Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: YmfrCDFkEWDukPV/qGMTKeYsAuo7hqBmQ2rhsTjo9mA=
Subject key identifier: 6A:A0:37:01:2A:AB:15:53:37:EE:CA:AB:D6:9F:A9:BE:C2:E3:CC:58
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 01976D3DDAAA5AE825ADF02A938899F49349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 1146
Signing time: Sat 14 Jun 2025 07:00:59 +0000
Manifest this update: Sat 14 Jun 2025 07:00:59 +0000
Manifest next update: Sun 15 Jun 2025 07:00:59 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: YrfqZ89rYqJCJTA67puaQcv2iqFwLBeqny5JpY1RUZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:da:aa:5a:e8:25:ad:f0:2a:93:88:99:f4:93:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jun 14 07:00:59 2025 GMT
Not After : Jun 15 07:00:59 2025 GMT
Subject: CN=6aa037012aab155337eecaabd69fa9bec2e3cc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:85:15:74:4b:32:68:26:6d:e9:19:e0:45:
c3:de:9a:3a:cb:e0:5e:49:95:71:90:f5:c3:92:2f:
ef:60:24:4f:4b:c2:b5:a7:d0:7b:62:f0:a3:90:52:
4a:06:7c:26:7e:9c:19:3a:8d:f6:5c:53:9e:6e:35:
c8:c2:38:88:e3:e3:b4:7c:fd:cb:0c:1b:a4:60:da:
26:93:45:fd:52:6b:2c:33:05:2b:a2:bc:86:70:b3:
2c:de:a2:d0:04:9b:d2:38:21:2b:4f:00:03:ba:bb:
09:af:1d:27:6c:f7:6c:42:a8:02:7b:ba:07:18:4b:
c9:b6:7d:77:48:a1:a1:13:ed:8c:10:3e:66:04:f9:
07:c7:d1:89:7b:66:82:b7:30:c4:d3:15:12:b4:39:
bc:b2:cd:ae:39:f4:84:c0:b0:af:4d:d0:e9:e7:e5:
95:6a:5a:c1:93:dd:21:26:1d:2c:b0:25:82:5d:fb:
c6:69:fa:eb:7b:71:ce:c5:94:18:84:4e:ae:31:e4:
fd:df:05:ae:71:12:8f:03:01:30:ab:78:b4:43:e2:
10:fa:d8:fe:70:ca:80:ee:ac:73:03:d9:50:cd:c6:
2e:7b:34:ea:d7:0d:50:d6:0a:89:ff:44:7b:62:94:
42:11:47:19:76:89:af:d9:81:07:b5:a3:6a:ec:b6:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A0:37:01:2A:AB:15:53:37:EE:CA:AB:D6:9F:A9:BE:C2:E3:CC:58
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4d:40:2d:48:78:6c:9d:c8:a9:b2:e1:aa:12:b4:23:0a:e1:
0e:e0:0d:4c:2e:a0:7c:2c:39:fd:01:c6:a1:cc:fd:bb:84:6e:
00:2f:d0:c3:d3:48:06:b7:79:b3:ce:c7:0a:78:f3:cd:ea:e0:
a9:04:92:f0:c4:c6:d7:0f:25:44:3a:60:4b:e6:2a:ec:0e:5c:
b2:2e:42:1b:d6:3d:90:92:8b:31:dc:83:66:67:30:89:4d:dc:
c1:f6:93:9f:39:e4:18:7c:98:92:06:6a:59:75:4b:d9:34:b1:
4e:03:c5:ca:b5:70:b5:4e:b7:a8:2b:1f:3e:61:7f:36:14:da:
48:66:65:de:0d:e8:f8:0a:51:2b:e6:1f:aa:72:d2:f1:5f:f0:
df:97:8f:54:40:1a:3c:1b:2a:01:a5:0f:4f:11:eb:3b:59:a1:
0a:8e:64:8a:da:84:2b:b5:75:ff:94:7a:46:49:b7:65:78:b4:
09:c9:a6:aa:89:f8:c3:e7:e4:ab:85:21:00:cf:3e:47:e3:b4:
ff:e0:81:18:d3:42:f0:76:c4:95:89:f8:5d:2d:18:af:3a:5f:
bf:df:34:fb:8c:91:6d:32:aa:6b:29:3d:bd:d1:c2:e0:82:99:
f5:6f:b3:87:25:09:f2:5c:78:9d:e7:d2:85:75:59:5e:92:68:
b1:bd:72:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPdqqWuglrfAqk4iZ9JNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl
NGJiNTIwHhcNMjUwNjE0MDcwMDU5WhcNMjUwNjE1MDcwMDU5WjAzMTEwLwYDVQQD
Eyg2YWEwMzcwMTJhYWIxNTUzMzdlZWNhYWJkNjlmYTliZWMyZTNjYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk2FFXRLMmgmbekZ4EXD3po6y+Be
SZVxkPXDki/vYCRPS8K1p9B7YvCjkFJKBnwmfpwZOo32XFOebjXIwjiI4+O0fP3L
DBukYNomk0X9UmssMwUroryGcLMs3qLQBJvSOCErTwADursJrx0nbPdsQqgCe7oH
GEvJtn13SKGhE+2MED5mBPkHx9GJe2aCtzDE0xUStDm8ss2uOfSEwLCvTdDp5+WV
alrBk90hJh0ssCWCXfvGafrre3HOxZQYhE6uMeT93wWucRKPAwEwq3i0Q+IQ+tj+
cMqA7qxzA9lQzcYuezTq1w1Q1gqJ/0R7YpRCEUcZdomv2YEHtaNq7LZgkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqgNwEqqxVTN+7Kq9afqb7C48xYMB8GA1UdIwQY
MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt
OWFkZTM5NmY3YzRjLzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj
LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd01ALUh4
bJ3IqbLhqhK0IwrhDuANTC6gfCw5/QHGocz9u4RuAC/Qw9NIBrd5s87HCnjzzerg
qQSS8MTG1w8lRDpgS+Yq7A5csi5CG9Y9kJKLMdyDZmcwiU3cwfaTnznkGHyYkgZq
WXVL2TSxTgPFyrVwtU63qCsfPmF/NhTaSGZl3g3o+ApRK+YfqnLS8V/w35ePVEAa
PBsqAaUPTxHrO1mhCo5kitqEK7V1/5R6Rkm3ZXi0Ccmmqon4w+fkq4UhAM8+R+O0
/+CBGNNC8HbElYn4XS0Yrzpfv980+4yRbTKqayk9vdHC4IKZ9W+zhyUJ8lx4nefS
hXVZXpJosb1ytA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:58 2025 by rpki-client