
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File: HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier: 3Brzek8OXxbyHfmGTJ6etYwS5F9JhlNDCKT8FUFrRaQ=
Subject key identifier: D2:88:5C:06:85:4A:FD:B8:C6:82:70:D7:03:A9:21:38:26:29:19:AD
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 0196BC6E4BC9D753521BF6AE686D75861CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number: 1539
Signing time: Sat 10 May 2025 23:01:07 +0000
Manifest this update: Sat 10 May 2025 23:01:07 +0000
Manifest next update: Sun 11 May 2025 23:01:07 +0000
Files and hashes: 1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: N1p3gcG8NEMs1UkOW7F3WElPCVnZ5bs2WyBkjAHZqnA=)
2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:4b:c9:d7:53:52:1b:f6:ae:68:6d:75:86:1c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: May 10 23:01:07 2025 GMT
Not After : May 11 23:01:07 2025 GMT
Subject: CN=d2885c06854afdb8c68270d703a92138262919ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:ee:a8:ce:22:bd:b1:48:38:38:e9:da:a3:
ec:d7:48:db:92:7c:33:ea:d4:1d:66:16:6a:f1:dc:
72:3b:92:b9:2e:fa:a4:8b:b3:b7:6b:95:02:3e:58:
26:c7:57:fa:2e:b6:49:e5:e1:c1:aa:a6:7b:8f:bb:
c1:fe:8e:40:d2:3f:ab:a1:23:cc:95:aa:6d:92:73:
f8:89:65:32:8d:f0:0e:37:fa:a2:eb:42:28:29:72:
73:61:1b:c2:57:22:18:21:2b:a6:11:64:4c:a5:5c:
cf:54:95:d1:00:83:50:86:20:fb:3d:99:f1:80:a3:
7f:76:c5:0a:19:e4:cb:39:14:ae:70:9c:4a:81:92:
f6:bf:85:5c:b3:43:4c:e4:4d:16:f6:45:cc:5d:b9:
38:2f:23:e8:35:fa:03:73:58:ca:a0:21:9c:fc:69:
b2:85:6f:62:6e:3a:9e:65:6d:77:cc:0e:ba:e9:2d:
1c:01:29:2a:82:5d:30:2a:db:93:bb:78:3e:80:2a:
9e:f1:67:f0:52:19:eb:63:e6:2c:67:5f:92:65:7f:
4c:d1:a6:f0:f4:7c:98:a2:00:ba:94:80:f3:90:c8:
ca:f3:7b:2d:98:e9:50:ea:9e:f9:17:3e:c0:0e:75:
a7:90:8c:80:78:b5:8c:1e:05:e7:4a:1f:0c:23:12:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:88:5C:06:85:4A:FD:B8:C6:82:70:D7:03:A9:21:38:26:29:19:AD
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:99:d9:78:a8:b3:56:9b:95:23:5f:ec:2e:6d:4c:af:f9:3f:
d4:ca:1f:59:89:ca:dc:be:41:b2:ad:3d:f1:4f:8d:c1:ab:43:
70:bc:2e:c2:58:8d:1e:fa:d4:1d:9d:71:60:8e:7b:b7:2d:13:
51:1c:74:e5:70:3f:b4:7e:bc:67:cc:25:7e:5b:df:f1:1f:2a:
47:62:17:37:00:b7:21:06:86:b7:5d:12:f4:af:05:e3:b4:d4:
6b:57:98:bc:c8:33:de:45:c6:82:8a:08:c5:84:9e:94:d6:0c:
f8:0e:42:b3:d8:2d:bc:23:c1:98:bd:b9:70:f5:cf:b7:74:b1:
33:94:04:3a:ed:89:93:c6:70:13:43:99:75:70:03:e8:21:6a:
b7:38:47:0c:54:6d:31:fa:83:49:9a:b6:53:22:9b:de:26:e2:
05:44:aa:b6:cd:6a:34:08:d9:1b:88:1d:3e:a9:0f:58:e2:cc:
1b:28:56:30:ec:cf:c1:3b:0e:73:8d:70:88:dd:0a:30:3d:32:
a9:45:d3:72:4b:2b:c7:13:26:95:44:9f:62:85:f1:f1:fa:46:
10:7e:f3:aa:eb:f5:48:b9:b7:63:88:90:07:d7:9d:61:b5:f2:
08:52:bd:27:cf:d5:dc:aa:1f:00:59:94:b6:37:e5:b5:0b:12:
07:cc:50:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bkvJ11NSG/auaG11hhyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjMzZWVlNjI0YzE5MmM2YzdkYWRhMTQzMmRlMGI5ZTc4
YjA5YmEwHhcNMjUwNTEwMjMwMTA3WhcNMjUwNTExMjMwMTA3WjAzMTEwLwYDVQQD
EyhkMjg4NWMwNjg1NGFmZGI4YzY4MjcwZDcwM2E5MjEzODI2MjkxOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQTuqM4ivbFIODjp2qPs10jbknwz
6tQdZhZq8dxyO5K5Lvqki7O3a5UCPlgmx1f6LrZJ5eHBqqZ7j7vB/o5A0j+roSPM
laptknP4iWUyjfAON/qi60IoKXJzYRvCVyIYISumEWRMpVzPVJXRAINQhiD7PZnx
gKN/dsUKGeTLORSucJxKgZL2v4Vcs0NM5E0W9kXMXbk4LyPoNfoDc1jKoCGc/Gmy
hW9ibjqeZW13zA666S0cASkqgl0wKtuTu3g+gCqe8WfwUhnrY+YsZ1+SZX9M0abw
9HyYogC6lIDzkMjK83stmOlQ6p75Fz7ADnWnkIyAeLWMHgXnSh8MIxK2QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKIXAaFSv24xoJw1wOpITgmKRmtMB8GA1UdIwQY
MBaAFBwjPu5iTBksbH2toUMt4Lnniwm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYt
NTdhOTUxZjQ5OTMwLzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYtNTdhOTUxZjQ5OTMw
LzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5nZeKiz
VpuVI1/sLm1Mr/k/1MofWYnK3L5Bsq098U+NwatDcLwuwliNHvrUHZ1xYI57ty0T
URx05XA/tH68Z8wlflvf8R8qR2IXNwC3IQaGt10S9K8F47TUa1eYvMgz3kXGgooI
xYSelNYM+A5Cs9gtvCPBmL25cPXPt3SxM5QEOu2Jk8ZwE0OZdXAD6CFqtzhHDFRt
MfqDSZq2UyKb3ibiBUSqts1qNAjZG4gdPqkPWOLMGyhWMOzPwTsOc41wiN0KMD0y
qUXTcksrxxMmlUSfYoXx8fpGEH7zquv1SLm3Y4iQB9edYbXyCFK9J8/V3KofAFmU
tjfltQsSB8xQ9w==
-----END CERTIFICATE-----
Generated at Sun May 11 06:36:27 2025 by rpki-client