Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
File: Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json)
Hash identifier: 4WQgGb20AFUWNhoXD3xybk+2D2YZlORWmo5wRopk2sw=
Subject key identifier: B8:B9:ED:E4:1A:39:70:EC:79:65:59:32:12:37:50:06:35:A6:73:69
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Certificate issuer: /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial: 019A4F2B0648D3ECCE2EA12D579AB6CF0169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: ytT47SnovQHtUGpVupt86wZVnysofNArRYR0oLbOygg=)
2: UdTz9ESnCBONhFhPnKTJSPAPKew.roa (hash: 0eKPRYHWi1Fk+s60KVEthvqfye7EFF2oFsVLARt647E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:06:48:d3:ec:ce:2e:a1:2d:57:9a:b6:cf:01:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=b8b9ede41a3970ec796559321237500635a67369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:18:b6:a5:62:94:ff:93:14:1d:89:65:0c:
55:60:78:2b:35:23:ed:ca:dd:b8:18:74:b6:5b:f7:
4b:6a:8a:0d:26:cc:a4:f9:83:5a:10:51:b4:2e:f8:
4a:39:33:fb:73:3b:77:b3:5c:3e:1f:6b:d2:3c:20:
5a:71:10:74:a1:e0:ae:df:6d:a5:05:be:07:da:f6:
0e:bf:58:b2:e2:3b:2c:12:6a:22:c8:ff:fb:cf:e5:
74:28:03:e3:07:ab:16:ee:4b:64:7a:50:d8:a5:c3:
bc:43:d6:ce:d3:41:2e:8d:ee:9e:30:70:ea:7d:01:
5d:5c:a8:03:25:d9:b3:22:d1:9b:d4:32:b1:61:82:
c4:5e:e6:a6:b2:56:09:ad:c5:72:bc:9f:17:df:db:
6d:92:12:ea:e5:29:5d:52:60:e7:6c:11:2f:7a:73:
b2:64:aa:28:56:56:6c:ea:c7:b6:fc:7b:0b:86:4a:
df:b9:c0:4d:ce:be:42:25:21:fa:36:d8:26:dc:f1:
77:2e:39:8d:04:20:8b:37:34:4e:66:3c:c3:09:9d:
6f:13:d2:86:4d:68:61:71:59:52:a5:51:62:aa:25:
2f:cd:76:06:e3:0f:e0:86:a6:7f:c6:b6:32:f2:74:
15:d1:5e:3e:95:c3:72:19:15:d5:a9:22:5a:48:19:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:ED:E4:1A:39:70:EC:79:65:59:32:12:37:50:06:35:A6:73:69
X509v3 Authority Key Identifier:
keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cc:86:76:46:86:ab:1c:65:d8:4b:a0:2f:7f:b9:b4:2d:bb:
d9:66:6e:76:ce:50:d6:23:2c:8d:54:d9:a1:36:f4:c8:56:e6:
52:84:7f:df:5f:92:be:4b:df:38:e1:95:93:a7:47:10:ea:b6:
b1:88:9d:f2:dc:b4:d0:12:a5:f7:cd:63:29:57:cd:d4:00:a1:
bc:5d:06:28:d8:05:15:1c:64:73:98:7e:14:7a:f6:56:d7:21:
db:1d:b2:ba:64:c5:57:64:eb:4d:b5:e9:43:e9:18:cf:99:fa:
77:63:5a:44:ac:95:bb:77:ce:61:c7:11:a0:42:41:92:b6:cf:
23:3e:71:fc:d9:e0:a0:46:97:2e:b0:fb:d6:9b:84:57:b1:75:
ee:b9:ff:70:64:b5:8a:f9:ef:fb:8c:0f:00:d3:49:4b:c1:67:
8c:4c:89:9c:eb:0f:74:a5:84:00:8e:69:77:87:2f:76:f8:92:
5d:ba:b3:1e:f5:44:ba:d1:78:cc:ec:51:61:09:30:c9:d9:94:
2c:7c:63:4c:f2:94:53:c3:ed:3f:3e:64:83:8d:89:b1:82:11:
b5:1b:ac:41:08:c7:92:8f:2c:42:39:89:b4:93:a4:10:e2:02:
05:47:34:64:7f:00:8c:47:da:e6:95:be:78:cd:ef:36:8f:a1:
07:9e:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:44 2025 by rpki-client