Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: D+6nJJBCqc5ICRPv6TixdOqWgaoGqP+Q2zIVo2apRtc=
Subject key identifier: 66:55:38:55:4D:A2:62:85:75:09:07:CA:45:8E:FB:B9:D8:06:CE:11
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 019A50E2B9C46D2A059B1EBC7876C9E162EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 095D
Signing time: Tue 04 Nov 2025 22:00:27 +0000
Manifest this update: Tue 04 Nov 2025 22:00:27 +0000
Manifest next update: Wed 05 Nov 2025 22:00:27 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: dozmQEX6LqZgPVEZU+12LyzdBoynKdV8pR0N481hk3I=)
2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:b9:c4:6d:2a:05:9b:1e:bc:78:76:c9:e1:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Nov 4 22:00:27 2025 GMT
Not After : Nov 5 22:00:27 2025 GMT
Subject: CN=665538554da26285750907ca458efbb9d806ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:54:e3:f8:90:f5:44:5f:0f:5e:a7:3c:75:
9c:4f:5c:21:75:29:b8:37:45:e0:ad:18:d6:e8:ec:
4f:eb:6c:b6:f8:c5:33:51:aa:e3:20:51:c3:66:31:
7b:3f:7e:2e:40:9b:e2:d1:74:4d:0f:d7:ef:7c:8a:
2b:54:0d:05:8e:50:fc:7a:2b:a3:3f:0f:d5:8a:d9:
9f:71:ad:82:61:93:49:f7:9e:b3:a9:5d:5b:ac:a4:
62:6b:ef:2e:42:dc:db:76:6e:7d:b3:ef:c1:f4:cc:
16:dc:27:cf:33:49:df:0f:d6:92:6c:8d:5f:ff:18:
a3:ed:3c:ad:f0:68:7f:55:d4:0f:f0:c0:5d:02:a3:
74:59:a4:fd:48:e0:76:cc:81:2d:22:36:a7:cc:a4:
7d:6d:48:d9:0c:be:55:a4:dd:19:e7:cf:b5:98:48:
24:49:6b:73:1c:cf:48:f7:6e:5c:ac:d6:61:64:cd:
10:e6:40:cd:de:2f:3c:b1:ac:3d:3a:90:21:5b:34:
67:58:5e:62:d7:02:bb:9d:d0:3f:7f:05:92:9c:49:
0b:7e:12:fd:be:ac:88:54:8a:1c:6b:ad:9d:54:da:
96:6a:45:66:23:19:fa:0d:e7:cf:a6:7b:c3:3f:ee:
89:f5:26:20:29:5e:a1:ac:31:6c:46:e1:59:b2:ae:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:38:55:4D:A2:62:85:75:09:07:CA:45:8E:FB:B9:D8:06:CE:11
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:16:98:08:a6:da:1e:f3:1b:57:89:47:11:44:88:dd:30:e2:
aa:c9:43:de:8f:13:a0:e5:e0:13:7f:fa:3b:b3:d2:53:ab:b5:
22:ba:1b:d0:b7:c5:80:4e:60:92:66:a4:f8:13:0a:9f:48:05:
5c:0c:04:86:14:77:5b:62:dd:b3:69:25:4b:b1:ec:66:03:93:
a0:b9:bb:f6:1e:e5:93:c3:5c:55:a0:cb:81:5c:d6:88:5e:b5:
58:18:39:7e:44:67:09:90:40:8e:e3:36:ae:da:3a:d5:59:b1:
99:0d:c6:e9:3c:ef:f6:27:f2:68:dc:19:c6:99:82:69:f9:9f:
87:1a:bc:1b:7e:8f:06:5f:a2:4b:1f:69:f5:58:c2:d9:b1:f7:
81:08:15:46:f9:8a:7d:75:d9:be:bf:ac:14:a8:81:3f:a9:b2:
97:51:de:4c:9c:7f:89:37:84:46:c0:77:8c:82:85:9b:31:eb:
d5:02:8e:97:4f:ea:40:c2:aa:f9:e4:c3:79:c3:fa:6c:39:60:
d3:e5:b5:f3:55:dc:29:4a:47:45:59:44:e4:d2:db:e2:0c:32:
ea:4f:2c:7f:45:e1:16:7d:8e:d0:05:0b:c7:fb:49:cb:af:7b:
38:e1:36:37:08:29:5b:f6:2e:b8:b5:4c:e6:3e:6e:57:14:0a:
1b:fd:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:54:53 2025 by rpki-client