Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: 7AdRVGyHCVGISoMSoxLED9T17X92ong+WpjilARv4YU=
Subject key identifier: 28:6C:2C:8B:E8:A4:29:AB:E7:D1:E7:B9:CE:CA:72:AF:B4:8F:15:E9
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 0197481E3D025342AD69EC717659CBC9FE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0BF6
Signing time: Sat 07 Jun 2025 02:00:30 +0000
Manifest this update: Sat 07 Jun 2025 02:00:30 +0000
Manifest next update: Sun 08 Jun 2025 02:00:30 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: 1iU0/0UZftro3flZuLa6ErKnofecUnDR5tTT32tF/5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:3d:02:53:42:ad:69:ec:71:76:59:cb:c9:fe:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jun 7 02:00:30 2025 GMT
Not After : Jun 8 02:00:30 2025 GMT
Subject: CN=286c2c8be8a429abe7d1e7b9ceca72afb48f15e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:4b:25:e0:03:bf:e7:e9:ca:bc:f8:ff:b8:
82:6d:fe:70:70:26:16:80:dc:01:4d:21:16:69:66:
f6:fd:0e:28:bc:ba:fa:4c:89:9e:81:0f:f6:0f:54:
01:9d:85:75:ce:94:71:81:3a:a1:d4:c9:f7:47:3d:
72:ce:64:55:12:62:d3:45:8b:3a:5a:f0:56:92:8b:
3a:b9:bb:da:53:a3:c9:6f:60:4b:6b:dc:80:d7:c5:
86:b9:e1:0f:f8:be:62:ec:c6:47:8d:d9:19:fb:82:
ac:ee:f6:7c:5a:2f:75:ca:3d:4b:c3:28:d6:29:15:
6d:eb:3d:d7:93:de:3c:cd:2d:fb:87:bb:46:27:99:
35:f6:d8:2a:20:ff:c0:c1:c8:a2:e9:ef:0e:7c:13:
3c:da:78:6d:19:d2:42:70:0d:e0:3f:e8:91:55:4b:
73:9f:9f:5e:80:8f:fd:43:14:0a:38:f1:df:e1:fd:
aa:f5:ab:40:a6:a7:60:f8:45:46:7b:0b:e9:8a:e4:
2f:62:c5:77:3e:9a:8d:0d:fa:2e:2e:26:f6:b8:ba:
b0:6e:27:97:e4:c8:be:13:b7:65:45:31:11:73:a9:
b8:4e:71:c2:42:04:b7:ee:f0:75:cd:9f:99:2b:14:
a4:fe:76:f9:25:60:eb:d1:06:be:5f:60:8d:d9:53:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:2C:8B:E8:A4:29:AB:E7:D1:E7:B9:CE:CA:72:AF:B4:8F:15:E9
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:84:1d:e6:76:96:00:ea:99:33:cb:5d:4c:ba:fe:c6:fc:b3:
0e:24:55:05:4c:76:a6:eb:60:cb:51:8b:3b:de:1a:e0:7f:6f:
db:47:84:43:2c:03:41:36:8a:9d:ad:be:88:8e:e0:64:d6:05:
7b:24:40:99:9f:f1:3d:7f:86:5c:95:1b:60:64:f3:0c:8a:08:
cf:df:ef:b0:3d:f6:a9:3d:30:68:01:3f:e4:fd:53:c1:88:fe:
d8:e2:1e:cf:76:d0:19:21:a1:3d:0a:b3:b3:c0:8e:ab:2e:1d:
10:6b:0c:d6:c9:ec:0c:64:98:20:c1:12:86:46:ff:4f:e3:f6:
62:9e:5a:dc:33:ff:51:92:73:17:9e:96:05:d0:0b:65:d4:7f:
56:3c:74:9c:c6:66:98:ad:69:26:d2:04:32:0a:8e:8d:51:9d:
3b:7a:d0:fc:e5:dc:7f:c2:cb:b9:56:9b:01:71:9d:fb:1e:31:
12:27:51:57:6e:b0:af:49:77:c7:d8:f3:0b:2e:21:65:ac:36:
d3:f7:7c:56:f1:1d:93:db:66:e9:1a:f0:ec:da:99:67:5b:78:
db:8c:22:bd:b8:5f:8d:fa:61:43:2f:8f:59:d6:3b:0f:24:7f:
69:15:e8:9d:98:8a:9d:f8:e3:b4:42:c4:ef:ac:80:99:00:78:
c2:52:5c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:41:31 2025 by rpki-client