Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File: HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier: XXaxXWGsnLIrubF4OFMMp8bppA0QozvgBxhY4xmPs/4=
Subject key identifier: 13:58:D3:60:43:A1:73:04:CE:36:DA:28:B7:02:76:D9:38:A8:B6:14
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 0197B77C8FBED9077B328BABF66F957DB8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: 5EymvVioIFTAVAE2ho8fTWLVhyIDHWkI7tMpj3w6rwo=)
3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8f:be:d9:07:7b:32:8b:ab:f6:6f:95:7d:b8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=1358d36043a17304ce36da28b70276d938a8b614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:5d:0d:b9:a7:8a:95:d3:87:08:9e:5e:99:
22:2c:2f:63:6d:06:32:bc:2c:de:0d:6c:97:8d:62:
4a:7d:ad:59:e8:54:36:9c:fb:28:39:92:98:71:26:
81:15:a8:68:a3:f7:c6:eb:3e:0e:5a:fe:11:09:c0:
56:42:ee:81:8b:38:90:63:50:b8:91:9e:f9:2b:43:
a6:35:25:33:ae:db:47:d4:df:3e:83:16:bb:95:f0:
85:f3:80:1a:07:13:c7:a7:b1:37:4b:9b:6b:81:4c:
6e:57:5a:5e:89:bd:09:66:4f:54:ca:0e:62:f6:fd:
28:c2:c2:18:c9:fc:f9:a6:6e:62:85:59:7a:2e:f5:
34:5b:97:aa:ff:fa:8f:59:fb:9b:ba:e2:d1:ad:64:
c0:7b:98:b2:af:8c:dc:39:9b:9d:62:45:a7:90:33:
14:0d:04:fe:28:68:f0:e7:67:b4:81:3f:34:d5:4b:
cf:af:9c:dd:c8:a1:c3:cc:7a:fa:50:08:80:5b:98:
e3:1b:84:5e:8b:fc:13:7a:1e:a1:86:f4:46:ac:05:
0a:bc:3a:74:83:b3:a3:c9:d4:74:ae:e3:39:6c:46:
20:53:36:2f:10:67:55:6f:d7:eb:e4:2e:60:85:03:
b4:7f:5e:c4:03:a0:1c:0a:74:78:49:bb:18:1f:0f:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:58:D3:60:43:A1:73:04:CE:36:DA:28:B7:02:76:D9:38:A8:B6:14
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ac:fc:7b:27:d4:4d:f8:39:41:9c:fa:0d:aa:c1:55:b6:48:
0d:2e:70:d3:58:75:e3:47:df:e5:8f:fd:60:db:cb:b3:18:24:
65:1a:06:8f:41:0f:e6:1d:1e:f7:4b:f3:35:87:2c:49:3e:f4:
df:c5:7a:06:f5:53:3b:38:3a:ca:c9:cb:02:31:df:07:4a:87:
20:30:e2:c3:cf:90:b8:ae:12:10:e5:64:dd:e2:38:6d:cc:c1:
72:18:bc:35:75:05:5c:9a:5c:74:50:18:f6:ed:97:8e:de:0a:
2b:6a:15:ef:e0:c2:ae:75:b9:e6:62:c2:5a:a5:4a:f2:f4:11:
42:d7:6f:f7:8a:f4:67:2f:5a:a2:73:6d:79:f6:f3:7c:90:68:
a4:31:db:b9:b0:17:27:89:9d:d8:d4:ec:b0:30:57:ba:4b:51:
6a:db:7b:53:06:6f:21:89:57:bd:8c:b2:bf:cf:95:ea:7d:9d:
86:a6:f5:61:27:91:a8:3f:51:9b:f9:2b:32:b1:7a:24:1e:24:
13:88:37:c5:c7:54:58:82:eb:7e:2b:ee:84:d6:4d:7c:65:08:
e2:e2:7e:0e:86:ea:11:f7:8b:b4:60:86:2d:2f:15:fd:3a:ec:
c0:2e:6e:9d:17:49:f8:fd:ae:d1:4f:ad:b0:aa:a2:1a:f5:42:
61:1e:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:12 2025 by rpki-client