Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier: 9kvfPJiFe1aK2mL5JhnciU/u3JPxGMZxvgE28KQ7dk4=
Subject key identifier: 1F:1C:73:91:02:80:CD:C1:19:4B:6C:DD:06:FF:B8:32:06:89:01:62
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer: /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial: 019682B53C0CD1E3760CD95A4E46181DE710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number: 044C
Signing time: Tue 29 Apr 2025 18:00:37 +0000
Manifest this update: Tue 29 Apr 2025 18:00:37 +0000
Manifest next update: Wed 30 Apr 2025 18:00:37 +0000
Files and hashes: 1: 0tTqxzM13bt2v1m4PYXXMoQ5LXU.roa (hash: IIfKmkqir49Glk7zmei/2auCaiHojz2YnRsKfNazlQI=)
2: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: 6c4Ugu0aqzXuNvWxwlYCwfvdo4vVApS4RA5/HMLxKIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:3c:0c:d1:e3:76:0c:d9:5a:4e:46:18:1d:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
Validity
Not Before: Apr 29 18:00:37 2025 GMT
Not After : Apr 30 18:00:37 2025 GMT
Subject: CN=1f1c73910280cdc1194b6cdd06ffb83206890162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:96:07:f3:c8:ce:dd:f7:19:45:18:da:68:
5b:04:51:3d:fe:9c:66:49:80:fd:a7:00:be:ba:ab:
b9:d8:d5:9f:76:54:58:0c:8e:2d:74:ef:72:fe:de:
6d:aa:24:c6:eb:aa:98:ae:6f:85:91:3d:fe:29:d1:
23:d4:dc:d5:e0:79:85:cf:45:66:1b:a1:1d:18:77:
62:d6:ce:22:bf:ca:49:e5:66:db:ef:1d:38:45:63:
f0:ef:db:da:d6:fb:56:e6:9d:e2:08:b5:39:ee:c2:
c0:a4:b2:f3:ea:16:9e:45:81:24:52:db:4e:bb:8d:
32:8a:c4:92:e9:00:3d:9d:dd:ea:6a:9f:24:bf:45:
2a:f0:a2:d4:ac:b0:e8:af:c1:0e:a3:2d:52:ec:00:
69:ba:25:35:59:2c:fe:c6:21:d1:f3:26:09:d9:a7:
ca:a7:27:28:49:8a:08:f1:55:e8:94:d8:0c:ef:32:
18:0d:ae:b6:8d:92:5b:c9:8b:3b:37:f9:d7:30:58:
b6:ef:79:e3:08:55:b6:35:f6:19:72:e1:0e:35:6a:
fb:56:5d:5d:28:81:8d:ed:cc:2a:c9:b8:cb:9c:b4:
66:4d:48:61:d4:79:c0:ae:d6:a3:e6:2f:50:dd:b3:
26:54:98:19:7b:1d:26:29:32:32:5d:7b:11:36:b2:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:73:91:02:80:CD:C1:19:4B:6C:DD:06:FF:B8:32:06:89:01:62
X509v3 Authority Key Identifier:
keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:35:ae:89:fa:d8:a6:5e:06:9e:5e:23:47:6f:b1:cd:2d:57:
f1:8c:95:64:99:06:9c:a6:4f:cb:1b:8c:84:2c:8c:28:b0:ad:
46:a3:e2:6c:31:90:1e:1f:90:32:14:38:07:48:8e:bd:53:50:
7f:e5:19:80:7f:22:f5:d2:d7:e0:d8:80:a0:f1:ba:19:76:7f:
d4:58:41:cb:a1:98:ee:81:cd:16:84:6b:aa:2f:2e:62:91:e0:
7d:01:ca:0e:ab:81:93:7c:9e:73:e3:87:67:80:f5:f9:9b:60:
21:c8:bf:17:6a:15:b3:75:c4:8d:ea:d8:4d:cd:84:c1:31:3b:
72:96:36:94:28:ff:9c:f3:eb:bf:b9:1a:ee:40:c5:63:20:f2:
9e:ba:72:fc:20:9c:d1:c1:15:56:64:98:d2:1a:05:d7:b8:b5:
17:16:a6:6e:2f:07:dc:20:dc:75:cc:bd:0a:4b:8d:74:73:c6:
46:c8:7f:ff:3f:b6:d9:34:fc:14:1f:43:02:6a:21:b5:78:94:
5c:ab:e6:84:6d:0b:44:d5:24:ac:ab:19:2a:87:51:65:66:00:
b2:1f:88:50:8e:47:e6:99:4f:48:3a:3e:ad:73:ae:02:49:89:
54:c0:18:ff:49:d7:42:31:d1:c8:74:39:11:77:ce:37:67:50:
8d:3d:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:38:56 2025 by rpki-client