Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: djqq7932RvaRMYjno2GS10DBat5c1WGoqxbwb7ObTUY=
Subject key identifier: 79:65:84:9B:CE:9E:C4:53:AE:85:2D:D2:C2:20:86:B5:2B:38:05:1C
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 0198820BC96D9785651E92D79004A798E920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 01:01:07 +0000
Manifest this update: Thu 07 Aug 2025 01:01:07 +0000
Manifest next update: Fri 08 Aug 2025 01:01:07 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: JPbhfLMJxC7QKYMEi83l6kF8+qJXI8j8merNwJxWU0E=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:c9:6d:97:85:65:1e:92:d7:90:04:a7:98:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Aug 7 01:01:07 2025 GMT
Not After : Aug 8 01:01:07 2025 GMT
Subject: CN=7965849bce9ec453ae852dd2c22086b52b38051c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:1a:c5:7a:63:8e:ac:5c:9c:cd:a3:77:2a:
dc:ce:2a:4a:ef:df:66:53:af:f7:73:82:ab:38:ad:
12:b7:3e:48:94:f0:9b:a4:de:4d:4f:f8:92:db:7a:
28:72:75:ac:95:48:ba:9c:72:01:38:94:87:eb:b7:
e8:dc:df:94:d0:c5:b5:70:b0:69:72:52:6a:dc:6c:
00:c2:df:9d:cc:c6:06:7f:53:ea:83:52:4e:d6:14:
71:27:c9:95:fe:3f:c1:89:fe:05:c9:85:65:51:5b:
6c:87:b4:de:41:13:7d:f0:64:d1:09:0c:7a:58:df:
4b:b9:e9:5d:f9:bb:fc:ea:83:d5:2e:00:27:2b:27:
23:12:cb:51:b1:68:56:97:8c:8f:6c:24:0a:01:f4:
bd:a8:95:23:a1:ac:6a:f6:bb:e9:52:90:a8:c2:d0:
39:91:f1:8a:24:ab:e5:d0:a5:7e:a9:17:d8:68:f3:
90:27:48:f1:59:14:fb:83:d0:97:97:1c:03:fc:4f:
bc:cc:f8:8f:a0:69:49:3d:24:fe:c5:8c:79:c9:d4:
d4:ee:39:3a:cd:62:8b:6b:71:c7:1e:f8:2b:a1:07:
ee:54:6f:1b:d7:3d:0b:64:03:ff:a8:f8:54:2e:ef:
f9:1d:50:c6:18:c0:3c:9f:01:33:dd:31:86:72:4e:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:84:9B:CE:9E:C4:53:AE:85:2D:D2:C2:20:86:B5:2B:38:05:1C
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c7:6b:78:1f:b6:66:15:7e:f5:0b:2d:66:ed:02:53:41:30:
e4:95:76:73:ad:93:72:b2:99:b2:1c:4f:15:45:a1:0b:2f:20:
28:13:e9:43:07:48:18:86:78:98:ae:1e:16:c4:87:d9:65:81:
8c:9a:02:b2:29:6b:fd:5e:70:5e:d7:32:29:9f:0d:3f:84:ec:
4c:54:cd:96:14:04:d7:d6:bb:99:fc:63:cb:44:94:86:98:88:
fe:5b:7f:78:2a:3c:8f:ea:65:19:05:92:e0:a6:ad:05:5b:46:
51:55:c0:fc:dc:9a:1f:0f:81:04:ce:64:ac:f4:53:bd:68:3b:
21:75:8a:6a:1f:30:73:71:6d:d2:39:49:c8:05:2d:42:8b:f3:
b7:ff:cc:42:fd:fe:07:ce:9a:63:86:8d:df:2b:2f:1e:c5:06:
31:9b:d6:d2:8f:33:6e:8e:db:44:29:aa:f7:f8:40:7d:52:a9:
d5:86:e3:5b:60:3d:72:da:a9:b8:92:01:81:74:be:a4:17:c8:
c4:4f:84:b8:33:36:c3:45:7c:64:40:a6:bd:e2:6c:66:c3:d6:
63:ec:38:b6:43:38:ad:20:43:47:92:63:a9:01:59:9b:36:68:
46:93:c9:ae:32:03:9a:21:4c:73:71:27:28:e4:fc:1a:ba:00:
19:75:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:30 2025 by rpki-client