Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier: aJ8uccxB7qKJqfLnTIaoxxS/bRX6Hq5wM45CYC+Hj2M=
Subject key identifier: 8E:B9:15:6E:4D:3D:C1:96:8D:DD:EF:4A:75:6A:5A:4C:59:74:4A:F9
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer: /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial: 019A53E3E72660DFA30AE2A6EBD4655A3B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number: 0646
Signing time: Wed 05 Nov 2025 12:00:35 +0000
Manifest this update: Wed 05 Nov 2025 12:00:35 +0000
Manifest next update: Thu 06 Nov 2025 12:00:35 +0000
Files and hashes: 1: 0tTqxzM13bt2v1m4PYXXMoQ5LXU.roa (hash: IIfKmkqir49Glk7zmei/2auCaiHojz2YnRsKfNazlQI=)
2: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: bT3LodZzU9TendQpOg1DheW/qsFx5a7tTculvIQEy2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:e7:26:60:df:a3:0a:e2:a6:eb:d4:65:5a:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
Validity
Not Before: Nov 5 12:00:35 2025 GMT
Not After : Nov 6 12:00:35 2025 GMT
Subject: CN=8eb9156e4d3dc1968dddef4a756a5a4c59744af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:c1:f6:8d:e1:39:29:03:06:bb:a9:5d:c5:
9e:b8:66:4a:a2:c4:78:11:93:79:20:e4:9e:40:89:
ef:18:50:86:af:74:5a:6d:5c:95:28:8d:0d:a6:75:
26:70:f5:12:9b:15:36:ce:70:53:18:ca:03:c3:8f:
7d:61:2b:23:a2:24:5d:15:d8:97:ae:0a:51:0a:32:
6a:85:d9:c3:8a:07:a4:21:be:19:04:e1:56:e1:c2:
36:ce:33:7b:82:41:0e:99:a0:82:62:89:61:a1:0d:
bd:c3:30:64:6e:6d:e3:f3:d8:d5:91:b9:e8:d5:f5:
91:5a:c1:65:01:4d:69:4b:ac:bf:00:28:e2:31:2c:
00:76:b3:4c:68:89:37:0c:74:a3:8a:78:67:1e:c8:
fd:09:6b:58:32:f5:29:b3:9b:cd:81:f6:44:3e:91:
32:40:be:eb:d1:98:44:10:3d:98:16:d5:bb:8a:7a:
43:32:50:fe:e0:41:bc:d6:8a:4b:bd:eb:11:30:d1:
21:4a:1a:4a:55:23:14:ca:52:ea:79:02:bf:6a:9b:
10:b0:cd:4e:9d:91:12:53:f4:91:f5:06:4b:65:7b:
35:08:eb:40:ef:0b:9a:de:57:6d:b9:76:92:6a:6f:
55:12:94:14:7a:ea:9b:d5:dc:da:ce:17:93:3b:df:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B9:15:6E:4D:3D:C1:96:8D:DD:EF:4A:75:6A:5A:4C:59:74:4A:F9
X509v3 Authority Key Identifier:
keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d4:e1:73:ed:a2:8c:a6:b0:d3:54:09:1b:b4:df:74:53:3f:
72:27:bf:46:1c:e2:75:53:e9:33:6f:2a:ac:fe:ff:85:88:ec:
46:db:83:cf:27:0d:d7:e6:64:a8:e7:6a:97:75:43:eb:69:62:
d4:a7:d9:0b:f0:6a:cd:25:6f:ef:40:3a:6b:08:78:06:d9:d8:
02:d7:b7:b8:d4:7c:dd:ae:91:b1:6a:83:fd:f4:95:5e:6b:e4:
11:39:3d:9e:df:fd:52:09:97:ce:69:67:61:5b:97:b6:fa:2c:
32:bf:39:70:03:f4:30:97:5f:82:9e:7f:fc:9f:0e:9d:5c:47:
82:d3:46:62:49:d1:1a:58:80:8c:ed:8b:01:a0:99:20:df:1b:
e6:15:77:e3:ac:a9:22:a3:06:e5:c3:74:83:fc:8b:96:a3:02:
e6:a3:2b:71:7a:4a:93:bd:93:3e:78:3b:bf:fd:8c:5d:c0:b4:
1d:70:35:1e:d1:3e:1c:25:87:e4:01:9a:00:bf:ff:84:62:84:
60:c1:a3:30:d1:cb:e3:25:39:fb:fe:55:45:51:20:ee:0e:c6:
15:cf:8a:bd:8f:02:5a:2c:5e:f9:1c:a9:e9:dd:17:be:8a:84:
8e:a6:13:48:b9:5c:a3:d5:82:1f:fb:ef:51:ff:00:be:fa:aa:
54:03:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:11 2025 by rpki-client