Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: FejndlA6uCXI2ZJwVImr/1qnpFW7xMWpwnZhkJq/CY4=
Subject key identifier: 18:6B:1D:B7:89:5D:47:7A:82:44:0E:20:70:01:36:3C:03:30:7B:E1
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 0196BF37FBE3C723581CE6A4669B45086B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0C55
Signing time: Sun 11 May 2025 12:00:39 +0000
Manifest this update: Sun 11 May 2025 12:00:39 +0000
Manifest next update: Mon 12 May 2025 12:00:39 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: 6AvwMdZ1iGv7ZSWQADuvc/1uLfuk94Nq/y1A9gPF27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:fb:e3:c7:23:58:1c:e6:a4:66:9b:45:08:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: May 11 12:00:39 2025 GMT
Not After : May 12 12:00:39 2025 GMT
Subject: CN=186b1db7895d477a82440e207001363c03307be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:05:86:db:71:e8:af:0f:8f:4d:69:59:45:
2c:03:7b:e7:bb:fa:db:f7:0b:d1:6b:d7:05:b2:56:
42:85:e1:e5:03:e9:63:31:2e:6c:e1:e7:23:64:95:
94:e1:5a:ff:b3:e9:38:2f:8a:50:b5:a4:28:af:1e:
2f:dd:c1:9b:29:fc:b7:4d:f4:a4:ba:0f:d0:11:cf:
f3:bc:53:b5:e0:8b:90:d9:3f:c1:20:71:9c:2f:f2:
41:d2:73:5c:a2:39:7d:25:97:b2:05:29:8b:b3:0d:
98:04:2e:64:f7:1a:00:11:2f:0d:77:60:74:fa:ce:
8e:6a:4b:59:d8:dc:f7:2f:fe:d4:33:31:4f:c9:57:
52:1e:ac:16:a2:ef:01:99:48:c0:1b:b4:09:c2:b3:
5d:ec:8d:18:53:fe:7d:80:8c:70:a1:02:b0:5f:6b:
93:df:e9:77:99:79:b8:e1:8b:87:96:e5:07:24:70:
9c:f5:cb:40:84:5b:41:9b:dc:5d:19:ba:16:e9:49:
cc:e1:a9:1e:70:cf:45:b8:df:af:ac:61:fa:b7:33:
23:bd:96:6e:9a:b5:09:5e:b3:5b:1f:5a:2b:f9:a9:
2a:90:8c:95:b7:6c:95:b5:94:0f:43:81:76:65:5b:
70:e1:fb:36:52:67:eb:f3:2a:7c:b5:11:c4:ec:46:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:1D:B7:89:5D:47:7A:82:44:0E:20:70:01:36:3C:03:30:7B:E1
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:22:91:57:8c:f3:e4:69:c8:d6:83:c4:d6:e6:c5:49:85:4e:
19:d2:1b:1c:f2:5d:ee:56:3d:c6:a1:55:44:c5:b9:b2:b8:4c:
69:b4:cd:36:60:bc:ee:9f:d4:e3:8c:17:c5:b2:73:7e:9e:51:
96:b1:c5:34:79:b3:bc:01:74:77:c4:76:c3:7b:c5:5c:98:77:
8c:df:f5:f9:e2:2b:62:77:87:d9:91:8d:dd:8d:f5:7d:b5:43:
1a:5c:65:24:2f:ad:41:e9:89:aa:ad:b0:5f:21:43:88:ea:5e:
eb:48:cf:46:81:22:9b:88:52:48:7a:de:bc:54:fa:e5:2d:6b:
32:44:68:6a:1e:aa:1f:68:22:53:9d:2c:4a:bd:29:f9:d3:91:
e0:fc:b4:cb:e5:2b:71:eb:9f:f4:8e:f3:3f:08:a6:4f:d7:6a:
88:08:cc:44:f9:64:a2:8f:d6:15:5f:22:9b:39:ba:45:4e:29:
20:22:06:f8:1c:3c:dc:d2:b9:31:2d:5a:15:b6:6a:56:af:fa:
19:23:f6:8b:62:b3:7a:78:05:35:d8:f5:8c:9f:ba:af:dc:2f:
dd:52:7a:29:97:6c:34:86:0a:de:71:42:2d:7a:7c:f2:7c:6d:
87:1d:f3:bd:35:fd:e3:f5:91:de:53:bc:b5:2a:6e:a5:77:f5:
cf:23:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:04:09 2025 by rpki-client