Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: EvpiPbY5ifZsfgYncPmy4uURCrdFvCWQXgg8NMVb6ms=
Subject key identifier: 6B:7D:73:1B:7E:DC:65:90:4E:B3:A1:8B:FE:ED:7C:8B:6C:25:B7:B4
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 019A7149AD0C6FA905E826084A6604C56F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0D99
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: B0TpE7d5lZUhs97yCDH0f0BsiytVfpkgIruTnXQ1fzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ad:0c:6f:a9:05:e8:26:08:4a:66:04:c5:6f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=6b7d731b7edc65904eb3a18bfeed7c8b6c25b7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:83:df:b4:81:81:dc:85:89:ed:52:c7:85:
cf:08:44:06:ab:44:76:32:6b:3d:19:76:4a:0e:13:
2c:84:84:50:38:c0:aa:77:fa:7b:26:2e:63:ed:c4:
22:86:47:94:ad:57:a5:6a:a1:b5:6e:7a:0c:e5:d8:
a8:6a:80:b4:a2:44:7b:0c:aa:ff:59:59:4b:65:1b:
5a:50:f5:fa:4e:39:57:f8:17:84:0f:09:a6:10:d1:
8a:0c:f2:09:c1:95:22:f4:39:e4:91:60:7a:20:a4:
0d:14:fc:b9:6b:57:f4:09:82:02:a7:c7:a6:7c:48:
a1:e4:e1:f5:1d:ef:56:84:8f:fd:53:9c:9a:26:87:
62:a7:9d:61:7d:06:fb:5a:3f:55:11:1a:bb:6e:2b:
86:f9:dd:47:b2:b4:9b:fb:46:21:c3:6c:94:51:27:
45:92:7c:68:41:79:89:af:8c:6b:01:8a:f7:45:c8:
f0:eb:9f:04:57:dc:5d:6a:11:74:c6:51:83:00:ba:
5a:13:29:bb:ef:be:29:43:3c:ef:a1:7a:0d:f0:3b:
1d:66:9a:35:3a:a8:b9:1f:24:6e:ee:03:17:d6:0c:
ab:3f:40:51:9e:2e:22:15:f0:40:a8:3a:e6:a4:b3:
ae:fe:99:2d:1c:b2:1b:36:d4:9d:9d:87:a9:44:6c:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:73:1B:7E:DC:65:90:4E:B3:A1:8B:FE:ED:7C:8B:6C:25:B7:B4
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:95:cb:3e:ec:84:1a:41:82:2e:b7:0e:9e:53:22:50:48:
37:43:07:e7:01:96:d3:90:b5:6a:02:cc:d1:49:a6:bb:d8:2c:
c1:1e:79:3a:d5:7b:5a:8a:64:78:53:de:d5:68:cc:88:86:7f:
37:8d:01:52:62:7b:d9:9e:40:5b:f4:e4:43:fb:6b:6d:5e:c2:
bd:e9:85:84:ed:3d:3b:f8:c9:81:6d:89:3a:bf:df:73:f2:98:
03:ec:21:79:3c:9e:ec:57:66:8d:82:4c:26:3b:8a:b7:95:35:
45:73:b2:31:16:a4:b0:ce:6d:ab:28:0d:b5:f5:e7:8e:f9:84:
7c:46:bb:f3:80:9f:aa:c5:18:2c:4f:3a:f8:de:3e:ed:42:88:
0f:35:7f:98:56:fd:6e:67:e9:34:c9:14:1d:d5:c3:9f:a4:e0:
7d:19:a6:28:50:4c:62:7b:71:56:85:d6:0c:ec:6a:51:a4:72:
8b:7f:83:dd:cd:42:6d:ab:00:cc:a3:73:b4:6a:de:68:fc:3f:
d2:a7:ac:9e:e6:65:56:46:ef:dc:43:28:64:e2:81:02:fd:af:
d8:7a:85:85:24:01:c2:94:c5:8e:bd:0b:72:06:f1:60:84:af:
5e:f5:7f:cc:c4:ec:a6:f5:9b:f5:8f:7f:42:ef:a8:8e:3f:cf:
5f:df:ec:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSa0Mb6kF6CYISmYExW83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWZiNDlkZjI0NzRhNjA0MmI5ZjIxMGJmZWE4NjFiMWIy
ODg2ZWQwHhcNMjUxMTExMDUwMDQ1WhcNMjUxMTEyMDUwMDQ1WjAzMTEwLwYDVQQD
Eyg2YjdkNzMxYjdlZGM2NTkwNGViM2ExOGJmZWVkN2M4YjZjMjViN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT+D37SBgdyFie1Sx4XPCEQGq0R2
Mms9GXZKDhMshIRQOMCqd/p7Ji5j7cQihkeUrVelaqG1bnoM5dioaoC0okR7DKr/
WVlLZRtaUPX6TjlX+BeEDwmmENGKDPIJwZUi9DnkkWB6IKQNFPy5a1f0CYICp8em
fEih5OH1He9WhI/9U5yaJodip51hfQb7Wj9VERq7biuG+d1HsrSb+0Yhw2yUUSdF
knxoQXmJr4xrAYr3Rcjw658EV9xdahF0xlGDALpaEym7774pQzzvoXoN8DsdZpo1
Oqi5HyRu7gMX1gyrP0BRni4iFfBAqDrmpLOu/pktHLIbNtSdnYepRGxpHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt9cxt+3GWQTrOhi/7tfItsJbe0MB8GA1UdIwQY
MBaAFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5Yjgt
OTViMjcxZjJlMjBiLzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5YjgtOTViMjcxZjJlMjBi
LzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpKVyz7s
hBpBgi63Dp5TIlBIN0MH5wGW05C1agLM0Ummu9gswR55OtV7WopkeFPe1WjMiIZ/
N40BUmJ72Z5AW/TkQ/trbV7CvemFhO09O/jJgW2JOr/fc/KYA+wheTye7FdmjYJM
JjuKt5U1RXOyMRaksM5tqygNtfXnjvmEfEa784CfqsUYLE86+N4+7UKIDzV/mFb9
bmfpNMkUHdXDn6TgfRmmKFBMYntxVoXWDOxqUaRyi3+D3c1CbasAzKNztGreaPw/
0qesnuZlVkbv3EMoZOKBAv2v2HqFhSQBwpTFjr0LcgbxYISvXvV/zMTspvWb9Y9/
Qu+ojj/PX9/sYQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:58 2025 by rpki-client