Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: ynv5Q1d9gIiR/26dYfdKo6uM7q5J/4C+pfxBykzfkPw=
Subject key identifier: 3F:5B:26:EB:30:C9:DA:AA:D5:8E:5C:C4:C6:BC:59:24:5E:06:10:13
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 0197B6A053CA43F372724AE7AF3B8B46530E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0CD5
Signing time: Sat 28 Jun 2025 13:00:49 +0000
Manifest this update: Sat 28 Jun 2025 13:00:49 +0000
Manifest next update: Sun 29 Jun 2025 13:00:49 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: cWKMJWMy7YnpJR8ZC96gxVIJ35VYkvlc0teifZFqMBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:53:ca:43:f3:72:72:4a:e7:af:3b:8b:46:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Jun 28 13:00:49 2025 GMT
Not After : Jun 29 13:00:49 2025 GMT
Subject: CN=3f5b26eb30c9daaad58e5cc4c6bc59245e061013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:a3:53:c4:40:b3:3e:dc:52:22:89:44:55:
6b:f2:a0:f2:79:d1:54:60:ef:79:80:6e:eb:d8:3f:
2a:83:8d:ba:71:9f:00:ef:c8:2b:2b:c3:73:5c:b6:
78:a5:a2:8b:af:41:30:f1:2b:70:8f:c7:33:30:33:
62:0a:ca:b8:35:b0:55:66:a5:0a:53:d2:9f:3c:78:
27:72:08:97:71:9b:e5:aa:43:bf:68:b0:3a:4b:4b:
99:0b:16:25:8f:7f:99:4e:b2:29:9b:ed:50:ed:9e:
a4:84:cd:a4:2c:d9:d2:01:71:80:fc:ec:56:57:1b:
43:7c:6d:85:ea:c9:79:fa:e6:e8:0d:24:88:51:5b:
f7:0f:11:49:b8:db:dc:2d:ee:52:53:ce:9c:a5:df:
b7:d8:0e:9c:40:af:1c:82:56:86:e3:4a:7e:a3:bb:
40:c3:37:cc:b9:83:ed:10:8d:a3:cb:a5:9a:ef:6d:
19:74:cd:19:b2:7c:a5:04:03:16:12:48:38:04:60:
e3:3b:87:de:e8:ef:0c:7b:b0:90:85:85:2e:07:d3:
d7:5b:f8:2d:34:19:73:d3:c1:50:b9:94:41:8d:4b:
83:1d:1b:3c:b3:23:03:3b:3b:ce:f3:f8:9e:dd:1a:
00:95:0d:08:a0:e2:71:f8:2f:78:3e:1f:f8:bf:56:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:26:EB:30:C9:DA:AA:D5:8E:5C:C4:C6:BC:59:24:5E:06:10:13
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:60:30:8d:45:4e:6a:59:b3:bf:9d:4f:e6:3e:9b:ff:6f:15:
3e:1a:4b:35:9e:ce:cb:dc:4c:f2:20:42:33:52:dc:67:e1:cd:
29:55:fd:33:b6:72:7c:6c:98:48:5e:43:86:fd:e3:a3:a8:dd:
fc:ba:05:62:7f:89:99:c5:a0:5f:fc:f5:47:46:77:3e:72:89:
2d:22:c7:5c:df:d9:3d:9e:7a:34:28:e8:0a:a6:65:14:48:d2:
45:e9:7d:ce:94:c6:53:29:db:5b:44:3d:ac:d3:46:89:30:ff:
bd:42:a5:a5:c7:e4:95:ce:7f:04:58:f5:c9:73:69:60:18:55:
bc:24:e1:16:0a:36:13:5d:37:2e:c6:17:47:1b:67:3a:be:19:
03:79:a3:49:75:aa:9f:f3:fa:5e:2f:43:ad:59:bc:f2:42:f1:
3d:a6:2d:ea:b1:d3:a8:89:b3:75:ce:bf:69:fb:5b:96:ee:ad:
b0:c4:f8:6c:29:42:05:41:b3:55:77:ad:c3:83:85:5f:98:61:
e7:83:e3:ea:a4:e4:8e:21:7f:6b:e0:a1:6a:2a:54:99:63:90:
61:ef:d5:44:ac:3e:43:e0:99:37:d4:5e:5b:ce:b4:f9:38:fc:
29:e6:9a:4e:5f:5f:24:a1:ce:5c:4a:1f:59:52:c0:67:05:86:
12:ef:a4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oFPKQ/NyckrnrzuLRlMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjhiZjI3ZGFjNzA1ZjMxMDJlYTg4NjczNDcwZDI3ZGM4
Njg2NmMwHhcNMjUwNjI4MTMwMDQ5WhcNMjUwNjI5MTMwMDQ5WjAzMTEwLwYDVQQD
EygzZjViMjZlYjMwYzlkYWFhZDU4ZTVjYzRjNmJjNTkyNDVlMDYxMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj6jU8RAsz7cUiKJRFVr8qDyedFU
YO95gG7r2D8qg426cZ8A78grK8NzXLZ4paKLr0Ew8Stwj8czMDNiCsq4NbBVZqUK
U9KfPHgncgiXcZvlqkO/aLA6S0uZCxYlj3+ZTrIpm+1Q7Z6khM2kLNnSAXGA/OxW
VxtDfG2F6sl5+uboDSSIUVv3DxFJuNvcLe5SU86cpd+32A6cQK8cglaG40p+o7tA
wzfMuYPtEI2jy6Wa720ZdM0ZsnylBAMWEkg4BGDjO4fe6O8Me7CQhYUuB9PXW/gt
NBlz08FQuZRBjUuDHRs8syMDOzvO8/ie3RoAlQ0IoOJx+C94Ph/4v1ZmkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9bJuswydqq1Y5cxMa8WSReBhATMB8GA1UdIwQY
MBaAFB5ovyfaxwXzEC6ohnNHDSfchoZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgt
YzE1NjQ3ZjU3MDEwLzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgtYzE1NjQ3ZjU3MDEw
LzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWAwjUVO
almzv51P5j6b/28VPhpLNZ7Oy9xM8iBCM1LcZ+HNKVX9M7ZyfGyYSF5Dhv3jo6jd
/LoFYn+JmcWgX/z1R0Z3PnKJLSLHXN/ZPZ56NCjoCqZlFEjSRel9zpTGUynbW0Q9
rNNGiTD/vUKlpcfklc5/BFj1yXNpYBhVvCThFgo2E103LsYXRxtnOr4ZA3mjSXWq
n/P6Xi9DrVm88kLxPaYt6rHTqImzdc6/aftblu6tsMT4bClCBUGzVXetw4OFX5hh
54Pj6qTkjiF/a+ChaipUmWOQYe/VRKw+Q+CZN9ReW860+Tj8KeaaTl9fJKHOXEof
WVLAZwWGEu+kQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:12 2025 by rpki-client