Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: w/mI4VbH6cpzigf6KWcfS+44PrS6HDy8RRO5AIrnYc8=
Subject key identifier: BC:DD:73:AF:93:32:FC:0F:A7:DC:41:43:2F:81:00:6C:7E:79:D9:C0
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 0198D7E12E7A166A25F323943B8B3B5DBE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0CC5
Signing time: Sat 23 Aug 2025 17:01:55 +0000
Manifest this update: Sat 23 Aug 2025 17:01:55 +0000
Manifest next update: Sun 24 Aug 2025 17:01:55 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: hfjGi1XMMYIGFNiHZCu0l/MxFrTSzJ+DYkzma7V3kQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:2e:7a:16:6a:25:f3:23:94:3b:8b:3b:5d:be:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Aug 23 17:01:55 2025 GMT
Not After : Aug 24 17:01:55 2025 GMT
Subject: CN=bcdd73af9332fc0fa7dc41432f81006c7e79d9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:21:fd:ff:0a:30:e8:af:5c:f1:89:bf:03:
49:78:f1:ea:4f:a4:f8:3f:01:9d:43:08:bc:89:b4:
5a:44:cc:7a:0d:c0:80:5f:01:cf:fb:a0:5e:5c:b9:
2b:e9:63:d9:53:76:5a:84:3b:b1:8c:c4:ca:b5:bc:
ea:be:ec:a6:27:42:17:da:89:ea:64:ad:f4:ac:da:
de:25:51:6d:58:7e:88:09:81:94:75:a8:3a:ee:80:
fd:6e:1f:d4:b7:1d:01:40:77:3c:93:4b:c1:15:a1:
9f:9e:e4:66:b5:b2:37:aa:e9:0b:01:cc:ce:62:92:
ec:0a:87:c8:c3:b1:2d:84:58:95:b5:91:5c:cc:e2:
d1:a8:8e:b6:8a:19:17:73:f1:99:51:f8:cf:24:15:
b6:45:26:f7:81:20:a8:81:3c:9e:04:19:53:ef:96:
83:38:9b:2d:77:73:cf:1c:86:e7:f1:ef:fe:82:9a:
e1:c0:30:01:a1:39:03:fc:29:fc:ed:af:38:0d:ea:
51:90:cb:65:20:1a:59:a5:14:34:fc:9d:8f:8e:1c:
4a:de:41:f5:7a:b7:77:11:72:9d:d3:c0:12:41:cb:
ca:5e:f9:06:f3:a6:f4:2f:e9:66:45:99:f0:2d:91:
a6:55:9d:18:d4:85:79:88:28:30:16:12:6d:c5:b6:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:73:AF:93:32:FC:0F:A7:DC:41:43:2F:81:00:6C:7E:79:D9:C0
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c8:74:42:11:85:f2:27:97:50:01:44:01:bb:8a:84:e9:3d:
70:cf:58:3f:9c:40:6d:45:c1:3a:f6:5b:f9:b6:27:ed:ba:66:
aa:69:aa:ed:1e:12:53:84:d7:fc:51:da:fe:7a:bf:ec:bb:f7:
ef:24:17:df:1d:6b:f4:86:4c:70:86:bd:66:db:35:90:ad:03:
63:61:d0:f7:61:cf:86:6e:c8:e7:1c:1c:90:e5:ba:36:96:71:
41:51:ad:da:0c:eb:3f:c6:0c:63:ef:94:70:65:9f:bd:6a:c1:
f8:2b:60:02:6c:9a:52:d1:ef:39:53:07:13:11:c1:07:2e:e9:
d6:ed:f1:1b:1c:cc:f1:f4:a1:8c:6b:6d:99:66:39:ac:df:45:
0d:91:6a:b8:50:bf:4f:4a:b2:fb:21:3f:f3:a7:e3:29:d6:68:
7f:7b:df:14:40:35:29:60:e3:cd:fb:20:83:d1:2a:5d:f8:2e:
83:df:6c:be:1f:6b:de:dd:84:80:e6:f3:ef:b8:42:44:13:15:
64:f6:52:7f:78:c4:24:3b:c8:4e:a6:1d:4d:c1:76:1a:ae:2e:
c7:25:de:54:70:52:51:02:39:0f:bb:45:a4:5a:3a:c0:1d:20:
09:65:59:00:8f:f9:ea:c8:2b:60:1b:73:7d:fc:67:36:fc:1d:
1f:19:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:33:06 2025 by rpki-client