Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: jdPGEJURDQQ54I9CPr52inDkDfHbPPSQ+PECdsplpqY=
Subject key identifier: 5B:18:63:B2:8B:25:8B:71:72:87:9E:B1:0C:90:49:B6:2B:77:B2:52
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 01969FE45BD267A55301B589FFF57E72ACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 13C2
Signing time: Mon 05 May 2025 10:01:05 +0000
Manifest this update: Mon 05 May 2025 10:01:05 +0000
Manifest next update: Tue 06 May 2025 10:01:05 +0000
Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: j2hpz0k/WOUHvBNHo2xepeKHkyJq8fkMcnT52Xr5Lak=)
5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:5b:d2:67:a5:53:01:b5:89:ff:f5:7e:72:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: May 5 10:01:05 2025 GMT
Not After : May 6 10:01:05 2025 GMT
Subject: CN=5b1863b28b258b7172879eb10c9049b62b77b252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:03:ff:e0:e2:a1:4d:f0:ca:81:7d:c9:d0:2f:
40:d6:56:07:0a:89:bd:fb:ac:25:8d:a0:6c:e8:ce:
17:4d:9b:ab:45:7b:e9:00:8b:e8:ad:3a:2f:13:e6:
f3:7e:2f:42:2a:d2:04:e2:bf:5a:c9:59:be:ff:c5:
46:b6:da:a0:6c:c6:87:91:05:0c:c6:fa:ef:a9:01:
cd:40:13:72:f5:57:76:11:b8:2f:8a:74:b8:f6:46:
5d:3f:e3:b1:0b:9d:c5:08:a1:2f:9a:92:0a:ee:fe:
eb:88:be:7c:7c:1d:e9:ce:d5:49:3a:d4:bf:b8:e1:
01:96:15:46:80:ad:4d:32:f4:5b:4e:a5:c7:b2:07:
df:a2:dc:65:1a:de:e7:a1:18:a0:10:c8:1b:9d:c5:
4f:c7:3e:e9:46:9a:b7:d8:ae:9f:10:d3:e3:48:f7:
62:82:24:0c:26:11:0b:73:17:ba:ea:43:81:28:8b:
8a:5d:aa:29:bb:16:e6:08:8b:d4:7d:d6:88:5f:1f:
86:48:10:51:5f:0a:69:34:73:82:35:e5:ae:c9:e0:
d4:f8:35:ce:db:52:e4:90:de:c1:4c:74:ae:fc:ae:
12:89:c0:31:72:58:50:e4:88:21:b5:fc:0b:78:da:
d3:9f:b4:fc:1a:7f:a1:f5:0e:ff:57:ce:4e:40:16:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:63:B2:8B:25:8B:71:72:87:9E:B1:0C:90:49:B6:2B:77:B2:52
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:21:0b:23:07:7d:bb:35:34:c6:d2:66:5e:8a:54:12:0f:82:
66:25:f4:78:7f:7c:1c:88:5e:7e:69:70:33:be:3c:0c:20:4c:
d5:33:89:d0:5d:be:86:53:f5:36:27:fb:46:47:98:60:ea:e0:
00:7b:08:b8:42:97:10:e5:17:46:bf:83:7d:14:21:e8:38:5f:
f5:84:d7:a9:e7:25:15:83:8a:28:68:34:f1:38:78:4a:09:78:
5f:a9:fc:da:ff:b5:2b:7c:0e:69:04:2a:9c:30:5b:32:41:1f:
95:5f:22:64:52:b1:46:f1:8a:a0:71:fd:4a:c8:8c:2c:92:a9:
07:1b:0d:a2:bd:d6:ec:2b:4e:51:fc:a4:40:d4:4a:53:a7:cf:
42:ac:56:df:33:2f:cb:0d:d6:27:19:08:23:9b:cc:aa:c7:ff:
69:13:9f:85:15:6b:20:13:36:f4:35:04:30:a4:cd:34:e9:45:
24:8d:28:7d:70:09:b4:6a:51:01:91:f6:c4:9f:18:87:24:26:
58:99:b8:b4:62:62:9c:86:df:e7:d0:cb:26:81:bf:0d:ed:69:
1d:2c:3c:f1:b2:d6:4b:99:de:ff:b5:d0:f2:cb:c0:71:6f:55:
31:51:35:c4:1c:43:0d:fc:88:a9:94:a4:34:8d:d3:5d:90:46:
c0:1d:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:40:47 2025 by rpki-client