Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: E6bNkqEFX8BjkLo1t+5W4h0uKtsrXg9Vi4yIcBon5+c=
Subject key identifier: 8C:E0:C5:84:DA:60:4A:08:97:65:D0:89:25:35:F0:71:55:98:B5:38
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019A4DAB0289584E3DDE9D6F1B50BB6EABCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: kPw3xT7paxu9d5ApgKzo21HKRF0JnQQpqwtVs3NCux8=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:02:89:58:4e:3d:de:9d:6f:1b:50:bb:6e:ab:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=8ce0c584da604a089765d0892535f0715598b538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:2c:72:df:2d:89:64:17:e9:9d:03:7f:dd:
83:1b:bb:57:6e:15:ef:5e:8a:d0:40:65:50:a9:e6:
44:f3:46:24:83:a1:ab:29:38:34:88:27:0c:6d:30:
9d:12:f4:88:0c:b6:03:3c:cb:79:91:52:6c:e0:5a:
cb:19:0d:e3:41:90:8a:4c:22:4c:15:05:94:f3:bf:
6b:da:91:23:d3:78:d2:5f:73:9c:28:fe:be:17:da:
0a:7f:22:b2:57:0d:dd:1c:57:10:48:c7:8b:ef:cd:
a6:84:ce:45:59:1a:1a:bd:c4:d8:d2:b1:7b:e9:be:
46:8b:29:49:16:87:d0:73:5c:d5:f1:a9:2e:77:da:
7e:52:13:19:92:cf:36:44:13:df:a8:de:62:f4:c3:
b7:39:d9:8c:8c:14:81:bd:63:3c:23:9d:45:6c:da:
01:89:3a:ef:5a:49:b1:f5:30:fb:24:9c:03:20:9e:
9e:d1:33:c1:29:6d:3a:69:c5:32:ee:11:7e:f0:3a:
66:7d:64:fa:6a:a8:4c:e5:71:b7:8d:f1:e1:9e:48:
2f:83:26:7f:6a:40:8f:38:84:16:4b:22:36:3a:91:
37:71:93:a8:3a:7f:c7:bc:44:cd:50:a2:b0:46:84:
56:ae:20:46:5d:19:a3:3b:48:32:29:33:4f:5e:10:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:C5:84:DA:60:4A:08:97:65:D0:89:25:35:F0:71:55:98:B5:38
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5b:2e:6b:e0:c1:7f:b5:6f:74:a2:5d:6e:40:16:3d:17:3b:
c9:b2:a7:8d:61:c7:15:6a:15:97:c1:b8:be:ee:b1:d9:20:25:
d0:9a:9d:53:6d:5c:7f:0a:68:83:b2:7d:69:8c:47:2b:e4:3a:
44:e7:b6:f8:a1:51:1c:6d:e8:f6:88:64:b5:77:64:7c:a2:a4:
94:f4:35:2b:e4:b6:a6:29:3e:c3:d9:25:e9:b7:a8:0b:70:ff:
e9:66:84:cb:cf:97:43:b1:7b:a3:45:f0:b9:fa:c8:b6:c9:8f:
5e:43:d6:cb:9a:c9:b0:01:df:1d:9b:9b:9e:67:31:bc:5c:30:
d9:3c:5e:04:6e:60:69:5f:fc:b6:8c:cb:35:ec:b2:92:13:1d:
05:97:62:fd:d0:a7:05:0d:12:a4:a0:85:89:93:03:d1:43:6e:
a2:53:fb:5d:2a:38:9c:9d:0e:9f:a8:a3:c6:49:39:c3:55:f6:
88:7a:15:90:99:8f:74:8c:2b:f0:9e:26:42:c4:47:26:a7:01:
67:a0:7f:70:66:74:23:1a:59:dc:7f:7b:96:27:fe:b2:90:74:
a3:f1:60:2a:a9:22:59:77:ab:65:a8:25:ee:d8:27:32:bf:bb:
6e:9d:d1:95:57:6e:6a:59:8e:b7:34:a2:55:10:f3:b5:39:5c:
bd:85:70:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:56 2025 by rpki-client