Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: +8wb8yP6erEuQvHHaUU/VoufpjiHF7H92gXwBTi098M=
Subject key identifier: F9:50:91:12:73:A1:DC:B5:17:83:B9:18:13:34:15:6A:DF:13:0F:0C
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 01988C8F062C2AD3BF89F679087D100EFDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0C9E
Signing time: Sat 09 Aug 2025 02:00:39 +0000
Manifest this update: Sat 09 Aug 2025 02:00:39 +0000
Manifest next update: Sun 10 Aug 2025 02:00:39 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: 77jaRYoQLdeOaLvDGZcxfBPtufCqotOaa/SZUk4spXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:06:2c:2a:d3:bf:89:f6:79:08:7d:10:0e:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Aug 9 02:00:39 2025 GMT
Not After : Aug 10 02:00:39 2025 GMT
Subject: CN=f950911273a1dcb51783b9181334156adf130f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:c3:c0:8e:5d:3c:e0:f9:25:80:3a:46:2a:
67:99:c9:0d:3a:7f:cc:26:a3:60:7f:2b:02:22:9e:
19:03:2e:f2:b0:7c:39:6e:8c:bb:96:36:10:dd:50:
eb:9d:5e:49:49:39:1b:c2:8d:3e:90:c4:9b:72:af:
0a:72:bd:67:d4:7e:48:15:ea:3b:72:e3:51:83:fe:
0c:e5:07:54:19:29:b4:cd:70:84:a8:c7:40:6c:16:
12:f2:86:e3:be:ba:48:20:b6:5e:21:37:51:e7:95:
b8:aa:e6:79:79:90:05:43:59:ab:b3:41:9b:e5:12:
3b:f1:84:4c:d8:db:63:b8:42:c2:df:8f:c5:72:50:
1f:c5:27:ee:b8:84:0c:10:fb:b2:18:f1:96:07:64:
f6:12:b7:14:2a:a5:49:dc:40:4e:17:bb:40:9a:90:
de:cb:d3:7c:03:95:ce:85:a5:07:6f:04:bd:a9:73:
9a:9c:33:10:5f:4d:20:b2:12:fb:bf:8c:47:a0:88:
8e:58:03:b1:cf:45:da:07:41:86:22:2b:52:e4:08:
bf:6b:d1:b5:2a:39:70:5b:60:06:6b:d6:af:5f:4a:
13:50:21:84:d3:f2:58:bd:e2:99:b5:e2:8e:b7:ea:
f8:ad:6e:eb:db:2c:7c:21:78:df:e5:15:94:12:da:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:50:91:12:73:A1:DC:B5:17:83:B9:18:13:34:15:6A:DF:13:0F:0C
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:25:1d:20:2f:12:86:c9:86:67:ad:86:2d:e5:2d:9a:17:
ce:43:4d:4e:4d:78:ca:d7:5c:dd:0e:92:c5:f6:fb:d1:bd:42:
39:7d:40:c4:d6:51:c3:a8:cc:05:3d:b1:3d:12:98:b6:b4:3c:
4a:8e:d3:3b:51:64:12:b7:36:31:27:e2:46:80:9a:90:ed:e3:
af:82:33:1d:a1:52:67:5b:be:0c:6a:f1:f1:73:5a:50:3a:3e:
82:3e:f7:78:e8:3d:77:85:03:e5:28:38:cd:85:db:96:f6:8b:
87:b9:b7:ca:5d:d8:c1:58:fa:b0:da:e0:92:26:d5:93:c7:5b:
2a:37:c4:99:25:85:33:a2:9d:5f:23:6f:66:80:bb:03:5c:85:
e5:77:77:ab:68:5e:6b:05:62:43:08:55:db:f2:22:43:e9:f1:
ce:12:79:a0:1e:90:0a:6f:36:4f:0e:e5:50:82:28:b0:87:4b:
e3:79:a1:37:e9:1f:9a:5b:d8:38:49:7b:cf:f0:65:a4:96:06:
76:2b:47:d5:a1:da:99:2a:0e:d4:ea:cf:cf:35:25:0e:95:5e:
05:4d:71:a3:8e:c3:cf:17:05:29:58:51:4b:12:f7:4e:52:24:
50:d1:55:d0:ef:e9:12:07:f2:10:b4:88:f8:a7:6a:5d:8b:ce:
ec:46:15:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:29 2025 by rpki-client