Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: ob3chwXjmSdXq7nZKpHkSza/BXJoKHEgBDhSFcgpV1c=
Subject key identifier: 97:F6:0F:E4:26:67:14:20:D1:A7:42:EF:01:7A:74:2B:AE:3E:35:FE
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019A507496AA4EE812AE6BD935D88E28ABE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0D88
Signing time: Tue 04 Nov 2025 20:00:09 +0000
Manifest this update: Tue 04 Nov 2025 20:00:09 +0000
Manifest next update: Wed 05 Nov 2025 20:00:09 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: lq9DFmtMIgzy0YbFZc1oe96zztBm4MgbPZB+9VV93qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:96:aa:4e:e8:12:ae:6b:d9:35:d8:8e:28:ab:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Nov 4 20:00:09 2025 GMT
Not After : Nov 5 20:00:09 2025 GMT
Subject: CN=97f60fe426671420d1a742ef017a742bae3e35fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:f5:a5:76:d1:b8:21:45:95:ce:95:16:6b:
9f:6b:96:24:e4:5f:95:4f:87:fa:22:71:74:36:4a:
51:32:f8:e2:d4:73:03:b1:d8:47:5c:c4:fb:70:77:
40:4f:88:26:57:e8:e4:0c:e5:4b:05:3a:52:40:93:
56:27:5f:f4:0d:7b:52:1e:33:d2:8b:e6:a5:39:53:
1a:a4:dc:11:f8:4f:84:e1:4f:38:e1:ab:47:d5:b7:
fc:47:d9:a2:ae:92:85:ea:e2:a5:48:be:bc:18:d6:
00:18:0e:d7:ef:4a:cb:ef:32:f4:92:8a:9a:10:24:
81:25:c1:b4:84:22:6e:c8:c9:28:08:b2:61:5a:ca:
ea:2b:ec:1d:d4:2f:79:33:fa:7f:66:67:3a:a4:22:
5b:e6:d5:3b:a7:35:65:93:50:67:21:2c:51:1c:42:
cc:73:4f:8d:bf:cb:41:87:fe:f0:ed:bb:81:a7:de:
4d:cd:e8:1f:83:e5:cc:62:3b:6a:c4:ca:76:10:da:
8e:e7:56:46:5c:a6:02:30:7b:3d:4c:37:e3:bf:c4:
ac:2a:5c:f7:ef:78:50:7b:8f:e6:da:ec:9c:86:65:
f6:f3:4b:ce:77:ed:a6:d1:fb:66:9e:af:be:a5:1d:
7e:c7:aa:57:ce:b6:d9:ba:b3:6b:a5:a5:6a:32:da:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:0F:E4:26:67:14:20:D1:A7:42:EF:01:7A:74:2B:AE:3E:35:FE
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fe:2e:a9:5a:b2:91:57:b3:4d:b5:d7:81:cc:39:c9:f4:b7:
dd:b3:bd:f9:0c:16:53:be:38:05:3f:82:80:3f:82:a7:28:e7:
12:94:08:6e:74:d5:52:f0:62:8a:85:22:b4:9a:14:3e:84:c3:
c8:13:7e:ca:74:fb:d1:15:d1:8c:a5:02:52:7a:05:5d:7d:38:
4b:fc:d5:69:24:19:5a:8e:0b:1c:06:5c:2b:85:3b:5c:23:76:
38:fc:f0:1c:fb:8e:95:43:f7:6d:77:d2:c4:22:14:01:64:ca:
5a:e4:fe:03:be:2b:10:94:27:80:fe:e9:90:03:ac:6f:ba:a0:
d1:da:13:fe:33:88:7e:f6:bc:ce:11:d1:22:d4:9a:db:bd:48:
6d:6d:9a:6a:8b:09:ce:87:50:8d:6a:a4:c6:0c:97:9a:85:4b:
3f:83:10:50:e6:03:1d:7e:84:80:fe:70:77:85:43:cf:38:65:
b7:3e:46:d8:7d:f3:af:06:4e:f6:2e:e7:b3:65:d5:a7:ba:5b:
db:f3:81:4b:46:04:b2:48:ac:e2:90:d3:78:00:76:43:5f:fa:
87:29:56:45:1b:c2:20:0e:76:79:b8:e0:c9:49:53:c5:f4:af:
c1:53:f4:04:0d:80:6e:28:f8:97:fa:97:4e:7f:e6:e3:d9:8a:
42:0a:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:00:23 2025 by rpki-client