Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: AsVaRt+nMQweFr02O75rIbiCUaYGn4pYkFSu6TEregM=
Subject key identifier: 94:2E:CA:EA:5B:B2:F7:2D:B9:4A:95:EA:9B:01:21:AD:DF:EC:89:0C
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 01976F629B4BABAFF15CB69800130306C829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 10B0
Signing time: Sat 14 Jun 2025 17:00:22 +0000
Manifest this update: Sat 14 Jun 2025 17:00:22 +0000
Manifest next update: Sun 15 Jun 2025 17:00:22 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: K6T1ihPhNAMO1STo1bo9kIZSFu3bytjD5ZZpRPiBzNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:9b:4b:ab:af:f1:5c:b6:98:00:13:03:06:c8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Jun 14 17:00:22 2025 GMT
Not After : Jun 15 17:00:22 2025 GMT
Subject: CN=942ecaea5bb2f72db94a95ea9b0121addfec890c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:6b:d3:43:d8:f6:a3:88:3f:d2:6f:ab:41:
cd:05:b5:54:6a:40:00:b0:d8:41:11:a1:2d:e1:de:
b3:c2:d2:05:5d:16:ec:6d:9e:0f:67:8b:4f:a0:35:
a5:64:70:2f:0e:31:ed:60:d5:f9:fb:e8:f2:ad:dd:
6d:44:48:47:48:99:62:e2:31:55:00:54:84:53:70:
f8:0e:9e:6b:f1:51:d0:b1:d7:4f:e7:9b:33:49:bd:
d5:31:00:00:74:e4:d0:05:0b:04:60:39:a4:95:42:
70:7d:06:7b:ca:e1:49:b8:36:c0:bc:f1:eb:a5:b4:
77:fb:db:a3:dc:3d:c8:d1:73:05:41:f9:8b:3c:02:
e7:33:25:9e:82:12:39:54:90:8d:b9:17:e2:1c:5b:
d9:c5:c3:9e:6c:ec:a3:fc:e5:31:48:c9:93:9a:76:
d2:de:07:a8:d0:89:da:4b:3e:15:9c:1d:d4:0f:f3:
d4:1b:3f:9c:36:bd:b4:9c:3f:33:6a:a4:94:b0:78:
52:b5:40:02:70:7a:29:3b:a4:dd:7b:8a:10:74:42:
92:71:03:96:a3:f1:36:c6:2c:0f:73:6a:56:52:91:
15:65:18:1f:f9:cc:f6:79:1c:af:43:e8:0e:8b:b1:
48:f6:0b:5d:a8:b7:cf:e4:a3:90:da:d0:6e:2e:95:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2E:CA:EA:5B:B2:F7:2D:B9:4A:95:EA:9B:01:21:AD:DF:EC:89:0C
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b0:37:c8:d5:b0:36:2a:2b:e2:d7:63:89:3a:14:9d:fa:8b:
5d:e1:98:f2:a3:a9:98:4c:70:c6:9d:b6:b7:16:00:af:58:43:
7a:24:00:a2:e2:6e:8e:f6:f5:63:96:cd:63:2a:d6:31:7a:da:
dc:9b:b5:8c:5f:6e:3b:49:52:6f:b6:9a:e8:96:2a:04:2f:6b:
d6:c9:1c:66:17:35:09:41:6d:65:1e:66:01:5a:1b:59:06:a8:
c7:76:1a:0e:6e:7b:a7:fd:0a:b6:a7:47:d3:7e:a5:1e:0c:48:
76:5c:cb:40:02:65:a9:ba:b5:75:45:2a:cc:2a:44:6f:af:1e:
92:45:0b:b2:a9:c5:38:fe:c5:f4:aa:c1:f1:8a:07:ff:a2:39:
f1:af:f1:ff:40:9a:79:54:ab:c8:e3:dd:0a:82:3e:bf:a1:19:
81:39:d1:25:65:be:43:2f:7c:ec:4d:84:43:51:05:6e:ba:68:
0e:98:c8:9a:9a:b6:82:11:bc:0a:04:57:5e:66:01:f9:06:97:
83:84:30:f2:af:89:32:b6:fa:67:c7:47:92:22:b6:b3:d5:7e:
59:a5:3a:30:b0:43:56:76:3b:77:2f:37:a4:a9:4f:bc:9f:47:
82:b7:c0:dc:6f:0d:b4:a7:42:6b:f9:c1:7c:13:79:b7:a8:93:
8a:33:18:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYptLq6/xXLaYABMDBsgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODRhOWU0MGY5MDc1ZDhlYWZjZjY4YTAyNDg0ZjUyOTI0
MDk1NmEwHhcNMjUwNjE0MTcwMDIyWhcNMjUwNjE1MTcwMDIyWjAzMTEwLwYDVQQD
Eyg5NDJlY2FlYTViYjJmNzJkYjk0YTk1ZWE5YjAxMjFhZGRmZWM4OTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jxr00PY9qOIP9Jvq0HNBbVUakAA
sNhBEaEt4d6zwtIFXRbsbZ4PZ4tPoDWlZHAvDjHtYNX5++jyrd1tREhHSJli4jFV
AFSEU3D4Dp5r8VHQsddP55szSb3VMQAAdOTQBQsEYDmklUJwfQZ7yuFJuDbAvPHr
pbR3+9uj3D3I0XMFQfmLPALnMyWeghI5VJCNuRfiHFvZxcOebOyj/OUxSMmTmnbS
3geo0InaSz4VnB3UD/PUGz+cNr20nD8zaqSUsHhStUACcHopO6Tde4oQdEKScQOW
o/E2xiwPc2pWUpEVZRgf+cz2eRyvQ+gOi7FI9gtdqLfP5KOQ2tBuLpXASQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQuyupbsvctuUqV6psBIa3f7IkMMB8GA1UdIwQY
MBaAFByEqeQPkHXY6vz2igJIT1KSQJVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4Mzkt
NWMzZmFmMzczOTdhLzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4MzktNWMzZmFmMzczOTdh
LzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLA3yNWw
Nior4tdjiToUnfqLXeGY8qOpmExwxp22txYAr1hDeiQAouJujvb1Y5bNYyrWMXra
3Ju1jF9uO0lSb7aa6JYqBC9r1skcZhc1CUFtZR5mAVobWQaox3YaDm57p/0KtqdH
036lHgxIdlzLQAJlqbq1dUUqzCpEb68ekkULsqnFOP7F9KrB8YoH/6I58a/x/0Ca
eVSryOPdCoI+v6EZgTnRJWW+Qy987E2EQ1EFbrpoDpjImpq2ghG8CgRXXmYB+QaX
g4Qw8q+JMrb6Z8dHkiK2s9V+WaU6MLBDVnY7dy83pKlPvJ9HgrfA3G8NtKdCa/nB
fBN5t6iTijMYSA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:30:00 2025 by rpki-client