Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: Ur3uo9O+7fl3VzRExa/wCS2Xf2CXwk/WDYN91RBDmRg=
Subject key identifier: 07:CB:7A:FB:B9:7D:EA:32:FB:7E:48:12:69:11:62:B6:13:8B:BA:90
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019A21E5247794E4421B2FEEACDCFFDE3C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 1593
Signing time: Sun 26 Oct 2025 19:00:56 +0000
Manifest this update: Sun 26 Oct 2025 19:00:56 +0000
Manifest next update: Mon 27 Oct 2025 19:00:56 +0000
Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: 6qbcpUcEUHiddSCOkk6LKP9Vuc2/QiAk7NumWA6r3SM=)
5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:24:77:94:e4:42:1b:2f:ee:ac:dc:ff:de:3c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Oct 26 19:00:56 2025 GMT
Not After : Oct 27 19:00:56 2025 GMT
Subject: CN=07cb7afbb97dea32fb7e4812691162b6138bba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:90:41:52:d6:eb:84:fa:1a:e9:3c:ce:16:
f9:8d:b2:fd:6d:5c:74:1b:54:17:ad:e0:28:e2:c6:
d7:52:ff:3d:af:79:9b:5c:0d:6a:40:e9:cb:b6:fc:
99:70:91:fb:a9:65:14:a4:8c:64:20:49:a9:42:69:
a2:21:74:de:a7:7f:c0:8e:d3:1e:b8:b7:0e:f4:59:
ff:bf:8c:70:b2:a5:5d:49:44:ce:ce:ed:15:00:d5:
c6:ff:12:21:d8:93:cd:f7:a5:41:6a:df:cb:40:4b:
9e:52:10:25:1e:78:ab:8f:49:e8:2d:68:52:fe:04:
1a:c3:74:38:06:0c:87:96:44:7f:4e:e7:31:21:28:
6c:dc:0c:0b:42:cd:b0:4e:a6:5e:7b:eb:43:79:00:
b4:34:e6:bb:4a:2f:35:29:7b:19:11:9d:2a:ed:4c:
b4:59:77:b6:16:d2:0c:ee:b3:65:d2:17:b2:f8:1f:
b4:48:70:ec:d7:c7:f4:2a:f3:b7:30:59:8b:82:fc:
ab:ff:0b:0a:31:1b:97:00:12:3c:37:70:6b:f3:56:
29:41:7a:31:d7:8a:66:17:9b:ef:f1:ff:f7:33:01:
1e:02:6a:c9:a5:15:b0:13:72:5f:17:90:a4:60:31:
30:d9:81:ba:b8:bd:b4:45:f0:69:35:3e:72:48:5b:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CB:7A:FB:B9:7D:EA:32:FB:7E:48:12:69:11:62:B6:13:8B:BA:90
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:ff:9a:e3:21:40:6e:52:31:d7:17:0d:1e:80:5e:22:c9:
40:ba:1c:dc:7b:b4:4d:9c:b1:23:0e:fb:ab:d4:3d:4c:5d:8d:
39:47:96:96:ce:60:c0:15:71:86:4f:43:73:eb:6e:cd:0d:2a:
ce:5c:fd:71:ec:b4:f1:35:b0:b6:89:a2:e0:98:78:e4:2f:f1:
a2:07:83:ec:37:93:49:fb:78:d3:05:68:95:ab:c9:8f:cf:2e:
29:4b:eb:a2:b4:90:d6:87:c3:2f:94:cb:a4:2c:26:5d:8b:ab:
bf:af:83:89:4a:ac:82:ca:42:45:5d:40:c2:cc:d1:a5:85:10:
07:bc:76:b4:bd:fe:38:45:ab:e0:89:6e:3b:66:cb:20:a1:f5:
b6:c8:08:33:79:66:bd:76:dc:db:08:ba:37:a2:d0:d5:35:4b:
c3:00:75:bf:ec:1d:ec:b0:54:64:96:97:9e:e5:26:e1:ff:44:
e8:ca:4e:1c:de:f0:a1:39:64:2d:bb:70:29:23:a0:5b:5a:6a:
3b:bf:b4:54:2e:23:6d:9f:43:3d:d2:41:44:9f:07:41:cd:a7:
95:82:b0:c8:c6:b4:70:bd:2f:30:56:30:5a:62:44:6e:8e:11:
d7:09:74:fb:77:a7:0c:cd:59:ac:5a:13:86:c7:ae:15:95:95:
bf:82:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:54:49 2025 by rpki-client