Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: OJek935iyJQf45MilOa7scSun2o/8iwUTt82xzK3Its=
Subject key identifier: A8:E9:37:26:5F:C6:05:3C:4F:EB:F5:31:31:1D:77:6E:96:66:39:9F
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 0199FBEC37881D0E62E2C6966A50490DA082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0E02
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: n7O4TTab0H0T00vCPWOruu60PeQ9wlYZccdVPVv4qbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:37:88:1d:0e:62:e2:c6:96:6a:50:49:0d:a0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=a8e937265fc6053c4febf531311d776e9666399f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:4d:a6:6a:77:8d:27:83:07:a4:d7:42:f6:
57:e2:bd:e1:55:75:5d:6c:11:f2:81:20:7b:30:c4:
db:3d:4f:4a:02:e9:f2:98:e2:6a:1e:5f:b4:93:b8:
fe:28:66:73:d5:cc:5c:9b:09:8d:9a:d9:60:d7:2b:
f4:44:f9:8d:af:85:80:53:3e:49:af:ad:5a:fe:a9:
32:bc:f5:ef:99:09:e0:3b:14:0a:69:87:22:95:bf:
82:bd:ea:7a:83:92:92:2e:0d:71:ba:88:5a:2e:b9:
41:e6:a4:96:8e:3d:fb:c0:1f:e1:74:ed:53:8d:c6:
17:07:a6:6e:f0:90:9d:60:03:b8:9f:11:9b:9a:01:
12:51:d9:84:f0:6e:35:b4:f6:b1:f8:9e:d9:40:1c:
35:42:9b:3e:74:83:bd:e0:f3:66:6d:7f:58:e9:8d:
d5:33:16:1c:34:3b:72:eb:44:ac:cd:c7:bd:8a:09:
70:30:20:77:d7:a6:44:9b:d4:a8:89:a4:6c:a0:0c:
01:29:52:05:0e:d5:e5:d5:54:62:23:98:3f:9d:14:
cf:74:46:cd:83:4d:cd:95:ea:35:b5:25:18:0b:e6:
2a:90:f3:b7:f1:c2:f0:8d:b9:23:c3:f4:97:b2:2f:
19:b3:51:a2:9d:4d:cb:77:e4:be:a5:c9:64:be:ec:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:37:26:5F:C6:05:3C:4F:EB:F5:31:31:1D:77:6E:96:66:39:9F
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9c:fb:aa:33:03:9e:51:06:fa:10:18:47:1b:43:9a:2d:dd:
6e:66:52:f4:90:7b:5a:42:7d:ce:07:94:4a:68:01:39:c9:17:
a9:1e:37:e0:b6:3d:e9:06:0f:bf:96:64:91:a6:f5:d3:2c:1f:
b4:d0:5c:f6:2e:28:94:19:da:b6:1b:bf:9c:83:58:0b:78:52:
c7:30:ca:60:14:3b:6a:cb:24:b8:e8:24:38:72:2d:02:aa:8c:
62:41:95:04:5a:49:73:30:c8:52:a8:23:a3:b8:b3:23:29:5f:
05:c1:ec:27:b6:c2:46:d3:41:4c:1a:44:a7:ad:48:e1:f7:61:
10:54:19:96:4d:16:ba:76:48:97:43:8d:f6:c9:01:4d:24:54:
07:da:70:69:13:ae:f9:bb:49:82:16:3c:e1:d3:dc:cd:8c:6a:
91:4f:b6:18:89:87:ed:dd:47:a4:bf:8b:f5:9d:d3:fd:5c:d0:
70:71:8b:0d:3a:6f:2c:2b:ec:b4:d2:f6:b0:24:cf:d9:5c:f1:
07:7a:57:83:c4:79:a0:ad:65:5c:83:93:65:13:7a:e4:64:bd:
3c:60:d5:7c:3e:ac:e9:25:fb:4d:a4:58:24:fc:71:f3:51:db:
0a:5b:a2:97:09:c7:a2:79:e9:fd:b9:74:e7:98:30:38:ba:1c:
0a:5f:10:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77DeIHQ5i4saWalBJDaCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjhiZjI3ZGFjNzA1ZjMxMDJlYTg4NjczNDcwZDI3ZGM4
Njg2NmMwHhcNMjUxMDE5MTAwMzA1WhcNMjUxMDIwMTAwMzA1WjAzMTEwLwYDVQQD
EyhhOGU5MzcyNjVmYzYwNTNjNGZlYmY1MzEzMTFkNzc2ZTk2NjYzOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCRNpmp3jSeDB6TXQvZX4r3hVXVd
bBHygSB7MMTbPU9KAunymOJqHl+0k7j+KGZz1cxcmwmNmtlg1yv0RPmNr4WAUz5J
r61a/qkyvPXvmQngOxQKaYcilb+Cvep6g5KSLg1xuohaLrlB5qSWjj37wB/hdO1T
jcYXB6Zu8JCdYAO4nxGbmgESUdmE8G41tPax+J7ZQBw1Qps+dIO94PNmbX9Y6Y3V
MxYcNDty60Sszce9iglwMCB316ZEm9SoiaRsoAwBKVIFDtXl1VRiI5g/nRTPdEbN
g03Nleo1tSUYC+YqkPO38cLwjbkjw/SXsi8Zs1GinU3Ld+S+pclkvuyEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjpNyZfxgU8T+v1MTEdd26WZjmfMB8GA1UdIwQY
MBaAFB5ovyfaxwXzEC6ohnNHDSfchoZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgt
YzE1NjQ3ZjU3MDEwLzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgtYzE1NjQ3ZjU3MDEw
LzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZz7qjMD
nlEG+hAYRxtDmi3dbmZS9JB7WkJ9zgeUSmgBOckXqR434LY96QYPv5Zkkab10ywf
tNBc9i4olBnathu/nINYC3hSxzDKYBQ7asskuOgkOHItAqqMYkGVBFpJczDIUqgj
o7izIylfBcHsJ7bCRtNBTBpEp61I4fdhEFQZlk0WunZIl0ON9skBTSRUB9pwaROu
+btJghY84dPczYxqkU+2GImH7d1HpL+L9Z3T/VzQcHGLDTpvLCvstNL2sCTP2Vzx
B3pXg8R5oK1lXIOTZRN65GS9PGDVfD6s6SX7TaRYJPxx81HbCluilwnHonnp/bl0
55gwOLocCl8QMQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:33 2025 by rpki-client