Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: BHa3pczMeCkbXlr8StcrakLRopqLVkNP3F4AhKbRtoQ=
Subject key identifier: AF:AC:8F:36:33:E2:95:CC:28:07:F9:AB:CC:13:17:BD:BC:2F:13:C1
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 01987D89D8F78CDB344245BEB000071B1878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 086B
Signing time: Wed 06 Aug 2025 04:00:42 +0000
Manifest this update: Wed 06 Aug 2025 04:00:42 +0000
Manifest next update: Thu 07 Aug 2025 04:00:42 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: b64+JNsNpNsJYk2h85RPVgZVIomvCvGRvzoP6Gy4enw=)
2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:d8:f7:8c:db:34:42:45:be:b0:00:07:1b:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Aug 6 04:00:42 2025 GMT
Not After : Aug 7 04:00:42 2025 GMT
Subject: CN=afac8f3633e295cc2807f9abcc1317bdbc2f13c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:43:03:8a:40:4b:18:f3:71:ab:41:4b:ec:
b8:09:ed:0b:c2:a0:ec:9c:f5:2c:30:65:e7:bf:4f:
f2:a5:3e:11:aa:e4:36:2b:cf:cc:5a:03:7c:03:3d:
d6:e1:dc:06:f2:ae:e0:9f:e0:00:79:29:1e:58:a5:
35:ae:e1:0a:78:db:db:8e:d0:32:de:8a:e5:f4:97:
d6:1b:a1:0d:33:bb:74:81:0e:ab:ea:d2:d6:a7:4d:
d0:74:fb:93:31:58:2f:9b:78:02:0f:69:5e:ca:e0:
c2:c5:36:39:59:cd:fc:fe:31:34:c5:a5:21:5b:5d:
70:0e:5f:bb:8f:c4:54:23:09:da:78:b5:37:2a:42:
87:b9:cf:46:9c:93:f5:36:78:09:e8:5b:e9:8c:68:
a4:91:f4:76:fa:36:e2:c9:74:a7:4f:fe:aa:8d:d6:
01:ff:10:66:73:c6:4d:f8:4b:fc:2b:29:67:48:20:
23:56:05:1d:8e:37:f8:5f:37:d5:4d:80:27:5d:e0:
80:61:aa:9e:b0:fe:6e:ec:98:7c:7e:98:71:3a:4b:
05:11:e5:7a:d4:d1:5b:10:9d:e9:ac:35:02:f3:81:
b6:3a:4d:39:64:89:6a:6e:30:74:00:e3:8a:9a:80:
77:34:97:88:e4:5d:45:75:a1:4d:76:30:a2:12:a3:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AC:8F:36:33:E2:95:CC:28:07:F9:AB:CC:13:17:BD:BC:2F:13:C1
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7f:a6:98:c5:3b:91:4a:a9:20:7a:60:5c:55:3d:a7:52:65:
f0:41:d6:fd:f4:08:46:92:00:a5:6b:7e:36:d3:7c:75:0f:f8:
c6:d4:81:98:8a:ae:7d:86:d4:87:26:a4:05:48:f3:d0:34:7e:
17:50:22:05:74:61:d7:a9:b7:a8:28:ff:e8:f3:37:30:34:c3:
8b:60:b6:d0:3d:b5:e1:58:6e:24:2c:33:ec:b9:fe:a7:b6:b3:
4c:f1:1f:be:61:71:09:7a:5e:62:6e:d5:f4:97:42:cd:35:2a:
34:b6:86:b5:4e:04:a9:54:f8:8a:74:01:79:6f:46:e8:54:9e:
f1:19:a7:32:d6:ae:21:a3:f0:21:7d:73:7f:fc:21:81:1e:63:
42:84:bd:93:2f:9a:28:d1:20:f4:30:26:c9:72:36:f4:55:0d:
91:ce:44:37:b3:ee:17:42:30:56:0b:70:7c:29:db:40:f9:ae:
b9:74:7d:75:0b:02:73:3a:c3:75:23:e0:78:54:5f:88:2d:70:
f5:d1:9c:20:6f:6c:65:2f:eb:b1:37:c2:5c:27:ad:fb:6f:0a:
46:d9:32:e5:30:36:6a:75:ea:a6:15:58:38:69:f9:80:f1:07:
01:36:7a:ee:18:63:a6:07:8f:1a:cf:6f:15:f7:a9:56:84:0f:
ab:9e:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:20:27 2025 by rpki-client