Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: CvyWWoLwXCy344Nt6XMoP2zc4J6b585lu15zMSiBRaE=
Subject key identifier: FB:DC:70:1C:7A:6A:92:92:A7:18:B5:6A:92:27:EF:63:D6:EA:64:3E
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 01976BF4473B14AF6DFB8DE7051096D90839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0AD5
Signing time: Sat 14 Jun 2025 01:01:00 +0000
Manifest this update: Sat 14 Jun 2025 01:01:00 +0000
Manifest next update: Sun 15 Jun 2025 01:01:00 +0000
Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: FFFz+ix/XrXEo0dz8GpOaU4iNBUjqyfaIiJTI205QhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:47:3b:14:af:6d:fb:8d:e7:05:10:96:d9:08:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Jun 14 01:01:00 2025 GMT
Not After : Jun 15 01:01:00 2025 GMT
Subject: CN=fbdc701c7a6a9292a718b56a9227ef63d6ea643e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:32:49:7f:88:e3:41:75:2d:28:cf:b0:2c:
b8:29:a1:30:97:7c:ab:37:6b:1a:73:f5:03:ee:e6:
9c:d7:2c:19:56:ef:1e:24:65:87:43:d5:53:16:f1:
b2:11:0d:14:11:f7:bc:cb:59:a2:49:9d:1b:89:27:
fc:6d:07:9d:98:d6:b7:ef:aa:ba:3b:aa:34:04:3a:
3c:92:4b:d1:c9:1f:c9:fb:fe:86:b9:80:16:f8:17:
10:8f:92:1c:3c:47:2d:94:ca:1c:60:b5:ae:2e:83:
60:42:a4:fe:56:c5:1e:fa:db:06:49:2c:30:0e:d1:
6a:73:88:67:9f:19:46:08:b4:91:5c:1b:1a:04:85:
23:2a:66:29:b1:6c:17:95:cb:0c:d1:32:ec:53:43:
f5:6f:54:08:a8:c8:5a:5e:5d:78:d4:f0:db:23:99:
3b:38:22:e8:31:34:6e:ba:ee:c0:24:11:fe:53:4f:
94:c3:46:41:2f:26:23:77:5d:57:0c:b5:80:06:97:
08:50:90:4b:27:e8:ed:36:97:61:cb:b0:27:8f:28:
bb:c7:93:77:f7:7b:2c:58:e4:7d:3b:03:99:ea:d8:
50:de:80:d1:2b:88:87:69:33:e6:4e:bc:06:f9:59:
2f:e9:d7:42:bf:8b:3a:c4:66:fb:61:a1:b7:96:50:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DC:70:1C:7A:6A:92:92:A7:18:B5:6A:92:27:EF:63:D6:EA:64:3E
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:58:b2:a9:2e:61:ab:7c:43:b5:49:05:42:c7:fe:da:8b:17:
9f:5f:44:fe:80:dc:b8:20:6c:dd:1f:74:96:d4:47:8f:c4:46:
7a:1c:6f:38:99:8a:6f:48:34:88:dd:0c:8d:1f:cb:e2:a7:4e:
af:69:1d:5f:0e:fb:c9:79:58:e3:a9:5b:a3:bb:d2:09:17:f9:
92:84:0b:45:28:64:bb:e6:d7:e6:84:c1:c1:77:4e:f2:13:ba:
bb:f3:55:89:cc:a6:08:b3:50:d8:37:37:0c:0a:cb:99:7a:ff:
b2:ef:1c:fc:00:86:31:18:be:b3:46:b6:31:3f:0a:c1:22:58:
9e:15:93:a0:45:c0:61:87:89:23:2c:22:37:fa:24:fa:d9:c2:
2f:dc:08:7b:41:0d:17:03:fc:77:b4:21:44:1c:eb:54:4e:c5:
fb:6b:9b:fd:3e:ac:73:9d:a4:fb:c7:2b:ec:ca:36:5f:e7:30:
f9:6e:ba:36:5a:e7:93:0e:5e:74:f6:9e:4c:b4:67:8c:58:48:
a6:2e:fe:b2:00:63:ed:30:96:69:9f:e4:9f:df:b4:2c:bc:61:
e5:e0:d6:8d:fe:b3:22:1f:61:94:ab:0c:7a:da:15:d1:2d:00:
f9:b4:e4:26:d7:ab:c0:86:58:68:ce:c2:ad:fd:49:8f:3f:2d:
8d:f4:15:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:37:56 2025 by rpki-client