Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: ZnCLAFFG7+pQKn6Ao2IrPRvAbdobKH2JV92JncWlA2s=
Subject key identifier: 61:60:A7:FC:9B:00:9A:BE:BA:D5:A8:43:EC:FC:D6:D8:7E:8F:9D:2F
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 019889204DA24401FCD5C1CA5CCF0A77642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0D42
Signing time: Fri 08 Aug 2025 10:00:52 +0000
Manifest this update: Fri 08 Aug 2025 10:00:52 +0000
Manifest next update: Sat 09 Aug 2025 10:00:52 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: 9S8oorBTOJv68zj1pbOAECdhO8D6YbD/04LO47icg8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:4d:a2:44:01:fc:d5:c1:ca:5c:cf:0a:77:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Aug 8 10:00:52 2025 GMT
Not After : Aug 9 10:00:52 2025 GMT
Subject: CN=6160a7fc9b009abebad5a843ecfcd6d87e8f9d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:08:d2:3b:c8:80:dd:49:10:9a:0f:ea:3d:
f3:e8:3c:94:5e:44:fa:3b:02:6f:1b:6b:c9:6a:04:
90:14:fb:29:07:82:f1:44:61:b8:30:e1:da:8b:8d:
f9:8c:d1:e2:f3:8f:03:49:8d:8d:c5:a4:14:e1:03:
52:a6:12:5d:71:60:93:f1:f9:c2:3c:0b:64:95:c1:
97:04:a7:62:6b:5b:c7:8d:6c:67:45:91:7b:82:48:
0c:f9:67:82:50:68:6d:82:e7:50:ae:3f:77:99:47:
9d:c6:10:72:e6:e0:6a:a4:13:80:50:0d:77:73:2b:
5c:50:7a:a1:2e:06:5f:ea:bd:60:c0:3e:f0:93:2a:
d4:dc:81:10:05:a3:bb:ee:52:9f:3f:1f:09:10:b9:
d2:fe:a1:76:25:7a:5f:ae:28:db:2f:1d:09:55:04:
fd:b9:0b:6d:d6:53:6d:ab:cd:e2:2d:10:da:6b:c4:
7b:b5:67:3f:93:ef:c1:37:7d:95:2c:07:ae:61:3e:
94:d2:72:03:5a:64:53:ed:1f:08:b4:b2:47:8a:62:
6c:ae:9a:25:d8:86:e7:42:e8:c3:5c:ae:13:ed:88:
d5:5d:9f:76:3a:c0:c0:76:54:84:63:94:70:fd:4a:
95:07:26:c5:51:8b:92:aa:e4:e7:a5:b6:d8:74:de:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:60:A7:FC:9B:00:9A:BE:BA:D5:A8:43:EC:FC:D6:D8:7E:8F:9D:2F
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:cc:65:fc:cd:0f:01:87:66:c3:b5:6a:31:6d:f0:b2:4a:
e1:a3:2b:cd:b3:39:2e:21:62:a5:9a:8a:0a:b7:c6:09:7b:d9:
37:e5:71:55:12:96:f3:f7:e8:2a:18:da:c8:d2:64:00:1b:07:
7b:c7:54:96:a4:66:ab:aa:b1:f8:fa:3d:01:51:34:ae:6f:ac:
a0:33:64:db:43:57:6e:3c:fe:14:4e:4d:5f:14:d3:0a:0a:80:
42:21:3e:2e:ad:45:4d:a0:7e:60:0e:57:8b:23:fb:e0:f0:ed:
5d:5c:b1:93:4a:35:3e:4b:5a:3d:52:10:07:1a:d5:ea:5d:e5:
56:b9:62:be:b1:11:e4:eb:99:fe:63:f5:93:42:b7:fc:d6:c6:
9f:27:2d:d6:20:c8:50:46:04:6e:fa:b7:65:88:ec:71:80:e6:
b0:17:0a:c0:71:38:c6:a2:b9:0f:f4:1f:84:c7:5c:af:b6:5f:
5c:6a:85:4c:25:73:5c:56:21:af:a8:6a:11:3b:ed:23:46:18:
c6:40:4f:b2:c1:74:57:0a:a0:81:fb:2b:f8:fd:76:8d:e3:53:
3e:87:bb:15:5f:ef:b7:c5:d2:b8:20:c4:f5:a6:dd:ea:1f:25:
e2:b1:ed:9c:72:f7:f3:91:db:3a:ea:08:d7:01:9f:c4:d5:d7:
a3:f7:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:37 2025 by rpki-client