Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: GLtjrjgKKrtsrtv9YxxqIS9bFrMJz2Ixdtz8BfMRfCU=
Subject key identifier: A1:6F:13:E1:79:AC:9A:7B:43:5C:5D:69:E5:1E:7E:04:E0:0A:45:69
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 01967FB3E7941F13F4C434E96F538DE3C061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 0763
Signing time: Tue 29 Apr 2025 04:00:18 +0000
Manifest this update: Tue 29 Apr 2025 04:00:18 +0000
Manifest next update: Wed 30 Apr 2025 04:00:18 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: gGbssI22N/A7GTfopYmRj6FVGsXvDzqF7kTxYHjR2HY=)
2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:e7:94:1f:13:f4:c4:34:e9:6f:53:8d:e3:c0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Apr 29 04:00:18 2025 GMT
Not After : Apr 30 04:00:18 2025 GMT
Subject: CN=a16f13e179ac9a7b435c5d69e51e7e04e00a4569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:ee:0e:40:b7:ed:5e:77:62:80:3d:a9:38:
c7:3f:18:a7:28:1c:79:59:f2:71:fe:7b:c2:13:b4:
73:85:95:50:41:7a:dd:68:8c:59:fd:ff:49:9d:7e:
08:5a:aa:73:db:90:39:ca:7b:ff:8a:ae:92:ec:65:
44:11:39:8d:c4:e6:9c:a1:d8:48:88:a7:a6:ee:e0:
ed:62:b3:69:8a:2e:89:ac:77:76:ce:c4:0a:f2:87:
e1:70:e1:dc:80:24:e3:31:68:4c:80:df:9d:f4:65:
43:b0:94:1e:42:ed:7f:6c:9e:09:79:99:1e:7b:b2:
b8:81:90:52:f5:e6:20:4b:dc:67:15:55:9b:11:ec:
90:94:68:d1:f3:73:4b:fb:4f:67:4f:6c:da:8e:90:
ca:92:b3:a2:96:b8:4a:38:a1:8e:24:18:c4:bb:77:
10:3f:1e:d3:13:f5:21:da:09:11:82:c9:55:90:e4:
df:78:82:95:ff:b6:dd:5d:91:8f:d2:a7:0e:01:ff:
ec:bb:7f:94:27:73:ba:24:9c:7f:57:ca:6b:0d:08:
73:52:2a:70:0d:fb:50:07:0b:5c:d5:30:74:a5:7e:
bf:0e:98:db:1b:c1:6e:14:6c:2c:23:9d:d4:04:42:
3c:7e:6f:17:0f:2f:65:4c:15:30:5b:b8:04:b4:90:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6F:13:E1:79:AC:9A:7B:43:5C:5D:69:E5:1E:7E:04:E0:0A:45:69
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:5a:27:9b:bf:03:db:33:bd:03:29:04:8d:df:5b:0e:54:
90:db:d0:47:1a:c9:89:a0:b0:e4:c8:99:b8:a3:8d:d0:23:d4:
50:e7:84:7a:9d:20:32:b4:32:23:ef:c2:66:ad:b4:77:50:71:
b3:3e:5d:59:34:33:d7:87:2b:29:74:66:41:66:46:07:ba:d1:
7e:6e:3d:3d:70:6f:af:bf:69:28:2b:34:da:1d:69:c6:b3:03:
8c:74:70:39:e6:28:d7:82:c9:f7:0c:4c:53:d5:dd:02:06:aa:
3b:12:e7:a5:4e:f2:23:d5:9d:73:4f:3a:51:0e:c6:e4:2c:27:
85:04:6d:d5:66:51:e0:54:39:1a:e0:ed:39:ee:9e:5c:d6:17:
f6:ec:61:38:52:b8:5f:0d:4c:f0:74:be:1d:eb:46:1e:29:4c:
10:4a:47:5f:48:74:a7:cb:65:83:ad:c8:aa:b7:be:b0:33:aa:
4f:fd:08:25:13:b3:fb:dd:92:1d:dc:da:ac:63:2d:b6:68:ff:
cf:54:c1:d5:cf:60:2f:d9:cd:de:90:d0:53:81:b6:cb:3f:f8:
21:fb:b5:e0:f7:48:fd:0e:97:1a:a2:88:a0:a6:ae:ad:96:20:
ad:ce:9d:c1:a7:0d:71:a7:6b:6d:20:f4:b9:57:e5:b9:c8:eb:
f2:f1:67:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:32:03 2025 by rpki-client