8:ae:c5:c6:f4:85:
16:b4:93:9f:41:88:0a:c6:71:25:42:a9:5d:0a:3b:
c5:d0:19:64:93:03:34:04:4e:68:5a:29:6d:db:1b:
c1:07:30:49:e2:8d:f9:3d:ca:fe:8d:aa:7d:5d:bc:
15:c2:3f:20:f5:28:3b:34:f4:bc:60:c5:b7:64:42:
79:7e:3d:02:f1:0f:56:62:f6:97:ff:de:70:59:7b:
38:9d:fc:0c:7d:39:71:87:1a:42:a3:41:27:4a:65:
9b:bc:27:76:73:88:e4:13:4b:00:23:58:f5:b4:fe:
95:1a:e8:9f:76:9b:5f:ad:ab:36:bc:c7:a8:6a:94:
db:53:b1:fc:28:ea:67:86:a0:52:85:5a:d4:21:99:
91:73:88:be:13:99:a3:1f:d0:a3:09:6b:60:4e:9e:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:F0:51:6F:9A:00:E8:88:E3:D0:20:A3:08:5F:A6:2B:2D:4C:4A
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:76:3d:f3:c5:7f:96:46:a9:b6:59:0b:82:63:ef:6e:71:11:
ef:d7:45:65:13:0c:cd:12:32:db:6f:c9:b4:38:49:7f:85:09:
4f:00:91:c4:65:1f:1d:1d:8d:4c:a4:de:ce:39:82:71:12:a7:
82:54:85:04:fc:1b:9c:87:a1:a1:c7:4a:6a:8c:81:b9:09:67:
f2:54:c0:ab:e6:14:85:be:5e:47:c7:74:61:0d:12:e4:11:65:
87:0c:e7:d9:4a:71:ce:4f:49:cc:c8:0f:4b:b0:0b:2d:15:bb:
0d:8e:75:1b:d9:a4:72:4b:71:5e:85:e1:0a:61:51:0e:6e:d7:
52:c5:e1:aa:0b:42:f6:14:b8:59:19:c8:8d:08:f5:8f:ac:09:
85:6a:73:85:f2:42:6d:74:e9:73:34:6d:f8:d3:1d:81:5f:e5:
3e:33:e8:2f:dc:e4:a4:dc:9c:f8:5e:29:12:fa:c6:c3:64:18:
1e:de:67:ba:7b:21:af:f7:15:05:c1:81:75:ea:d8:44:c2:5b:
c0:79:37:1e:54:a2:6a:22:bd:7f:58:ec:c7:6c:0d:e7:9d:66:
a0:3f:3c:74:de:75:f7:00:2c:5c:07:ef:c5:87:b5:ff:86:1e:
9e:ab:c1:76:66:f3:d4:a4:69:54:06:f0:b4:65:9c:27:e3:81:
93:54:53:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9QBO+iBNrjlvcSMHv3gAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3
NDY5NDIwHhcNMjUxMTA0MTMwMTEwWhcNMjUxMTA1MTMwMTEwWjAzMTEwLwYDVQQD
Eyg4NDY4ZjA1MTZmOWEwMGU4ODhlM2QwMjBhMzA4NWZhNjJiMmQ0YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1QsHJcELxKpZiLQuOKLv82Ka963
NyWwupreL7ov5Kl9fRnurbZ4eSZ6nSRbErlwBh97KxrlWp6v0awsNCYnTrPkbgE/
CeGMR7FWdVWhn/99HbKdiPBgf0Rbcgi560pjgh+4rsXG9IUWtJOfQYgKxnElQqld
CjvF0BlkkwM0BE5oWilt2xvBBzBJ4o35Pcr+jap9XbwVwj8g9Sg7NPS8YMW3ZEJ5
fj0C8Q9WYvaX/95wWXs4nfwMfTlxhxpCo0EnSmWbvCd2c4jkE0sAI1j1tP6VGuif
dptfras2vMeoapTbU7H8KOpnhqBShVrUIZmRc4i+E5mjH9CjCWtgTp48cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRo8FFvmgDoiOPQIKMIX6YrLUxKMB8GA1UdIwQY
MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt
YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh
LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3Y988V/
lkaptlkLgmPvbnER79dFZRMMzRIy22/JtDhJf4UJTwCRxGUfHR2NTKTezjmCcRKn
glSFBPwbnIehocdKaoyBuQln8lTAq+YUhb5eR8d0YQ0S5BFlhwzn2Upxzk9JzMgP
S7ALLRW7DY51G9mkcktxXoXhCmFRDm7XUsXhqgtC9hS4WRnIjQj1j6wJhWpzhfJC
bXTpczRt+NMdgV/lPjPoL9zkpNyc+F4pEvrGw2QYHt5nunshr/cVBcGBderYRMJb
wHk3HlSiaiK9f1jsx2wN551moD88dN519wAsXAfvxYe1/4YenqvBdmbz1KRpVAbw
tGWcJ+OBk1RTnA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:51 2025 by rpki-client