Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: D7lh3vvhQvBWTB26eZrDvaXyPMkprzMYRIx2uephJxY=
Subject key identifier: D7:A6:E7:80:20:D3:7F:A6:60:6B:34:0C:D4:9D:0C:1D:87:03:CA:6E
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 01977C79C48935786DE558C0C8CD534C9C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0CB7
Signing time: Tue 17 Jun 2025 06:00:44 +0000
Manifest this update: Tue 17 Jun 2025 06:00:44 +0000
Manifest next update: Wed 18 Jun 2025 06:00:44 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: tt5nOmNWnfd8RIJ9bzxK7B5XkjYlUP3vA+6p3gqR0fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:c4:89:35:78:6d:e5:58:c0:c8:cd:53:4c:9c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Jun 17 06:00:44 2025 GMT
Not After : Jun 18 06:00:44 2025 GMT
Subject: CN=d7a6e78020d37fa6606b340cd49d0c1d8703ca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:ac:88:47:9e:74:6f:58:00:ab:3e:51:66:
40:3e:c9:b8:7d:9a:c3:8a:30:16:8b:ed:a3:92:22:
e2:5f:3e:28:c6:27:cc:0f:91:45:24:33:ed:d1:95:
4e:6b:ac:a8:0a:6c:91:12:11:10:ac:1d:39:3d:99:
35:7e:ae:3f:ed:56:58:43:4b:97:62:13:29:55:ae:
21:ec:f8:ce:fe:84:ab:e2:45:7a:61:91:3d:6a:8a:
80:a4:4c:9b:33:58:2d:4a:55:81:bf:47:5d:40:e0:
48:5d:39:df:68:4c:aa:f5:3c:35:79:04:fa:5f:94:
48:68:4c:b4:dc:98:87:b2:fb:86:1c:06:a7:1b:85:
cd:49:29:5b:a3:ad:a8:25:cd:c1:90:89:29:7c:ce:
ad:ff:b1:88:23:fa:8d:4a:de:8a:69:c7:28:b4:3a:
46:e6:cc:cf:8b:ed:d9:23:e3:69:7c:0c:05:34:91:
05:6d:b6:c3:81:75:ae:b7:9f:4d:4a:6b:19:1e:7e:
f8:08:0f:3b:53:60:9e:29:db:f5:bc:a2:7e:1e:c7:
b9:32:b3:3a:00:e9:c2:88:6d:2c:4a:c2:dc:be:61:
de:c2:8f:3c:28:02:b5:34:66:6f:e8:26:4f:6a:2a:
53:b2:78:d2:eb:b2:cd:31:35:f9:b1:5a:c4:38:5e:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:E7:80:20:D3:7F:A6:60:6B:34:0C:D4:9D:0C:1D:87:03:CA:6E
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3f:9b:dd:e5:ce:97:c2:90:7e:ae:c9:73:e5:27:36:1d:03:
8d:4a:84:5d:90:41:8b:f2:77:3d:99:82:51:df:0b:50:28:5c:
72:e1:11:ec:fd:42:c8:1b:36:20:73:0b:c4:18:c2:d6:70:15:
11:db:6a:16:b3:1c:f3:a5:a5:0a:99:c9:3d:f4:91:b4:a4:6e:
5c:af:95:ed:e9:86:e0:ad:25:c7:32:5a:f9:be:f3:83:cb:20:
99:29:e0:b7:a7:ae:92:6b:42:cb:ff:25:3d:7c:49:67:d4:f8:
7d:e3:6b:06:cd:80:d5:03:d7:ce:4e:78:28:f0:6b:2c:8b:be:
b8:ac:41:41:6f:3b:ad:2e:4c:da:fe:2d:79:79:b5:89:c0:e5:
4d:93:a8:36:1d:0d:09:ec:93:f0:a7:20:01:f6:23:8c:6e:f3:
86:04:54:70:f9:14:f6:1a:ce:6a:f4:57:ac:ef:e6:6c:d4:7b:
be:15:29:a5:50:e0:60:48:69:0a:6b:6c:24:3b:07:50:c1:e7:
fa:3b:08:e9:f6:b6:d8:03:05:67:8e:59:90:33:03:37:28:98:
3b:29:88:c4:55:0c:51:02:c4:66:0a:9f:cc:af:db:19:ed:7e:
e1:c5:e4:3e:b6:8c:2c:e8:57:c0:cf:b7:f0:13:c0:e0:48:11:
eb:9d:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:17:11 2025 by rpki-client