Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier: ppZvlbhJM9HVMpPAqoDrf6+gxEEUt9j3N3XfcwG8OPU=
Subject key identifier: BB:AC:0F:CF:A8:BA:88:40:75:E8:F8:A0:CC:75:54:CB:2B:AE:94:2C
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer: /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial: 0198D583414CC84DD7AE025CCBB4FD08AFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number: 0580
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: 0tTqxzM13bt2v1m4PYXXMoQ5LXU.roa (hash: IIfKmkqir49Glk7zmei/2auCaiHojz2YnRsKfNazlQI=)
2: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: DVTEwNZvjrvhGFRiqXDJQK4+239gfGOBQQj1IbDEIqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:41:4c:c8:4d:d7:ae:02:5c:cb:b4:fd:08:af:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=bbac0fcfa8ba884075e8f8a0cc7554cb2bae942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:45:df:7b:b4:c4:2f:81:3e:f2:10:d3:64:
56:0c:d0:12:79:7b:4e:61:2c:be:7d:dd:d7:73:0e:
b4:80:1b:ca:11:80:ae:14:c1:94:82:26:d5:03:ad:
eb:84:67:fb:42:e1:32:93:e8:80:73:8c:05:63:4e:
92:71:44:c6:84:60:18:98:58:30:d4:67:be:5e:47:
78:4f:6f:19:fd:e9:63:47:5e:c1:d6:5f:25:98:5f:
d2:91:8f:ba:d0:c1:dc:56:ed:ac:86:56:58:e0:34:
a0:74:48:6e:ec:55:fb:15:cf:7a:08:c2:6e:8e:5e:
b5:1d:ec:b1:be:b2:70:04:64:fd:51:de:a7:64:97:
44:14:4b:19:b5:b5:9f:2c:cd:4c:0c:74:cf:ea:03:
9a:48:5b:46:95:0b:40:e7:a3:d0:22:1f:ac:cd:2f:
0b:6e:47:ec:f9:7b:fb:3d:b3:c2:e2:45:8b:60:38:
70:00:23:91:16:d8:0b:7f:2b:3f:f0:00:bf:ca:95:
94:29:d9:e1:1d:ac:d5:4c:00:4d:ff:ca:ca:bc:c3:
79:85:77:9a:59:16:b9:e6:c1:69:72:f8:4d:ef:f8:
31:16:93:d0:18:2b:0f:78:34:7f:01:71:64:14:5c:
a6:ae:93:4b:ff:99:3d:c0:4f:aa:59:44:4c:ee:78:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AC:0F:CF:A8:BA:88:40:75:E8:F8:A0:CC:75:54:CB:2B:AE:94:2C
X509v3 Authority Key Identifier:
keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c2:b2:6d:ce:16:3b:ed:36:25:10:f4:e4:60:e6:f9:0d:8e:
c9:6e:32:7e:b2:12:be:84:21:c5:5d:8a:a5:b2:0b:23:a4:0a:
c3:de:e9:7b:7e:e1:57:12:ee:8e:41:8c:af:1d:ff:f4:3b:7b:
48:bb:9f:77:54:4c:41:82:28:01:39:69:bc:eb:f4:08:5d:53:
ef:46:a1:0d:36:58:57:93:83:c1:dc:44:89:16:69:a3:ae:a8:
d6:13:78:99:79:cb:e1:0a:24:c2:49:6a:81:28:60:02:66:05:
a5:17:9f:05:b3:cc:1e:76:0a:e3:c1:80:a9:45:59:1a:b1:08:
c5:5a:64:d5:75:d4:10:7a:d1:8d:cf:7a:a5:bd:66:11:3f:23:
d3:c3:10:37:02:50:bc:b3:8c:43:6a:36:12:d1:c2:70:cb:a2:
e4:9c:c0:28:99:8c:9d:83:68:ac:56:29:ab:a8:d2:9d:31:53:
3e:ba:e6:17:6e:ac:3c:a4:00:aa:2b:f1:3c:c5:bc:2c:5a:e1:
8a:6c:ad:33:32:e8:a8:bc:7b:4a:f8:c3:2b:16:57:ff:af:35:
67:5f:07:98:5b:95:f0:a7:d1:ed:ed:29:63:eb:85:6a:87:d4:
24:04:7c:ea:d6:2d:fc:7c:3f:bc:97:f2:c0:f3:4e:ea:04:e6:
80:af:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:07 2025 by rpki-client