Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: tGm55NP1tZ7rF0sk2j2wLqKTxMXs4xC56fz38ANhyP8=
Subject key identifier: F4:27:D7:B5:0D:87:B6:6A:E7:7F:75:EB:28:71:40:91:58:35:97:9C
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 0198D7A8E2C02A2AD05D7FBC1E9138459D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 14E8
Signing time: Sat 23 Aug 2025 16:00:26 +0000
Manifest this update: Sat 23 Aug 2025 16:00:26 +0000
Manifest next update: Sun 24 Aug 2025 16:00:26 +0000
Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: iMol+fkAoRORT0N2yo3KIG+Kw4b31UI/J0+/SMYbLAg=)
5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:e2:c0:2a:2a:d0:5d:7f:bc:1e:91:38:45:9d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Aug 23 16:00:26 2025 GMT
Not After : Aug 24 16:00:26 2025 GMT
Subject: CN=f427d7b50d87b66ae77f75eb287140915835979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:b5:97:42:d6:09:17:06:d1:ca:b0:94:20:
a9:91:7a:f2:a3:14:6f:48:ed:24:ae:99:05:27:23:
78:75:c7:cd:b2:d8:83:2e:ee:95:20:cc:cc:c9:c5:
15:b8:17:72:7a:3c:38:5b:eb:02:48:b0:70:82:15:
1a:89:75:bb:c6:5e:e9:76:e4:1e:a8:76:00:57:77:
47:01:b7:88:7f:27:46:5a:0b:1d:1e:b6:ce:1c:34:
57:8a:7a:1b:d6:04:74:c5:d2:34:51:d9:bc:46:a9:
22:e6:53:0b:2e:24:ab:2c:08:df:e0:3d:84:01:c4:
11:d5:5d:00:78:d5:7a:85:06:2e:c2:34:fe:c5:7d:
b8:50:13:8c:2a:06:b6:b2:49:30:5a:8a:ba:bf:80:
19:de:eb:13:2f:3b:d5:25:21:0d:a2:6a:53:6a:e7:
92:32:c7:07:10:27:10:0c:4d:d7:ae:88:15:e0:b8:
62:ec:1c:23:0a:b6:91:5b:60:19:c0:b0:8d:2c:cb:
2d:bb:67:2a:2a:09:57:5b:27:b7:0f:b2:dd:5b:b8:
40:2f:ce:f0:45:97:3b:eb:a8:f5:ea:ab:1e:cd:62:
8c:a1:ce:9e:6d:1b:57:0f:de:5f:ca:44:9b:86:fd:
c1:87:9c:36:19:c3:bd:fd:0b:9a:b6:f0:90:2c:1c:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:D7:B5:0D:87:B6:6A:E7:7F:75:EB:28:71:40:91:58:35:97:9C
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:13:0c:8c:41:d3:d4:87:6b:af:59:d7:ca:96:70:d0:15:6e:
0d:0e:87:b2:33:7a:f1:14:8a:a9:7c:2b:99:84:53:b0:b7:16:
67:e3:93:18:cb:c0:e6:6f:27:b6:e3:e3:14:ca:bd:a3:a4:48:
9d:7d:24:a1:9b:e4:b6:ce:dd:83:a7:42:ed:3d:8b:e5:0c:05:
e5:f0:ed:fb:a1:94:1a:19:b5:19:5d:d3:4b:79:a6:2f:5f:95:
04:c6:24:85:5c:12:5c:72:bb:46:4e:39:89:e5:8a:6f:5d:61:
40:35:94:90:36:a9:3c:5e:bf:c1:c8:12:3b:90:6c:72:a3:41:
17:37:6b:5c:bf:b4:3c:e2:99:5e:de:f1:97:fb:a4:e5:2a:b2:
b1:29:eb:7a:ab:8e:4f:f0:2c:c9:44:73:f9:f5:c5:74:fa:f6:
b7:42:de:ce:fb:32:27:fe:e7:94:02:e2:4e:51:01:c7:2a:9d:
f8:31:06:64:84:1e:02:d0:1d:8f:4c:a6:b1:c5:19:c7:29:84:
27:96:8b:b3:08:60:ff:08:7e:6c:67:bd:cb:5a:ab:96:18:5b:
7c:86:b5:4e:f6:d9:f1:33:56:72:0b:2e:a2:d8:e8:a6:59:1b:
2a:ec:d7:03:0b:fc:b3:a7:58:a1:0b:28:87:3a:84:18:42:10:
ce:8b:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:12 2025 by rpki-client