Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: 3R9GMQ2KzF5mwkVCT6GVTUvAJJEu3kkSkfoC5//6NJ0=
Subject key identifier: 79:6F:C8:70:D4:71:E0:44:24:A3:3A:B4:CD:5A:3E:71:4D:74:A1:89
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019652A4CD532168FBDE3A7A00CC9E332D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 139A
Signing time: Sun 20 Apr 2025 10:00:54 +0000
Manifest this update: Sun 20 Apr 2025 10:00:54 +0000
Manifest next update: Mon 21 Apr 2025 10:00:54 +0000
Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: zd/sUgLZs2k21whx7NtflWAayzvxnLYgpLNInaSgEQo=)
5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:cd:53:21:68:fb:de:3a:7a:00:cc:9e:33:2d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Apr 20 10:00:54 2025 GMT
Not After : Apr 21 10:00:54 2025 GMT
Subject: CN=796fc870d471e04424a33ab4cd5a3e714d74a189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:bc:a4:c4:bf:47:3a:d7:d3:c7:ec:bd:ac:
4e:9b:4f:a0:9f:be:67:2c:ec:20:a6:9e:2d:de:47:
1f:0f:80:c8:5d:be:93:3a:c2:90:f6:c3:0b:5a:96:
4d:61:bc:5a:8a:b8:75:cd:16:75:db:cc:cb:df:a8:
89:f1:cf:94:3a:2b:e1:ab:38:8a:8b:c3:6d:67:14:
e4:05:b0:3a:f5:15:21:06:a4:ed:05:c1:8b:a8:d4:
94:bd:39:4f:b8:af:81:66:4a:d1:58:17:57:49:70:
50:79:6c:4d:34:00:0d:e7:e4:ed:ae:f0:e5:03:c5:
e7:c5:46:41:c8:7b:79:27:2e:c5:eb:7b:75:e8:01:
8e:31:d3:d7:93:9a:be:0e:74:0e:a8:2a:df:0e:97:
1f:19:17:23:53:dd:45:26:9d:72:ad:47:53:4c:61:
93:07:fa:c7:b6:ce:62:78:ed:cd:7e:5b:28:24:90:
35:d7:83:65:b3:d4:9f:0d:b6:20:e6:21:c2:c7:6a:
86:79:d9:45:8e:1f:f2:84:19:a9:7c:b5:5c:37:43:
a8:7e:11:c7:f7:66:1f:f2:7e:0d:cc:f8:0d:53:27:
0a:4a:13:e5:89:04:38:a4:66:bf:c1:a2:d3:42:b2:
31:77:92:72:c3:ee:24:de:29:c0:3b:3c:5d:86:a7:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6F:C8:70:D4:71:E0:44:24:A3:3A:B4:CD:5A:3E:71:4D:74:A1:89
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:70:ad:fb:ae:57:9a:99:d3:a6:66:18:d2:f9:3f:01:95:
dd:dd:99:34:69:0c:56:ed:1c:99:d0:5c:98:40:41:3d:b1:8e:
9b:cd:16:2d:97:e7:05:1a:60:bb:b1:98:2f:a6:62:3b:dc:b4:
f4:6e:8c:42:8d:94:a7:4b:51:f2:44:4c:a7:f7:71:88:5d:5d:
ab:db:7a:08:76:59:1e:58:6d:01:5f:71:e7:4e:d7:e2:7f:40:
4d:6e:8d:59:d5:71:6e:46:c8:43:8a:1c:14:35:2c:fe:46:91:
7c:f8:8b:53:64:7f:ae:b4:63:23:20:3d:06:bd:b7:f3:05:f6:
4c:07:f5:3a:6e:c2:5b:a2:38:e1:4c:df:0c:e5:32:eb:ff:7a:
e8:0b:6a:64:f2:8a:43:ae:3c:cd:3b:ea:22:a3:af:97:13:b7:
10:cf:9f:9e:e7:0a:ab:c1:fd:27:e7:75:ce:2c:1e:c7:dc:7e:
16:ac:27:e7:d2:26:bb:72:8d:52:cb:26:ea:fd:c8:db:31:26:
05:43:00:84:45:10:ef:e7:95:d2:80:2c:7e:f9:80:0f:de:d6:
2d:29:64:48:71:03:71:9a:a0:f5:e9:c0:d4:4a:91:62:16:8c:
fa:2d:90:b7:d4:8b:f0:23:a5:f9:a0:7f:28:6a:3b:14:6c:5a:
80:34:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:29 2025 by rpki-client