Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: lBLn7ye8VwKb2OPZdbAqx38d20+Btli+pdlZVMsKark=
Subject key identifier: 80:8E:48:EF:F0:DF:60:DB:B6:28:C2:2E:F5:88:02:17:64:0E:0A:B0
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 0199326D8FC010C69E84EC8B222591F8314D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 1517
Signing time: Wed 10 Sep 2025 07:01:04 +0000
Manifest this update: Wed 10 Sep 2025 07:01:04 +0000
Manifest next update: Thu 11 Sep 2025 07:01:04 +0000
Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: isuyvt6G49y0tsmtvM7VXjgBJvlhNdz1U8to87iyElw=)
5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:8f:c0:10:c6:9e:84:ec:8b:22:25:91:f8:31:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Sep 10 07:01:04 2025 GMT
Not After : Sep 11 07:01:04 2025 GMT
Subject: CN=808e48eff0df60dbb628c22ef5880217640e0ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:8c:72:0e:8e:f4:fa:9c:61:f3:5a:19:12:
74:c9:93:72:50:56:26:66:ff:c6:1d:1b:26:84:83:
75:ad:28:25:f1:28:b8:54:07:11:b7:e1:2b:5b:17:
e0:6b:1e:c4:06:fb:01:35:0b:38:68:c4:82:27:14:
f8:ef:74:4e:27:bd:48:0e:ac:bb:5b:7c:33:a7:4e:
5c:23:6c:e5:cf:ee:c3:58:93:0f:1f:ba:d6:2d:82:
32:02:89:ce:8f:c5:72:3c:54:4f:bd:02:7c:55:21:
bd:61:b9:4e:58:21:9c:ac:ec:1b:f7:cc:e9:f6:06:
89:10:da:2f:1d:b5:cc:ba:00:e0:65:5c:ab:4b:fb:
f0:52:3b:55:96:8b:37:b3:41:98:94:1a:db:d6:f4:
cf:41:d3:a6:ba:5b:2d:9c:30:2a:bb:cc:80:79:66:
63:c3:69:2e:9e:90:41:5d:b8:e0:80:e1:41:d0:da:
a1:b6:ae:bf:10:06:78:f6:5e:c4:f2:7b:a5:9a:f3:
f4:82:d5:d0:0f:86:44:2e:96:76:ae:d8:29:72:24:
63:5e:2c:75:87:fe:99:cd:45:5b:93:e4:06:33:0e:
da:96:0b:24:0a:81:82:3b:0d:9a:5a:d1:b0:4e:a3:
43:9a:ad:ed:35:fd:70:ac:f8:b3:5e:3d:5d:aa:e6:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:48:EF:F0:DF:60:DB:B6:28:C2:2E:F5:88:02:17:64:0E:0A:B0
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:89:44:f4:4d:6f:c7:38:d5:ce:c6:96:a5:23:be:b2:bd:
f2:1b:c8:ad:7a:65:63:75:c9:f7:c3:4d:ff:4f:da:1b:d8:2b:
f5:cd:c4:70:f1:85:4e:14:6d:93:81:db:01:ce:e0:f4:70:10:
ed:fc:8b:e3:e5:c9:14:03:65:a7:b8:49:00:df:62:e0:93:f5:
42:81:94:4f:6f:e8:11:38:ff:4b:83:c0:51:39:f1:d2:8b:42:
26:d1:8a:8a:03:af:b1:62:c8:5e:be:62:90:24:70:e2:83:bf:
3f:e5:65:cc:ce:58:7a:f5:f3:d9:e8:83:9e:82:d0:d8:f8:c0:
d0:fd:de:5e:26:64:cf:15:8b:b2:95:8e:a3:cc:88:cb:63:f3:
f7:be:d2:d4:ae:fd:83:b1:95:94:f3:4e:c9:85:57:84:3b:4d:
f9:b9:a0:c3:dc:71:68:2f:33:31:68:bd:72:d3:79:ee:3e:0f:
5b:14:6f:20:a7:fe:23:84:01:dc:16:1f:01:96:45:70:97:48:
6b:ba:54:0d:ee:cf:7a:53:08:d1:54:63:8d:e6:9d:19:ae:53:
07:5b:7d:55:7c:c4:c4:62:62:c3:3b:9f:20:8c:ba:c4:4e:d3:
89:fe:1b:b8:c6:01:9b:71:bc:9a:41:32:51:d0:71:25:5f:ec:
af:8c:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:36:27 2025 by rpki-client