
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: EncXOYLoEg/Aj0H+Hl4Xqd/3AaI0GtvVLasPaeGqXh4=
Subject key identifier: AD:22:ED:2E:30:7F:F2:A2:5E:41:67:A6:F3:E0:8E:00:2B:E8:EB:7F
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 0196D1072AF3015841C00505F300CFB18BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 1265
Signing time: Wed 14 May 2025 23:00:29 +0000
Manifest this update: Wed 14 May 2025 23:00:29 +0000
Manifest next update: Thu 15 May 2025 23:00:29 +0000
Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: kMofiqGJLv4zFXsO7fNaJdoNqexU5RLV+lO56XtGADE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:07:2a:f3:01:58:41:c0:05:05:f3:00:cf:b1:8b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: May 14 23:00:29 2025 GMT
Not After : May 15 23:00:29 2025 GMT
Subject: CN=ad22ed2e307ff2a25e4167a6f3e08e002be8eb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:b1:f9:7e:22:56:54:a6:a2:ae:f2:d7:ed:
f8:9a:c0:a5:87:8b:40:e1:ff:04:08:8c:37:da:af:
8e:ef:e3:9c:1d:60:9a:5c:fa:ff:4d:53:7c:3f:f8:
2f:a6:c2:bc:81:4c:64:d4:22:cf:d5:78:37:2d:8c:
e0:89:87:26:65:b3:49:28:75:e7:ae:b7:23:31:e9:
8b:e3:d3:9b:85:e8:35:38:01:d4:89:77:55:76:72:
5a:c1:ce:e6:21:6f:bd:1c:c5:74:59:6e:bd:d6:cd:
ef:ee:24:ba:ec:09:cf:57:0c:18:83:29:0e:a4:c6:
1b:7f:cd:2f:8c:cf:c1:9c:f1:24:03:8c:9e:0a:7b:
99:f3:9f:4d:3e:dd:2b:48:d9:78:96:11:a0:37:00:
2f:ac:0a:b3:cf:78:97:5d:b4:6e:1b:77:60:c2:dc:
11:c4:2b:93:56:99:82:ab:da:9e:75:3f:e8:20:9e:
20:c5:ed:ff:c6:18:b3:b5:91:7a:fb:b6:f2:9b:e0:
99:44:82:23:7c:52:8b:37:0f:5b:82:79:0d:bf:0f:
c7:5c:19:4d:80:37:64:fe:db:fd:d5:7e:98:86:2d:
cf:07:68:3a:d9:30:32:60:97:50:e7:e3:c7:7e:bc:
d1:8d:5f:7f:b2:67:57:9a:51:24:0d:6c:31:4c:2d:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:ED:2E:30:7F:F2:A2:5E:41:67:A6:F3:E0:8E:00:2B:E8:EB:7F
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6e:79:2f:7a:15:3b:6d:61:8c:69:36:71:4a:b4:86:32:17:
da:a2:a7:01:07:c9:91:7e:75:0d:da:4c:7f:17:bf:5e:70:2f:
ee:7b:0f:ef:2c:00:98:fc:28:d0:0a:f9:ea:af:6d:ea:cb:b3:
9b:69:dd:f2:14:0a:ec:b6:e9:c5:7a:48:fc:20:06:00:48:94:
ed:0e:b0:7e:c0:7d:0e:19:c2:c6:01:d6:38:c9:d2:f2:fc:8a:
ae:e4:af:3e:a4:b3:04:6c:fe:33:26:30:3c:9d:98:c2:66:96:
46:8a:e7:d9:25:8d:ab:aa:7e:c5:a9:90:b0:0d:5b:49:65:d3:
02:70:16:ca:c1:a3:01:09:e7:d8:bc:c6:3d:81:36:06:25:8d:
dc:be:0d:6c:11:1d:f1:a9:6f:c4:6e:5e:a9:a3:65:83:d7:1e:
f2:36:49:6e:ac:c4:4d:d2:fb:40:43:a4:c8:71:f8:2a:5c:23:
3e:03:45:74:de:14:7b:f1:f3:46:f9:ee:ed:eb:d1:14:d7:25:
e8:76:a9:74:c9:67:ed:49:21:46:21:80:3f:00:94:77:d0:af:
97:c1:81:6c:37:c4:4c:6a:14:22:5c:5d:89:d1:17:c3:11:df:
80:24:33:8d:27:5c:11:ae:1a:86:92:a5:6e:f0:e2:9d:69:7a:
c2:4e:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:25:19 2025 by rpki-client