Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: m2OdWgxo1mRdOTVTSHFVnOhf3BUxpH6O53/fF3GPSj8=
Subject key identifier: 3E:FA:FE:1D:9A:DF:14:70:09:2D:3C:72:79:B3:5B:A0:E5:77:41:CF
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 0197B820DDD212584EB3E66D069F7CC4915D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0C30
Signing time: Sat 28 Jun 2025 20:00:50 +0000
Manifest this update: Sat 28 Jun 2025 20:00:50 +0000
Manifest next update: Sun 29 Jun 2025 20:00:50 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: mkDWqfjeD8hQkKXHiU8XdN3rhaglCOyJDgmjiNwl6bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:dd:d2:12:58:4e:b3:e6:6d:06:9f:7c:c4:91:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jun 28 20:00:50 2025 GMT
Not After : Jun 29 20:00:50 2025 GMT
Subject: CN=3efafe1d9adf1470092d3c7279b35ba0e57741cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:5b:a1:e1:7f:a9:54:3d:4f:42:a0:68:68:
81:8a:ce:3b:50:73:3a:4c:30:28:7c:73:65:66:5d:
7e:08:99:af:e4:92:1b:fd:b1:89:74:1b:05:a1:bc:
13:db:7b:72:58:6a:d7:d2:74:fe:b2:00:e0:73:ec:
21:9b:d8:99:e1:52:f0:aa:d0:66:1c:b0:92:95:2b:
ad:2d:4d:e7:05:99:7f:22:8a:48:de:56:66:ce:d6:
2d:e0:37:3e:c3:fe:37:5d:70:fd:1c:2e:a6:9f:a4:
b7:4e:ef:0b:ab:99:0d:da:9d:34:53:de:3c:43:b6:
f1:d8:54:32:2c:c1:cc:dc:0f:e0:2d:0f:d6:0d:ee:
97:0b:c8:c0:c7:8e:7d:61:8a:64:0e:9c:6f:15:67:
3b:bf:81:71:1d:ac:1a:3e:9a:6d:45:1e:61:a6:11:
d0:c2:22:7d:46:0a:fd:26:70:01:10:56:d0:65:9d:
8a:03:f8:da:b7:f2:fe:2c:3d:9b:33:30:38:04:77:
a0:4e:28:60:14:5e:8d:b9:74:3d:e3:c2:fd:05:89:
68:90:e5:f0:13:18:f5:b1:16:c8:78:36:90:89:1f:
81:be:82:1e:51:2a:15:41:35:7b:ab:9c:61:82:f4:
78:a8:c7:5a:1c:9e:83:1f:58:1b:a7:a1:a4:50:d3:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FA:FE:1D:9A:DF:14:70:09:2D:3C:72:79:B3:5B:A0:E5:77:41:CF
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:d2:16:74:1e:cc:28:07:5b:a8:51:33:66:24:0b:39:8c:
9e:ef:f2:e8:62:f7:33:9d:e7:19:b0:4c:05:ce:a4:b0:1d:d6:
3c:b4:60:6c:a1:e8:57:ad:a4:78:fc:e9:cf:a9:4f:13:cf:cc:
d9:ef:9a:27:2b:e4:0a:f6:ac:c0:f3:77:2e:c3:74:b8:56:c9:
7c:54:b2:3a:79:02:57:32:4e:90:a7:4f:34:ed:d7:e6:94:51:
e6:8b:b1:c3:54:f6:15:f0:67:30:e0:18:03:f7:c9:50:3c:fa:
35:51:15:72:7a:10:7a:ed:de:87:87:9b:a6:12:99:9f:1b:87:
b0:2e:cc:eb:b3:17:13:17:65:f3:7d:68:e3:2a:c0:bc:41:b5:
c0:83:36:8f:6b:44:7e:1f:f1:fe:2a:94:67:62:25:80:8e:21:
02:76:d0:5b:33:4d:8b:cf:df:69:88:06:97:25:01:57:f5:16:
2e:f2:7f:9f:64:98:96:e9:dc:b5:2e:23:74:68:b8:33:fe:fa:
3e:bf:3f:d4:7d:8b:d4:3f:7c:27:f4:8a:4f:86:ac:61:50:cd:
05:2b:1b:71:8f:a0:7a:d5:9a:e7:44:74:aa:6c:43:96:f5:aa:
9f:c0:bb:50:1e:f3:18:fc:cc:63:0b:b3:67:0d:3c:4e:1d:a9:
26:43:37:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IN3SElhOs+ZtBp98xJFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWZiNDlkZjI0NzRhNjA0MmI5ZjIxMGJmZWE4NjFiMWIy
ODg2ZWQwHhcNMjUwNjI4MjAwMDUwWhcNMjUwNjI5MjAwMDUwWjAzMTEwLwYDVQQD
EygzZWZhZmUxZDlhZGYxNDcwMDkyZDNjNzI3OWIzNWJhMGU1Nzc0MWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv41boeF/qVQ9T0KgaGiBis47UHM6
TDAofHNlZl1+CJmv5JIb/bGJdBsFobwT23tyWGrX0nT+sgDgc+whm9iZ4VLwqtBm
HLCSlSutLU3nBZl/IopI3lZmztYt4Dc+w/43XXD9HC6mn6S3Tu8Lq5kN2p00U948
Q7bx2FQyLMHM3A/gLQ/WDe6XC8jAx459YYpkDpxvFWc7v4FxHawaPpptRR5hphHQ
wiJ9Rgr9JnABEFbQZZ2KA/jat/L+LD2bMzA4BHegTihgFF6NuXQ948L9BYlokOXw
Exj1sRbIeDaQiR+BvoIeUSoVQTV7q5xhgvR4qMdaHJ6DH1gbp6GkUNOshwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD76/h2a3xRwCS08cnmzW6Dld0HPMB8GA1UdIwQY
MBaAFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5Yjgt
OTViMjcxZjJlMjBiLzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5YjgtOTViMjcxZjJlMjBi
LzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5fSFnQe
zCgHW6hRM2YkCzmMnu/y6GL3M53nGbBMBc6ksB3WPLRgbKHoV62kePzpz6lPE8/M
2e+aJyvkCvaswPN3LsN0uFbJfFSyOnkCVzJOkKdPNO3X5pRR5ouxw1T2FfBnMOAY
A/fJUDz6NVEVcnoQeu3eh4ebphKZnxuHsC7M67MXExdl831o4yrAvEG1wIM2j2tE
fh/x/iqUZ2IlgI4hAnbQWzNNi8/faYgGlyUBV/UWLvJ/n2SYlunctS4jdGi4M/76
Pr8/1H2L1D98J/SKT4asYVDNBSsbcY+getWa50R0qmxDlvWqn8C7UB7zGPzMYwuz
Zw08Th2pJkM3jQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:30 2025 by rpki-client