Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: dYKZUi0lV1bLBEsYk0GSY2pcx1QZVjtckJJZYMDM4no=
Subject key identifier: 7F:00:B3:DE:69:E9:7C:4C:6C:18:B1:C2:57:08:EA:D2:07:44:34:27
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 0199FB7CBA5FE325451CE7B7DEDDE8E61872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0D5C
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: qlejVgnEZtSqLs85iuEiqJLUHhQZe49ZClx0bT+tTB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ba:5f:e3:25:45:1c:e7:b7:de:dd:e8:e6:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=7f00b3de69e97c4c6c18b1c25708ead207443427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:4e:53:99:40:1e:12:ee:8a:45:81:e3:9b:
39:61:9e:94:3a:8e:e2:bb:c7:0d:ca:c7:43:5e:57:
4b:fb:a9:1a:f7:d5:10:d8:ba:45:bc:b0:f4:f5:18:
33:16:42:66:36:40:f4:3f:59:8b:cd:a5:dc:22:3c:
97:bb:bf:c2:2b:72:6a:c2:4b:e4:2e:5a:88:51:d3:
60:df:7d:71:fc:05:df:be:87:b5:50:40:5f:04:77:
87:98:a1:2e:9f:8c:52:2b:e2:a6:0d:fa:78:41:b6:
7f:a5:ea:99:48:86:29:15:59:a4:1e:6c:84:a8:01:
c0:65:dc:0d:5b:cd:a5:a7:f5:d8:40:25:52:f2:df:
0c:13:9d:13:80:aa:e7:1b:3f:e4:d6:0d:b6:5f:8b:
0d:04:00:0e:b1:fd:5b:0e:b6:e6:f0:0f:a8:fb:2a:
c4:8c:b1:25:91:fd:b0:ab:eb:42:b7:12:11:3b:23:
cf:0a:82:28:54:8d:c7:4e:5b:0f:e7:3f:d2:a9:6c:
80:6e:8b:d9:62:00:9d:b3:72:d8:7a:59:21:56:de:
bc:79:1d:ca:25:68:73:e3:1d:f9:c4:b7:be:6d:b0:
a8:f2:67:e6:93:ef:28:3f:3a:89:cf:df:02:ef:b0:
28:00:99:ac:e3:4c:e9:7a:fe:14:42:c8:e0:18:8f:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:00:B3:DE:69:E9:7C:4C:6C:18:B1:C2:57:08:EA:D2:07:44:34:27
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7a:e8:0d:c8:3c:25:06:92:cf:f3:26:1e:a3:7c:ef:ec:9e:
55:37:82:b8:51:22:51:ab:c0:8b:58:67:a1:11:2e:21:8d:db:
bd:86:20:e6:94:05:b3:1e:f0:31:ac:db:d2:cf:c6:48:f1:19:
1d:37:87:6c:f3:1a:45:ca:62:c5:5c:ca:43:45:92:ab:85:e3:
fa:7c:d3:f4:1a:94:02:bd:b8:5b:06:fa:24:3f:4f:41:e9:ee:
c2:4a:a1:0c:ff:10:83:ed:b0:10:ff:ed:83:73:43:85:29:03:
ca:0e:ea:7c:e1:91:7d:6b:58:69:f1:11:62:a3:49:58:c5:6c:
d8:54:c1:7b:7a:74:2d:ae:ff:cd:5d:d3:c5:a5:a4:b5:5b:c0:
ec:0f:12:5b:8a:dd:07:8a:57:da:62:55:76:9e:05:ef:40:81:
13:ab:3d:fe:0c:b3:99:da:ae:69:96:b4:56:22:33:99:a2:61:
a5:4c:41:db:14:b4:0b:b1:ac:cd:6c:fc:0e:dc:49:cb:0d:66:
15:fe:da:c4:6c:1e:5c:2a:c5:51:6c:f8:94:3b:4c:a5:86:63:
e2:5f:f8:f9:6b:2c:98:f5:11:20:a6:67:e8:75:22:c8:e9:10:
c9:9c:d3:2e:8e:50:54:61:81:9c:a8:45:2e:05:90:ee:6e:64:
bd:18:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:55 2025 by rpki-client