Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: Aoe5xLIoqvBt+paG3vpSkHR4R5EJ3FS48/PJ0Jk0/WA=
Subject key identifier: 7F:70:0E:4F:5F:38:36:DD:42:28:1B:3D:86:C4:9D:79:17:B6:A5:8B
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019658A670E4D04333C73F16E2176D43C969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0B7A
Signing time: Mon 21 Apr 2025 14:00:24 +0000
Manifest this update: Mon 21 Apr 2025 14:00:24 +0000
Manifest next update: Tue 22 Apr 2025 14:00:24 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: /wtE8tFkUTKeeUQHcmk5sOPqdlUwhvB+5XkU2sGnhf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:70:e4:d0:43:33:c7:3f:16:e2:17:6d:43:c9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Apr 21 14:00:24 2025 GMT
Not After : Apr 22 14:00:24 2025 GMT
Subject: CN=7f700e4f5f3836dd42281b3d86c49d7917b6a58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:ae:53:c5:9e:a2:ae:55:23:0b:1c:5a:26:
0f:2b:c7:13:84:2f:81:45:b0:80:33:f0:d8:97:95:
54:9b:c8:ea:28:45:da:f9:ee:75:93:b9:15:bf:68:
65:80:4d:88:24:5c:39:c8:fb:27:51:fe:50:c1:8d:
b5:d6:f5:b1:91:46:a2:6f:45:d3:5e:4e:6a:eb:96:
9e:27:41:9d:53:bc:28:92:ce:fc:d7:63:87:a2:53:
8e:8a:15:66:04:09:64:f4:a9:68:82:62:6a:ff:3d:
9b:73:c0:a8:b6:9e:36:b3:ee:cd:e6:ec:72:b5:f6:
48:53:83:cf:a1:59:df:e5:67:61:f5:9c:81:d5:14:
45:31:05:0d:dc:85:5e:fb:bf:60:ac:20:6c:4d:e7:
04:83:5a:9a:7d:d7:13:cc:49:62:f9:70:5c:29:8f:
8a:66:8d:51:c7:df:97:82:3d:20:14:71:ff:89:ae:
cd:94:40:55:4e:30:bd:c3:94:83:eb:63:8c:15:fe:
64:a8:9a:f3:73:39:69:f5:1a:c2:dc:70:67:c8:09:
f3:36:35:53:47:78:26:a2:fc:f9:e6:b2:a9:7b:a1:
04:99:37:14:98:34:f1:1a:cc:bf:e3:93:75:35:22:
14:dd:3a:f6:17:67:d8:63:c3:ce:4b:10:1a:27:92:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:0E:4F:5F:38:36:DD:42:28:1B:3D:86:C4:9D:79:17:B6:A5:8B
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:89:e9:66:ca:e3:5a:ab:03:f6:f3:63:59:a9:37:cf:2b:ce:
1a:84:95:02:50:eb:ad:1e:6b:52:45:25:e5:83:c1:27:64:cf:
e8:6c:93:83:50:b4:d1:6e:78:ba:be:c4:99:7f:8b:eb:63:a4:
f0:60:ce:fd:2c:22:67:16:a3:08:ca:43:98:f8:c8:7e:fa:4d:
84:a8:1a:6f:2d:07:c0:7f:36:44:52:d8:2e:a2:b7:20:2f:ff:
4b:01:d2:57:09:df:7e:e2:ae:66:29:5a:08:14:06:d1:dc:79:
dc:30:df:fc:fc:df:6a:32:9e:3f:38:39:da:4a:6d:82:07:7e:
6f:51:15:05:21:ad:73:8d:d5:8b:b5:3f:65:35:f2:9c:b8:00:
b1:c5:b5:9d:a1:be:66:ce:a1:f3:75:3a:67:c8:72:53:62:09:
ab:38:e8:cc:86:90:b3:57:d5:25:36:91:e0:3a:05:4a:6a:26:
54:0b:8d:5d:f5:17:97:6b:bb:6a:b2:e0:71:d3:0f:4c:30:8a:
e4:04:dc:11:06:9b:ff:3a:35:07:02:6c:b3:15:fd:41:72:5f:
28:6e:9a:79:df:58:55:b8:f9:19:51:06:49:ad:7a:e9:28:03:
ff:99:bd:32:07:66:a9:5e:17:24:af:b5:ba:03:5a:6e:e6:5d:
80:93:78:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYpnDk0EMzxz8W4hdtQ8lpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWZiNDlkZjI0NzRhNjA0MmI5ZjIxMGJmZWE4NjFiMWIy
ODg2ZWQwHhcNMjUwNDIxMTQwMDI0WhcNMjUwNDIyMTQwMDI0WjAzMTEwLwYDVQQD
Eyg3ZjcwMGU0ZjVmMzgzNmRkNDIyODFiM2Q4NmM0OWQ3OTE3YjZhNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMOuU8Weoq5VIwscWiYPK8cThC+B
RbCAM/DYl5VUm8jqKEXa+e51k7kVv2hlgE2IJFw5yPsnUf5QwY211vWxkUaib0XT
Xk5q65aeJ0GdU7woks7812OHolOOihVmBAlk9KlogmJq/z2bc8Cotp42s+7N5uxy
tfZIU4PPoVnf5Wdh9ZyB1RRFMQUN3IVe+79grCBsTecEg1qafdcTzEli+XBcKY+K
Zo1Rx9+Xgj0gFHH/ia7NlEBVTjC9w5SD62OMFf5kqJrzczlp9RrC3HBnyAnzNjVT
R3gmovz55rKpe6EEmTcUmDTxGsy/45N1NSIU3Tr2F2fYY8POSxAaJ5LbLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9wDk9fODbdQigbPYbEnXkXtqWLMB8GA1UdIwQY
MBaAFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5Yjgt
OTViMjcxZjJlMjBiLzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5YjgtOTViMjcxZjJlMjBi
LzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwYnpZsrj
WqsD9vNjWak3zyvOGoSVAlDrrR5rUkUl5YPBJ2TP6GyTg1C00W54ur7EmX+L62Ok
8GDO/SwiZxajCMpDmPjIfvpNhKgaby0HwH82RFLYLqK3IC//SwHSVwnffuKuZila
CBQG0dx53DDf/PzfajKePzg52kptggd+b1EVBSGtc43Vi7U/ZTXynLgAscW1naG+
Zs6h83U6Z8hyU2IJqzjozIaQs1fVJTaR4DoFSmomVAuNXfUXl2u7arLgcdMPTDCK
5ATcEQab/zo1BwJssxX9QXJfKG6aed9YVbj5GVEGSa166SgD/5m9MgdmqV4XJK+1
ugNabuZdgJN4Iw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:47 2025 by rpki-client