Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: mwgkjB2+jWJUtdTp+a7oh44/T3k91K5qUQJDpblvbqo=
Subject key identifier: EB:CA:BE:E4:DE:EE:A1:8F:DF:C3:DC:90:68:0E:F2:9E:15:6F:7F:27
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 0197B7EAD493817118EE8BEF4B67D02F5619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 1453
Signing time: Sat 28 Jun 2025 19:01:49 +0000
Manifest this update: Sat 28 Jun 2025 19:01:49 +0000
Manifest next update: Sun 29 Jun 2025 19:01:49 +0000
Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: ayvdoRcSHpDxoGM65DLddPaV0Y7oEVMVY1dzhlibN7Q=)
5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d4:93:81:71:18:ee:8b:ef:4b:67:d0:2f:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jun 28 19:01:49 2025 GMT
Not After : Jun 29 19:01:49 2025 GMT
Subject: CN=ebcabee4deeea18fdfc3dc90680ef29e156f7f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:43:37:12:21:14:a0:05:8d:0f:0a:1a:35:
2c:60:83:11:8c:d9:1d:dc:6f:67:30:5e:65:95:9e:
79:e2:5a:15:12:f1:9a:64:8e:43:67:6b:74:2f:63:
d4:9a:89:72:d4:a2:79:e4:05:a4:40:25:29:ff:b1:
4b:b5:3b:4e:02:4f:5e:8d:ba:ac:79:2a:2c:3c:42:
e6:e7:2a:99:d5:b4:dd:12:91:f5:d7:45:6a:ac:c8:
bb:bf:3a:c4:37:60:e2:3e:e6:8a:e5:21:7c:58:47:
88:1c:11:c6:d7:f1:2f:66:1b:19:d5:7e:1b:a5:ee:
c2:f6:4e:dd:1f:fa:72:df:1e:2d:89:7d:35:02:a7:
31:6d:0b:35:6b:4b:4d:09:c2:8b:81:c7:e5:e8:e3:
00:76:5a:7c:0e:c3:6f:d5:4c:3b:4d:6c:57:96:34:
20:a2:f5:0b:ba:fa:fa:b3:03:25:c2:4b:cb:f0:0b:
a1:e8:08:fb:1a:5c:5d:4f:a7:cf:ee:03:c9:f6:06:
69:b5:12:84:96:b4:e5:77:2b:0a:00:b3:88:65:62:
9e:89:3c:b1:cf:8c:69:ee:48:c2:a4:9b:87:92:71:
83:5d:64:1f:82:be:dd:3a:41:61:6d:6d:5a:65:5a:
7f:9f:f5:58:3e:1b:05:cb:fc:a0:f9:2c:71:c7:fd:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CA:BE:E4:DE:EE:A1:8F:DF:C3:DC:90:68:0E:F2:9E:15:6F:7F:27
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d9:73:db:e6:1a:8a:f2:59:88:21:23:6e:c9:c4:b5:35:5a:
9b:90:1b:ee:87:d5:25:a4:94:4f:aa:8b:7f:5c:22:c0:27:f5:
9f:9a:79:40:bc:8a:3d:b3:ee:72:d4:29:73:1d:dd:b8:45:dd:
2d:4c:a9:05:5c:c8:02:15:bb:d6:8b:e3:a8:0f:08:ca:ae:3b:
2f:df:e0:64:f9:8b:04:be:e1:5d:cc:68:8e:01:c7:f8:54:2b:
a7:a1:c0:8a:ef:e4:84:4d:24:13:48:4f:33:e6:6d:90:89:42:
95:17:18:ff:3d:9c:6e:a5:15:2d:f2:71:64:95:8c:d1:75:b7:
99:f6:13:19:f1:65:de:c8:dd:a5:d9:fe:51:65:3f:83:5e:0b:
ba:1c:ce:38:e2:ac:a1:3d:39:32:41:fc:e0:10:99:b2:2b:4a:
7f:89:5d:b1:d1:d0:39:d4:15:2f:a4:3e:44:02:9a:ed:05:97:
1f:d4:97:a4:96:50:da:74:90:f9:61:81:f1:0f:53:fd:85:6d:
7a:ec:97:eb:90:81:20:bb:9b:0d:d0:8b:58:3d:96:90:ca:c6:
89:ef:4d:b9:54:39:d3:5c:03:5c:14:bb:9d:7e:b0:26:f4:c0:
14:5d:c7:3e:7c:fd:ff:d2:df:19:92:c5:65:71:d5:15:37:38:
69:d9:84:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36tSTgXEY7ovvS2fQL1YZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZjRlZTE0ZjZkMzhhN2NmMDcxMjc5ZGZmN2IzOTE3MDJl
MzcxMzUwHhcNMjUwNjI4MTkwMTQ5WhcNMjUwNjI5MTkwMTQ5WjAzMTEwLwYDVQQD
EyhlYmNhYmVlNGRlZWVhMThmZGZjM2RjOTA2ODBlZjI5ZTE1NmY3ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NBDNxIhFKAFjQ8KGjUsYIMRjNkd
3G9nMF5llZ554loVEvGaZI5DZ2t0L2PUmoly1KJ55AWkQCUp/7FLtTtOAk9ejbqs
eSosPELm5yqZ1bTdEpH110VqrMi7vzrEN2DiPuaK5SF8WEeIHBHG1/EvZhsZ1X4b
pe7C9k7dH/py3x4tiX01AqcxbQs1a0tNCcKLgcfl6OMAdlp8DsNv1Uw7TWxXljQg
ovULuvr6swMlwkvL8Auh6Aj7GlxdT6fP7gPJ9gZptRKElrTldysKALOIZWKeiTyx
z4xp7kjCpJuHknGDXWQfgr7dOkFhbW1aZVp/n/VYPhsFy/yg+Sxxx/0scQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvKvuTe7qGP38PckGgO8p4Vb38nMB8GA1UdIwQY
MBaAFIX07hT204p88HEnnf97ORcC43E1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUt
YmZkOTVhOWE2ZTY0LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUtYmZkOTVhOWE2ZTY0
LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNlz2+Ya
ivJZiCEjbsnEtTVam5Ab7ofVJaSUT6qLf1wiwCf1n5p5QLyKPbPuctQpcx3duEXd
LUypBVzIAhW71ovjqA8Iyq47L9/gZPmLBL7hXcxojgHH+FQrp6HAiu/khE0kE0hP
M+ZtkIlClRcY/z2cbqUVLfJxZJWM0XW3mfYTGfFl3sjdpdn+UWU/g14LuhzOOOKs
oT05MkH84BCZsitKf4ldsdHQOdQVL6Q+RAKa7QWXH9SXpJZQ2nSQ+WGB8Q9T/YVt
euyX65CBILubDdCLWD2WkMrGie9NuVQ501wDXBS7nX6wJvTAFF3HPnz9/9LfGZLF
ZXHVFTc4admE+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:22 2025 by rpki-client