Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier: TPcuKD4LogqW1CeY/CFh3b9c/Z7vfliSWIgp/UDsF40=
Subject key identifier: D0:CB:7E:1B:F1:16:59:0A:DA:2C:4D:D9:12:90:39:12:14:10:77:A3
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer: /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial: 0196BCA4761BADEED1545D6BFA182F49203A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number: 046A
Signing time: Sun 11 May 2025 00:00:16 +0000
Manifest this update: Sun 11 May 2025 00:00:16 +0000
Manifest next update: Mon 12 May 2025 00:00:16 +0000
Files and hashes: 1: 0tTqxzM13bt2v1m4PYXXMoQ5LXU.roa (hash: IIfKmkqir49Glk7zmei/2auCaiHojz2YnRsKfNazlQI=)
2: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: HOyJEyyAcfgc11bgM2hgOzyjiOs122AThi2KnrjOn7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:76:1b:ad:ee:d1:54:5d:6b:fa:18:2f:49:20:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
Validity
Not Before: May 11 00:00:16 2025 GMT
Not After : May 12 00:00:16 2025 GMT
Subject: CN=d0cb7e1bf116590ada2c4dd912903912141077a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:77:db:a3:59:c0:16:3f:dd:ef:de:0f:42:
19:50:e9:1b:c3:de:8e:cd:9c:fa:5d:71:26:9d:98:
f7:f5:23:a3:23:cd:09:8e:89:6b:12:20:1c:e8:a6:
c3:17:a7:7f:ed:80:2d:19:d5:cf:44:7b:68:2a:6f:
24:5c:66:69:c2:c0:8c:f7:2e:05:83:85:3d:2e:01:
67:ea:8f:22:9c:d6:7a:46:d3:0d:62:e7:45:fd:70:
9c:f5:e6:5a:59:ee:c3:98:aa:ba:60:c8:b3:e8:64:
9d:f9:b0:28:d4:78:9f:a9:ec:be:15:3b:ec:21:57:
47:5a:60:99:fc:ca:47:6d:37:3f:20:57:00:84:5a:
49:0b:88:0c:b9:c8:1b:b0:3e:e9:26:c6:b7:0b:ca:
98:84:d4:4f:69:53:0d:3b:b4:26:5a:31:7d:61:83:
ab:5b:11:3f:e8:a0:36:ef:8f:17:9b:a5:f2:0e:8b:
43:e3:26:1f:fa:b5:42:4a:66:4f:7e:69:7e:82:90:
35:17:8a:e6:e0:62:8f:80:4c:e3:b7:c0:7a:08:45:
91:52:ea:ae:f1:68:ca:0e:30:1a:cb:7a:cf:7f:68:
c3:a5:9b:c6:d8:86:e1:0c:c1:df:c8:84:04:22:e4:
32:e5:5c:6e:aa:17:b6:ab:42:d7:8b:34:4d:80:7a:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:7E:1B:F1:16:59:0A:DA:2C:4D:D9:12:90:39:12:14:10:77:A3
X509v3 Authority Key Identifier:
keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:8c:df:bd:e5:69:50:2a:05:e5:fd:ea:9e:e7:2e:c0:b8:
bd:8b:13:1a:b1:6f:31:8a:60:f6:e5:74:da:4f:fc:b4:63:4c:
1a:18:b3:f9:aa:8c:16:d7:72:3e:6a:c3:e3:a9:87:f9:fc:3d:
38:bb:6c:1d:c9:b1:d5:43:b6:62:00:7b:3f:37:cf:04:8a:05:
9b:a2:0d:d4:6e:2d:68:91:e3:ad:05:04:e9:d2:29:d9:bd:a7:
3c:3b:7c:66:d1:b6:41:4f:49:2d:3a:04:2a:35:f4:72:99:94:
ab:da:27:ae:e4:fa:85:d0:7e:22:fc:6a:69:6d:47:52:30:82:
ce:47:2e:5c:e3:cf:14:d9:e6:be:49:de:a4:ca:49:35:c8:90:
59:27:54:c0:e4:48:a2:4a:a3:4e:95:71:95:2f:ed:c7:8d:04:
36:da:a3:45:bb:f5:08:ea:30:ca:c1:17:08:35:c0:e7:9e:5a:
cf:7b:95:40:74:b6:6e:ee:cc:0a:c6:ac:1e:31:83:1f:e2:48:
69:85:6f:f3:40:e7:2d:fa:f5:b3:a7:3b:b3:7f:52:c7:b1:76:
74:00:34:cd:f7:1c:fa:43:1d:df:84:7d:c3:0f:ca:37:21:af:
c7:86:c2:05:34:12:67:8e:95:53:b1:02:e8:bf:53:e6:0f:cf:
f2:c0:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:12:24 2025 by rpki-client