Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: JzDzPgGd7lts6ijypfmljzxzmNsKx8HMkVxVLTxFJi8=
Subject key identifier: 73:D3:FF:4E:B8:85:14:51:A2:F6:06:63:0F:67:12:59:B1:B4:BB:A6
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019785EA785A8043704CB55FA8278AA874A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0C16
Signing time: Thu 19 Jun 2025 02:00:25 +0000
Manifest this update: Thu 19 Jun 2025 02:00:25 +0000
Manifest next update: Fri 20 Jun 2025 02:00:25 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: GSmR+PZ7L4bcHjgLJ9MfoBSVxESGHrJ0j4t6s3QmFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:ea:78:5a:80:43:70:4c:b5:5f:a8:27:8a:a8:74:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jun 19 02:00:25 2025 GMT
Not After : Jun 20 02:00:25 2025 GMT
Subject: CN=73d3ff4eb8851451a2f606630f671259b1b4bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:73:2f:de:26:30:38:f4:31:1c:57:eb:1d:
8a:ed:3c:da:26:9d:55:56:93:33:d1:6a:3c:1a:7f:
03:3b:fa:9a:b5:fd:95:7c:ca:ef:16:f9:e6:90:4c:
39:10:5f:ed:9f:a2:8d:e5:02:69:8b:32:42:85:2b:
40:06:c8:c7:cf:41:c2:9f:e8:49:9f:35:8b:18:6f:
cf:09:a5:5f:e0:00:ce:34:3f:d7:4d:75:9c:79:fc:
f1:7f:2f:b5:de:60:ce:42:56:19:7e:ad:01:fb:41:
3c:83:24:c4:2f:fc:dc:2a:7c:f6:ed:68:12:10:92:
63:fa:4b:5d:63:f9:e2:69:47:63:d1:5a:3c:23:f8:
54:e8:6c:16:ec:fe:24:2b:20:12:e7:d1:b4:5f:aa:
f9:13:e1:d3:59:63:d7:f7:3f:d9:84:69:09:0e:46:
b7:13:91:c8:14:31:e9:60:33:06:9a:00:d0:33:0b:
43:6c:86:50:e1:6c:24:01:91:24:3a:2e:e6:3b:6a:
d9:87:62:03:37:34:94:8d:fb:d5:58:64:21:5b:47:
c3:c4:b9:9b:7d:a9:7e:24:d8:db:f9:3c:c8:1f:10:
28:ed:ee:c4:07:9d:d7:3f:9e:01:19:bb:e2:06:ad:
09:a2:94:96:98:2b:2a:dc:22:39:ac:d9:9b:75:ff:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D3:FF:4E:B8:85:14:51:A2:F6:06:63:0F:67:12:59:B1:B4:BB:A6
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:94:3a:e6:e2:5e:1b:0e:2a:90:d7:11:67:da:7e:b6:66:7e:
4e:19:21:0e:80:cb:97:e1:33:ea:7b:d0:45:b5:36:ce:e3:f4:
3c:55:e1:db:55:89:b7:c3:db:f8:ba:30:2a:15:ba:7e:d8:d3:
f2:03:fc:2e:e2:e6:35:f0:db:8e:8b:48:0c:90:0d:5e:97:a9:
2b:0b:4a:e8:99:fb:7f:5a:94:c6:55:0c:b7:3d:51:f6:e8:92:
f4:c6:15:65:5e:7b:e8:13:70:a6:1c:79:b0:f6:b3:67:b6:fe:
49:f4:c5:19:cb:e8:7e:5d:23:27:7f:fa:c6:db:1c:0d:a6:df:
57:a6:02:8b:8c:86:11:da:0f:87:5a:e9:d1:e9:1a:41:d8:b7:
52:07:51:87:2b:f7:58:14:25:8a:af:39:8d:1f:a1:4b:df:33:
15:96:1e:75:3c:04:cb:04:3c:a0:0f:58:0a:65:b5:ff:fa:c3:
7e:9e:ce:2d:9f:48:00:6f:4a:0d:b5:2b:6f:37:b2:c4:df:06:
3a:e7:51:76:70:c8:37:59:da:4d:10:27:a8:56:39:c4:4c:d4:
c9:0b:01:87:86:dc:56:fc:88:7a:e7:0e:58:1a:97:5c:d5:5e:
3d:d9:74:cb:f3:46:f2:bc:6c:1b:b1:7e:08:67:ad:f4:00:f4:
9a:90:d7:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeF6nhagENwTLVfqCeKqHSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWZiNDlkZjI0NzRhNjA0MmI5ZjIxMGJmZWE4NjFiMWIy
ODg2ZWQwHhcNMjUwNjE5MDIwMDI1WhcNMjUwNjIwMDIwMDI1WjAzMTEwLwYDVQQD
Eyg3M2QzZmY0ZWI4ODUxNDUxYTJmNjA2NjMwZjY3MTI1OWIxYjRiYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudRzL94mMDj0MRxX6x2K7TzaJp1V
VpMz0Wo8Gn8DO/qatf2VfMrvFvnmkEw5EF/tn6KN5QJpizJChStABsjHz0HCn+hJ
nzWLGG/PCaVf4ADOND/XTXWcefzxfy+13mDOQlYZfq0B+0E8gyTEL/zcKnz27WgS
EJJj+ktdY/niaUdj0Vo8I/hU6GwW7P4kKyAS59G0X6r5E+HTWWPX9z/ZhGkJDka3
E5HIFDHpYDMGmgDQMwtDbIZQ4WwkAZEkOi7mO2rZh2IDNzSUjfvVWGQhW0fDxLmb
fal+JNjb+TzIHxAo7e7EB53XP54BGbviBq0JopSWmCsq3CI5rNmbdf8gPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPT/064hRRRovYGYw9nElmxtLumMB8GA1UdIwQY
MBaAFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5Yjgt
OTViMjcxZjJlMjBiLzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5YjgtOTViMjcxZjJlMjBi
LzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJQ65uJe
Gw4qkNcRZ9p+tmZ+ThkhDoDLl+Ez6nvQRbU2zuP0PFXh21WJt8Pb+LowKhW6ftjT
8gP8LuLmNfDbjotIDJANXpepKwtK6Jn7f1qUxlUMtz1R9uiS9MYVZV576BNwphx5
sPazZ7b+SfTFGcvofl0jJ3/6xtscDabfV6YCi4yGEdoPh1rp0ekaQdi3UgdRhyv3
WBQliq85jR+hS98zFZYedTwEywQ8oA9YCmW1//rDfp7OLZ9IAG9KDbUrbzeyxN8G
OudRdnDIN1naTRAnqFY5xEzUyQsBh4bcVvyIeucOWBqXXNVePdl0y/NG8rxsG7F+
CGet9AD0mpDXvg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 12:47:28 2025 by rpki-client