Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: r8yVwrT6GzUbmo43ChUaipBNyC7RrpE+kqWmHT9WxAI=
Subject key identifier: 48:5C:AA:90:B4:77:CC:91:7A:56:AE:1C:C2:61:4B:5B:08:A9:04:A1
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019688EDF68CCDAB53460DD143DA908F3722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0B93
Signing time: Wed 30 Apr 2025 23:00:18 +0000
Manifest this update: Wed 30 Apr 2025 23:00:18 +0000
Manifest next update: Thu 01 May 2025 23:00:18 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: 2G4zCe7sKMZezY8nUX3cgjvI5wlP/5jcTUn+1IR/SG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ed:f6:8c:cd:ab:53:46:0d:d1:43:da:90:8f:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Apr 30 23:00:18 2025 GMT
Not After : May 1 23:00:18 2025 GMT
Subject: CN=485caa90b477cc917a56ae1cc2614b5b08a904a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c6:6d:dd:9c:52:2d:7a:16:0e:15:70:29:ed:
37:26:4d:72:db:73:04:11:8e:59:36:96:e2:86:a4:
4d:e2:5a:04:f5:6d:fa:c1:dc:48:b3:a0:ba:27:88:
4e:c2:a3:75:74:34:a5:00:22:65:47:e0:cd:92:71:
4c:47:af:ec:53:4d:b6:2c:c3:8e:d3:8b:85:b4:29:
bf:3b:e8:cd:4c:9d:62:30:24:4b:99:51:77:23:54:
eb:61:70:4d:3a:41:ee:73:1a:73:84:25:dc:b8:9b:
23:6a:c5:de:5c:91:56:10:7c:5e:bc:fb:53:1c:2d:
98:b8:25:61:4a:6e:9b:8b:06:16:c4:7d:ed:e8:89:
35:fb:d6:f3:52:e9:bf:10:fe:a6:0c:76:c2:f4:47:
f8:da:1f:cf:c0:29:8d:14:ed:41:64:86:a4:a8:29:
35:d5:55:f5:73:03:fd:bc:f5:4c:45:b1:9d:2b:26:
a7:bd:6f:0d:22:81:3d:e6:48:3f:a6:b6:5a:a9:dd:
f1:4b:56:7d:1f:04:c0:c3:2b:5a:b7:94:79:bc:c4:
06:b4:5b:cb:f5:15:e0:42:50:35:53:6d:85:e6:98:
aa:4b:49:92:15:03:5c:e2:79:70:46:fd:c3:97:0a:
43:a5:57:9c:d6:bb:bd:f8:8a:49:3e:52:5e:9d:91:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5C:AA:90:B4:77:CC:91:7A:56:AE:1C:C2:61:4B:5B:08:A9:04:A1
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:17:72:d7:cc:82:ef:17:79:6f:16:10:e2:d6:91:6b:0b:db:
ae:4b:14:16:32:d5:e0:5a:7b:8c:e4:83:e8:07:1c:af:7c:ce:
31:87:f1:8b:98:14:80:ea:3c:d5:63:85:92:fe:35:4a:02:b2:
bd:2d:a8:48:b0:91:22:0d:75:52:6b:4b:65:a5:9b:55:8a:20:
e6:4b:c4:1b:4e:76:2b:a1:21:75:c8:d3:ca:1c:79:82:e8:3b:
b1:11:a0:f2:c4:75:b5:7e:3b:7f:be:81:40:87:0c:fe:ee:4f:
be:c9:62:d5:90:f2:83:40:47:7c:98:bf:b0:dc:e0:8c:92:dd:
61:d6:6d:4f:e4:08:1d:26:49:03:59:75:8c:12:93:95:a0:fb:
b6:67:35:65:10:01:5e:c7:34:28:1a:80:93:83:15:fe:eb:91:
58:4d:5b:45:90:f0:fe:90:6a:6b:ac:56:05:28:13:4d:89:df:
65:ea:f3:81:23:fe:50:05:cf:4c:6d:c9:4d:be:7c:c6:49:8d:
ee:ea:6f:47:5a:d9:0c:b7:4d:73:db:5b:8f:99:5f:45:6e:6b:
90:02:c6:c4:81:13:cc:0c:d7:6d:c9:c0:0d:47:8a:27:bd:56:
5b:14:3c:6c:a8:db:0b:84:5c:e4:47:a1:b3:48:7b:d2:f4:02:
88:7a:ac:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:36 2025 by rpki-client