Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: nPDkTjudjdvLTZ08beD05NFowkD7wO6w5l3vl/Vg3O4=
Subject key identifier: 3D:7D:9F:19:F9:68:B5:38:09:22:7B:C4:0B:06:07:65:28:CA:19:85
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 0196854860ECE26DD0DA5DC9094ADED6078A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0C37
Signing time: Wed 30 Apr 2025 06:00:35 +0000
Manifest this update: Wed 30 Apr 2025 06:00:35 +0000
Manifest next update: Thu 01 May 2025 06:00:35 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: CGdnMBhlpeLiVym7mx8pbYDfVfU0DFIv8UdVhSJedUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:60:ec:e2:6d:d0:da:5d:c9:09:4a:de:d6:07:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Apr 30 06:00:35 2025 GMT
Not After : May 1 06:00:35 2025 GMT
Subject: CN=3d7d9f19f968b53809227bc40b06076528ca1985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:98:40:79:28:46:74:ed:3e:6c:6e:e5:ae:21:
dc:28:84:c4:dd:04:24:b4:20:78:1d:83:92:97:a8:
dc:e8:77:9c:9a:62:3e:c4:61:d4:ed:ca:34:8a:45:
4a:ac:d3:ec:ee:8c:40:cf:cd:68:a1:ee:9c:06:a2:
e5:cf:05:61:96:a7:e4:7f:34:df:75:57:07:5a:f5:
e1:27:f3:17:21:8e:f3:36:c9:ae:1e:84:fd:dc:c3:
b7:f1:47:cd:82:f6:25:1d:bb:2f:60:b8:c8:7f:cc:
d4:4c:fb:7d:4b:e9:f9:e4:a1:9e:b4:62:95:b6:54:
e4:1b:a1:41:55:5a:af:c8:0d:61:49:09:fc:34:eb:
df:f0:06:99:c6:99:e7:47:45:a7:63:a4:b0:93:da:
00:12:00:43:ec:9b:e4:ab:92:a2:af:91:e5:e7:fd:
bd:a2:b7:84:07:d7:56:aa:0f:09:0c:5b:78:da:10:
1c:54:28:f6:76:ba:4c:ad:a8:cd:c8:c7:0d:43:f5:
cd:59:d4:82:ab:e6:23:9a:08:4e:23:a8:0c:f7:58:
77:7f:5f:37:d9:d9:04:8e:63:09:a2:2a:8e:30:80:
db:ee:5e:50:3c:6f:0d:54:ff:f8:52:e7:36:65:2f:
45:d6:62:ad:d6:24:cb:eb:d5:a2:23:a2:56:47:bf:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7D:9F:19:F9:68:B5:38:09:22:7B:C4:0B:06:07:65:28:CA:19:85
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:31:56:03:64:1a:08:84:ef:42:fe:a8:ff:c9:8d:1e:ed:0f:
04:99:e9:f5:8c:53:16:00:b1:03:a4:7e:15:eb:05:1f:20:b0:
67:d4:54:ff:e8:82:00:a2:fe:93:2e:5e:c6:1a:fd:ba:f2:c9:
ec:3e:9e:0f:b2:25:b2:a3:3c:eb:30:8d:e0:74:6c:7b:87:b8:
3e:04:ce:5f:e5:69:40:3d:72:0a:c1:ef:52:c3:56:10:e1:0d:
3a:68:29:d6:5b:2b:3f:77:ee:5a:0d:13:ee:37:11:96:3e:f0:
34:fe:4e:33:9b:ad:01:0c:18:92:92:94:cd:cc:d0:39:ff:6e:
29:c9:b1:b1:05:f2:fd:13:40:c8:83:82:98:77:f8:b6:2f:b8:
08:3a:36:d5:79:3d:55:dd:89:a9:16:64:3e:98:3f:72:bc:c0:
6d:99:a7:05:e4:20:5b:f3:8f:80:40:04:88:35:36:6d:c6:ab:
72:0a:07:cd:9c:7d:f3:ff:b6:f6:10:36:e3:2a:37:2f:17:49:
9f:58:0e:eb:6a:fd:cc:e7:78:e5:c7:31:00:55:0a:79:63:66:
2d:20:34:fb:49:02:63:b0:da:ba:61:e9:30:c1:14:21:ad:05:
d4:39:81:22:a0:67:9c:7b:3e:a5:55:88:17:7e:e3:1b:ef:5b:
ea:cb:7a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFSGDs4m3Q2l3JCUre1geKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjhiZjI3ZGFjNzA1ZjMxMDJlYTg4NjczNDcwZDI3ZGM4
Njg2NmMwHhcNMjUwNDMwMDYwMDM1WhcNMjUwNTAxMDYwMDM1WjAzMTEwLwYDVQQD
EygzZDdkOWYxOWY5NjhiNTM4MDkyMjdiYzQwYjA2MDc2NTI4Y2ExOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85hAeShGdO0+bG7lriHcKITE3QQk
tCB4HYOSl6jc6HecmmI+xGHU7co0ikVKrNPs7oxAz81ooe6cBqLlzwVhlqfkfzTf
dVcHWvXhJ/MXIY7zNsmuHoT93MO38UfNgvYlHbsvYLjIf8zUTPt9S+n55KGetGKV
tlTkG6FBVVqvyA1hSQn8NOvf8AaZxpnnR0WnY6Swk9oAEgBD7Jvkq5Kir5Hl5/29
oreEB9dWqg8JDFt42hAcVCj2drpMrajNyMcNQ/XNWdSCq+YjmghOI6gM91h3f183
2dkEjmMJoiqOMIDb7l5QPG8NVP/4Uuc2ZS9F1mKt1iTL69WiI6JWR78kewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD19nxn5aLU4CSJ7xAsGB2UoyhmFMB8GA1UdIwQY
MBaAFB5ovyfaxwXzEC6ohnNHDSfchoZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgt
YzE1NjQ3ZjU3MDEwLzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgtYzE1NjQ3ZjU3MDEw
LzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTFWA2Qa
CITvQv6o/8mNHu0PBJnp9YxTFgCxA6R+FesFHyCwZ9RU/+iCAKL+ky5exhr9uvLJ
7D6eD7IlsqM86zCN4HRse4e4PgTOX+VpQD1yCsHvUsNWEOENOmgp1lsrP3fuWg0T
7jcRlj7wNP5OM5utAQwYkpKUzczQOf9uKcmxsQXy/RNAyIOCmHf4ti+4CDo21Xk9
Vd2JqRZkPpg/crzAbZmnBeQgW/OPgEAEiDU2bcarcgoHzZx98/+29hA24yo3LxdJ
n1gO62r9zOd45ccxAFUKeWNmLSA0+0kCY7DaumHpMMEUIa0F1DmBIqBnnHs+pVWI
F37jG+9b6st6nw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:36:40 2025 by rpki-client