Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier: m50C0wGhGO1QRvnz6lw2J74+iLY+7ARUs67snDFf3e8=
Subject key identifier: 65:FA:6E:FC:96:A2:44:68:48:46:30:C2:13:1F:61:93:62:38:54:33
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 0195124755E1F711240F9B6091A9208B4C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number: 0AD1
Signing time: Mon 17 Feb 2025 05:00:19 +0000
Manifest this update: Mon 17 Feb 2025 05:00:19 +0000
Manifest next update: Tue 18 Feb 2025 05:00:19 +0000
Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: K8/O/T8DDXOSFU8EXHaot9XIzXaXvZofrtpdW8V4lRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:55:e1:f7:11:24:0f:9b:60:91:a9:20:8b:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Feb 17 05:00:19 2025 GMT
Not After : Feb 18 05:00:19 2025 GMT
Subject: CN=65fa6efc96a24468484630c2131f619362385433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:bc:d3:1c:7e:13:f9:55:54:df:01:49:ee:
3a:69:0e:86:35:6f:c9:58:a0:b5:80:58:4f:75:dd:
be:53:c7:4e:61:3d:15:e6:eb:12:48:5a:e8:a4:61:
57:24:cd:17:48:9a:dd:94:9a:26:6d:50:b0:b4:1e:
f9:66:98:dc:d1:04:57:7e:5e:e7:b8:cf:4c:c5:3d:
0f:21:79:21:27:84:fe:43:b7:cf:6a:07:e7:4b:d2:
91:03:ba:38:05:d0:c4:40:37:d6:9d:5c:b7:b2:c6:
7c:8e:f1:41:8f:f0:11:ef:5c:f8:6c:5d:b3:f1:90:
bc:0b:87:19:65:bb:71:5e:68:72:30:e6:8b:c0:ab:
50:22:1d:bc:65:81:51:4d:40:cd:e7:18:1b:88:94:
3d:e1:c0:b9:a7:ab:83:85:46:a5:e0:e9:4a:46:bd:
2d:2c:a6:85:a3:1d:39:f0:8f:ad:e3:8d:c6:e4:e8:
e6:5c:a9:29:5c:6c:ad:90:9a:12:cb:34:8f:89:26:
68:be:99:d2:47:11:75:7f:a1:4b:61:3d:de:0a:cb:
67:0e:97:08:2e:36:fa:07:32:3a:31:51:de:26:bc:
76:6a:ba:2f:ad:3d:bf:1c:00:1f:9d:f0:64:c4:0b:
a0:1d:f4:e5:77:43:b5:c4:49:f9:03:76:d2:e5:be:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:6E:FC:96:A2:44:68:48:46:30:C2:13:1F:61:93:62:38:54:33
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:44:28:16:4d:1a:64:32:fc:18:97:63:20:df:2f:4b:44:07:
8e:e3:eb:41:69:ef:4b:c8:ec:91:c1:e7:59:fe:a9:af:33:60:
55:fd:52:20:5d:ae:81:5f:18:03:80:98:77:88:16:b1:fd:8e:
a0:07:ec:d1:dc:a1:5b:7b:3f:69:a0:49:e1:44:2c:61:4d:5f:
08:fb:56:12:be:df:b3:39:2a:5e:1c:1a:7a:7e:95:18:bf:66:
68:12:44:c5:9c:cd:41:7a:21:5d:bd:80:35:e6:f5:d8:63:fc:
b4:6e:a8:d1:10:3d:e5:7a:ce:26:c3:53:57:ff:a0:92:c1:2c:
6e:c5:ff:e4:64:27:7b:9d:c2:ba:7b:68:d8:09:f0:ed:e7:50:
ef:c4:f4:a1:a8:e3:73:14:61:c0:06:aa:47:af:b7:25:a2:1b:
e9:46:cd:82:ea:fa:d8:2b:d9:1a:e6:7e:76:c7:a3:04:89:02:
f5:14:0e:b9:c3:67:28:62:c3:54:17:56:ee:b1:32:c4:1c:8c:
04:a4:91:ff:89:c9:0a:6c:2d:b3:c5:1c:56:61:53:a0:f1:74:
f6:44:6f:82:fc:10:37:b3:58:2a:7b:8d:11:29:fb:b4:22:84:
5f:89:dc:c4:0e:16:7b:a3:24:97:e2:45:ca:82:f9:dc:30:ef:
a8:f5:98:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR1Xh9xEkD5tgkakgi0w+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWZiNDlkZjI0NzRhNjA0MmI5ZjIxMGJmZWE4NjFiMWIy
ODg2ZWQwHhcNMjUwMjE3MDUwMDE5WhcNMjUwMjE4MDUwMDE5WjAzMTEwLwYDVQQD
Eyg2NWZhNmVmYzk2YTI0NDY4NDg0NjMwYzIxMzFmNjE5MzYyMzg1NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVq80xx+E/lVVN8BSe46aQ6GNW/J
WKC1gFhPdd2+U8dOYT0V5usSSFropGFXJM0XSJrdlJombVCwtB75Zpjc0QRXfl7n
uM9MxT0PIXkhJ4T+Q7fPagfnS9KRA7o4BdDEQDfWnVy3ssZ8jvFBj/AR71z4bF2z
8ZC8C4cZZbtxXmhyMOaLwKtQIh28ZYFRTUDN5xgbiJQ94cC5p6uDhUal4OlKRr0t
LKaFox058I+t443G5OjmXKkpXGytkJoSyzSPiSZovpnSRxF1f6FLYT3eCstnDpcI
Ljb6BzI6MVHeJrx2arovrT2/HAAfnfBkxAugHfTld0O1xEn5A3bS5b56eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX6bvyWokRoSEYwwhMfYZNiOFQzMB8GA1UdIwQY
MBaAFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5Yjgt
OTViMjcxZjJlMjBiLzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5YjgtOTViMjcxZjJlMjBi
LzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkQoFk0a
ZDL8GJdjIN8vS0QHjuPrQWnvS8jskcHnWf6przNgVf1SIF2ugV8YA4CYd4gWsf2O
oAfs0dyhW3s/aaBJ4UQsYU1fCPtWEr7fszkqXhwaen6VGL9maBJExZzNQXohXb2A
Neb12GP8tG6o0RA95XrOJsNTV/+gksEsbsX/5GQne53Cunto2Anw7edQ78T0oajj
cxRhwAaqR6+3JaIb6UbNgur62CvZGuZ+dsejBIkC9RQOucNnKGLDVBdW7rEyxByM
BKSR/4nJCmwts8UcVmFToPF09kRvgvwQN7NYKnuNESn7tCKEX4ncxA4We6Mkl+JF
yoL53DDvqPWYlA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:13 2025 by rpki-client