Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: NCiVJTK1J/6z7QX3+oVNJhn3OdZ8YndbCNztaugIRzM=
Subject key identifier: 5B:67:1C:B5:34:5A:64:3F:4F:FC:0D:6C:D5:71:E7:9A:61:94:56:EF
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019848C0D0BF986770267D93568E891A01EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 149E
Signing time: Sat 26 Jul 2025 22:00:52 +0000
Manifest this update: Sat 26 Jul 2025 22:00:52 +0000
Manifest next update: Sun 27 Jul 2025 22:00:52 +0000
Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: +Lo4IZCkDrxhdW6Ol4kQ7wzZ466Y72tYbrMCbTSx/G0=)
5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:d0:bf:98:67:70:26:7d:93:56:8e:89:1a:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jul 26 22:00:52 2025 GMT
Not After : Jul 27 22:00:52 2025 GMT
Subject: CN=5b671cb5345a643f4ffc0d6cd571e79a619456ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:71:8d:bd:67:b3:93:ae:12:0d:10:76:4e:
df:c5:5a:bb:4d:9c:46:d6:08:3b:d6:7c:69:fd:40:
8d:3b:81:b3:5e:5d:9a:48:f5:86:22:52:62:b5:b2:
1b:20:0e:20:e4:c3:5b:19:65:34:66:52:94:48:60:
4e:d6:21:a8:b0:c9:a6:66:c7:36:09:89:97:bb:35:
d6:9d:d9:b3:55:7f:fb:0d:fe:d3:a6:6c:c7:e2:b6:
dc:e0:01:91:09:55:c4:c1:80:4b:02:05:6a:64:6c:
c8:ce:c8:87:cd:53:5c:3e:b9:2a:4c:32:a4:2d:8d:
d7:89:d8:92:ce:c5:f6:8e:dc:18:9d:b5:bd:d7:25:
84:e4:6e:e3:7d:34:cc:6a:6c:cc:49:68:bc:6d:73:
c5:e9:96:aa:1b:a0:f6:73:67:35:ea:34:41:2d:06:
32:dc:a1:46:31:54:e1:b0:16:09:44:53:87:ba:8f:
65:fa:2d:b8:7d:12:38:ad:52:f3:fd:20:84:da:80:
cb:c0:21:40:51:75:e1:1a:9e:6f:64:ab:ea:dc:64:
17:fc:30:b1:34:f9:86:4f:9b:22:c7:ec:b4:d8:1c:
05:dd:a9:b5:b3:3e:48:f5:c8:aa:88:20:bd:4e:50:
02:2e:42:b5:ad:f5:3a:58:ab:cd:f9:60:11:47:3f:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:1C:B5:34:5A:64:3F:4F:FC:0D:6C:D5:71:E7:9A:61:94:56:EF
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fb:6c:d8:fb:a8:28:c9:06:39:0b:bd:52:0e:45:67:2d:64:
87:c6:bc:21:f0:17:36:00:d9:bd:9a:34:30:24:94:89:56:f0:
3e:26:ca:ed:ab:f7:ba:a4:2d:ab:ed:ee:28:c4:ca:5d:0f:66:
b7:4f:5d:0c:8a:c9:bb:08:66:9a:e4:7e:b6:7b:57:03:e9:98:
a1:de:39:96:62:63:ce:21:4a:11:81:e7:12:ca:73:19:83:0b:
83:1c:7d:51:84:75:e8:37:8c:38:86:64:5b:da:c4:ba:4b:ff:
0e:d8:ee:81:20:87:d8:7f:7b:94:12:c7:b8:f5:36:8b:ae:d5:
6d:db:8c:12:bf:9a:57:54:2d:f1:ff:fd:b1:cf:81:af:ae:4b:
5b:0f:4a:66:3a:ad:b1:92:58:22:92:b8:dd:e5:e3:44:f4:48:
b7:35:88:b9:9b:93:25:c9:a6:9a:e2:b4:33:28:65:e8:24:2f:
c5:d1:8e:d5:8d:4c:cf:df:8d:41:d0:e4:c8:eb:dd:50:0a:91:
af:25:90:fb:39:ae:b1:da:a3:f8:a5:97:c2:cc:b9:44:bd:14:
4d:59:9f:5f:2e:08:f5:ff:db:dd:68:64:92:a3:35:c1:a2:4d:
74:41:a7:b4:9d:6f:96:38:a6:85:11:ee:51:2c:84:cb:48:ce:
a7:63:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:13 2025 by rpki-client