Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: rMPBP52rKLusJckZ0VNp1VcbPvz66RfxVoDgtOXvvfg=
Subject key identifier: B3:43:96:12:B8:84:37:7D:9D:46:F0:CA:05:65:C7:7B:AA:54:9E:5E
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019889C551719B6EDB5376AD1ED171E59215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0B69
Signing time: Fri 08 Aug 2025 13:01:06 +0000
Manifest this update: Fri 08 Aug 2025 13:01:06 +0000
Manifest next update: Sat 09 Aug 2025 13:01:06 +0000
Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: 4A04AR0u7d8W4z8YONDBzTebzLdcUfn3lvGxXenB3N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:51:71:9b:6e:db:53:76:ad:1e:d1:71:e5:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Aug 8 13:01:06 2025 GMT
Not After : Aug 9 13:01:06 2025 GMT
Subject: CN=b3439612b884377d9d46f0ca0565c77baa549e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:dd:de:a1:4c:7a:94:3a:df:10:94:77:d8:
84:46:50:9d:8d:ee:d5:d1:31:d8:1f:2a:09:de:be:
13:7c:77:11:21:19:37:5e:98:ab:ae:99:40:bf:a1:
04:1b:33:2f:b5:d7:12:bb:7f:4e:9e:b0:e1:da:fe:
a8:6b:16:10:c8:61:a9:b0:2c:ad:81:35:09:94:61:
80:f5:74:5d:de:cc:65:d6:2e:61:7c:51:2c:2c:2e:
57:eb:f7:c1:3c:c1:f5:0e:41:8e:8e:33:7a:7a:e3:
a7:2d:ef:d9:e9:7b:9d:8e:88:66:94:4f:fc:3c:35:
98:92:40:22:fc:88:2e:54:23:9c:90:81:29:2c:34:
75:9e:f6:1d:f8:30:f4:af:42:23:37:ee:34:9f:18:
37:68:11:af:e9:11:8a:63:1d:f5:dc:9e:0f:b3:b1:
0d:c4:79:29:03:64:c6:da:00:99:cc:71:96:ed:81:
a1:91:fa:8e:e5:c6:b9:b6:74:39:f8:2e:e6:19:79:
7a:57:2d:5b:9e:1f:dc:87:d2:c7:48:99:a3:a5:80:
5c:36:33:38:5c:f9:80:f5:3b:27:95:3f:b2:10:6f:
69:ec:2f:c7:bf:bb:59:03:3d:75:ca:43:84:12:18:
be:38:19:06:f1:e0:de:f8:b1:af:65:52:dc:0e:92:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:96:12:B8:84:37:7D:9D:46:F0:CA:05:65:C7:7B:AA:54:9E:5E
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3c:88:64:ab:9f:37:b0:69:33:a7:68:e3:4e:5a:03:7c:44:
d2:70:e9:69:9b:a0:ae:53:f8:6a:56:3d:b5:ae:c2:c7:9f:1a:
a2:7d:fe:0a:31:85:9a:7b:ce:26:64:13:e8:c9:6c:ad:22:01:
6b:e8:11:23:fe:91:df:4c:84:0f:1b:bd:54:73:44:13:00:f2:
0a:aa:e4:de:c8:b2:00:54:08:04:e7:1e:e8:07:c4:3c:d9:00:
f0:5e:55:eb:b2:c1:ce:fb:01:39:1a:f8:f9:81:f9:56:25:43:
13:70:b5:66:6e:4e:9a:89:68:2e:72:34:b3:4e:a1:08:c3:91:
a3:e1:88:8d:60:1d:a2:f2:bd:5e:e1:01:8b:84:44:e2:7f:51:
cd:30:9b:b8:a3:3f:43:34:81:31:1f:3b:df:af:58:58:8c:66:
ef:91:78:79:2d:f6:22:26:d4:eb:97:22:da:e1:09:e1:ce:1c:
28:43:33:14:28:cb:a0:99:0a:c2:19:87:0b:88:1a:00:ba:e1:
30:51:7c:06:4a:3a:78:77:ba:ba:07:fc:cc:9e:bb:5d:0a:8e:
5f:2d:e6:eb:fc:fd:06:d0:91:50:e8:b1:cc:1d:a8:9f:fc:a3:
43:d8:e3:66:64:95:3f:af:b4:74:6f:38:63:2c:10:6b:14:a7:
ea:0b:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:15 2025 by rpki-client