Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: mu8N8BwXhB8y0wCyeKIDIVlimVaTr6xGKaxPe06sdtM=
Subject key identifier: AB:FE:8A:8E:A6:EA:6B:B0:7E:DF:81:BC:7E:91:27:1D:BC:9E:9E:5F
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 0196C2DDB04875E10CDE44773FEBCBDA7126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0BB1
Signing time: Mon 12 May 2025 05:00:30 +0000
Manifest this update: Mon 12 May 2025 05:00:30 +0000
Manifest next update: Tue 13 May 2025 05:00:30 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: qTrRpdeIYpMtb+/17RuBPnusbtWLaXoGQLpIXGyFt88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:b0:48:75:e1:0c:de:44:77:3f:eb:cb:da:71:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: May 12 05:00:30 2025 GMT
Not After : May 13 05:00:30 2025 GMT
Subject: CN=abfe8a8ea6ea6bb07edf81bc7e91271dbc9e9e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:fe:52:d0:22:8d:24:02:3f:2e:3d:77:0b:
3d:17:8a:4f:11:a4:d8:10:6a:c4:cd:f5:e0:38:4a:
f8:d2:0a:3c:32:68:55:7a:2d:80:43:76:9c:6b:45:
0a:89:be:a1:9f:32:fe:ee:c2:5d:4f:06:db:55:1c:
c8:54:24:bb:80:bf:99:54:e4:e0:12:b3:e3:ad:00:
e1:46:21:b8:fe:64:3e:85:7f:ef:a8:e0:2c:16:b7:
72:6b:38:b4:f9:63:17:41:3e:74:37:1b:cd:e7:c9:
c6:4b:d5:35:db:29:07:49:f5:99:b5:67:ae:76:e1:
4d:d9:d1:fa:3d:fd:1e:d6:dc:4f:94:5c:65:20:a5:
b9:73:11:2a:91:10:b0:63:42:15:ef:f2:9e:c2:a7:
4c:b2:d6:e8:02:da:3e:0b:22:6c:d4:be:0f:8b:12:
e2:d6:70:51:ac:85:6e:64:0b:82:45:dd:c0:a4:59:
1d:e9:17:3e:8a:06:8f:1e:4a:1e:9b:6e:b9:97:a8:
8a:af:62:b3:b9:d7:fb:7c:85:8b:c6:04:9d:f3:8c:
0a:b6:78:ee:b6:54:28:82:55:6d:35:a8:ed:72:22:
81:32:72:c6:19:50:a3:d7:d5:aa:fe:41:af:1f:6d:
68:df:fe:b4:2b:ed:04:46:03:2c:8c:06:85:93:13:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FE:8A:8E:A6:EA:6B:B0:7E:DF:81:BC:7E:91:27:1D:BC:9E:9E:5F
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1b:92:b1:45:49:f3:d1:c7:b2:f6:ca:59:54:30:0a:da:0f:
ed:f9:64:cb:8f:85:95:38:cd:05:f7:ca:80:5b:13:54:ba:ad:
c0:35:3c:a9:60:1c:a5:cb:b1:0c:2b:69:f0:58:ae:04:7c:87:
87:c1:67:bc:48:e2:dd:42:ea:dd:d7:c1:bf:19:34:c2:03:19:
58:2b:ca:21:b5:81:7e:26:59:8e:95:32:3d:37:df:5e:1c:94:
7e:19:05:cf:d9:6e:95:a4:68:b3:1d:21:14:5a:c3:95:5e:00:
9a:29:c8:48:64:4f:3d:bb:9a:63:97:fa:58:9f:d6:6a:85:b2:
37:0f:c8:20:d4:05:43:5e:77:fb:bd:26:27:73:aa:ac:b1:40:
30:c2:c0:c0:58:36:3d:61:bc:11:c6:17:fc:fd:c4:40:15:2c:
0a:35:dc:5b:7d:ea:42:74:bf:cd:0a:2a:32:4f:6b:96:26:b1:
b3:73:19:24:35:24:85:89:50:7e:9d:e8:2a:a2:fd:30:25:f7:
6c:d9:d7:9c:e3:30:51:18:46:b4:0a:c2:5c:86:72:5a:7e:5e:
13:da:71:ce:dd:d3:2c:ff:9f:3e:e1:24:88:07:b8:12:4b:7a:
69:ac:65:a5:2d:08:e2:73:4e:89:90:fd:55:7c:0e:a8:32:d9:
49:52:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:23:34 2025 by rpki-client