Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: uxIgpGz/2ZFCqzqTwCjsnySHGS5TFr0rXxj0T1mIexI=
Subject key identifier: AE:39:0C:60:86:FA:A7:D6:F2:93:C0:B9:69:F8:44:86:2D:E1:89:7A
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 0197B8C59308A7465A9EDD2BA72BEDB6A046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 10D6
Signing time: Sat 28 Jun 2025 23:00:45 +0000
Manifest this update: Sat 28 Jun 2025 23:00:45 +0000
Manifest next update: Sun 29 Jun 2025 23:00:45 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: 6dmJr7EzR3+7TroVoZpq8kyNzOXdKl/fRHqRQQCkGeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:93:08:a7:46:5a:9e:dd:2b:a7:2b:ed:b6:a0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Jun 28 23:00:45 2025 GMT
Not After : Jun 29 23:00:45 2025 GMT
Subject: CN=ae390c6086faa7d6f293c0b969f844862de1897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:a9:c6:a8:fe:e7:94:8e:a8:aa:90:ae:12:
af:92:bc:1d:db:28:ee:ca:4e:e8:18:f3:a1:1d:fc:
33:7b:ed:71:07:aa:b5:56:a4:96:54:0c:32:93:c0:
32:f3:76:08:2f:e2:ff:65:64:94:50:67:6a:d9:1c:
e9:0b:ae:7d:b5:5c:a2:a6:80:d6:0b:ce:ca:a1:7c:
04:04:03:a7:d3:f1:59:37:18:16:aa:e6:ee:ce:11:
92:c5:5a:6f:38:08:6e:0f:6b:3a:f8:81:23:62:ff:
ec:da:bf:12:e2:83:1c:98:c4:60:a2:0c:93:76:d4:
a0:57:ba:26:9c:67:2b:a8:c4:e6:d4:72:3c:3e:44:
bd:6b:2d:3f:19:e5:83:07:d0:e9:0a:3b:89:bb:27:
b0:a8:2c:b4:62:25:1a:4f:bc:e3:70:6f:e8:9f:4f:
72:de:08:e1:d0:a1:34:bb:2d:2f:14:4e:a4:4e:1a:
f3:1e:5f:21:4e:01:65:e7:43:33:2b:6e:e2:21:e3:
64:aa:ee:21:32:c1:08:7a:4d:b3:dc:e1:c2:3b:5d:
c3:dd:69:8b:d0:95:01:82:3b:87:52:c3:3e:60:ad:
be:a7:51:b3:40:21:f3:70:e7:77:f5:71:e6:d6:69:
68:89:9e:cc:9a:0a:12:d3:3e:2e:8f:46:f7:f0:88:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:0C:60:86:FA:A7:D6:F2:93:C0:B9:69:F8:44:86:2D:E1:89:7A
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:47:4a:82:98:cc:89:11:0f:3b:f0:b1:e4:a9:db:7d:ed:b7:
87:ab:5e:3e:8e:75:5c:86:43:f4:1f:8b:aa:9f:9a:a2:89:6e:
74:d5:9b:17:26:e7:f6:ae:07:75:04:ad:4f:e1:23:00:a9:c3:
87:eb:fb:2d:af:6c:de:ef:94:3c:b3:58:58:a0:1b:af:e1:c4:
c8:fb:e7:02:0b:1e:bd:20:1a:c0:29:53:7d:4e:66:40:c3:76:
7c:90:89:f5:cc:84:43:9e:ba:ed:47:41:e6:04:ab:22:62:b1:
a1:17:0b:da:21:af:3d:dd:f9:c5:91:00:17:7f:8d:4d:5f:f4:
07:0c:7a:62:5a:d0:c6:14:eb:78:02:8e:42:0b:2d:59:8a:5c:
e1:8a:cd:c1:ed:5e:30:05:2e:de:70:e4:3e:29:48:9e:95:93:
cd:a4:8e:48:c4:31:53:88:bb:f4:96:c4:48:16:16:df:56:3f:
60:d5:d2:90:b6:36:c7:13:44:60:66:2c:55:10:12:74:16:f1:
d6:2d:84:86:f5:aa:ab:d6:a9:82:15:0c:e0:88:1d:81:99:2d:
7e:d9:ff:12:59:ab:c8:13:a0:15:e4:ad:23:e3:ce:ce:a3:36:
e5:29:7d:76:cd:c5:2f:87:64:dc:e8:56:c8:c6:7a:da:ac:63:
e6:21:6c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xZMIp0Zant0rpyvttqBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODRhOWU0MGY5MDc1ZDhlYWZjZjY4YTAyNDg0ZjUyOTI0
MDk1NmEwHhcNMjUwNjI4MjMwMDQ1WhcNMjUwNjI5MjMwMDQ1WjAzMTEwLwYDVQQD
EyhhZTM5MGM2MDg2ZmFhN2Q2ZjI5M2MwYjk2OWY4NDQ4NjJkZTE4OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ2pxqj+55SOqKqQrhKvkrwd2yju
yk7oGPOhHfwze+1xB6q1VqSWVAwyk8Ay83YIL+L/ZWSUUGdq2RzpC659tVyipoDW
C87KoXwEBAOn0/FZNxgWqubuzhGSxVpvOAhuD2s6+IEjYv/s2r8S4oMcmMRgogyT
dtSgV7omnGcrqMTm1HI8PkS9ay0/GeWDB9DpCjuJuyewqCy0YiUaT7zjcG/on09y
3gjh0KE0uy0vFE6kThrzHl8hTgFl50MzK27iIeNkqu4hMsEIek2z3OHCO13D3WmL
0JUBgjuHUsM+YK2+p1GzQCHzcOd39XHm1mloiZ7MmgoS0z4uj0b38IgnuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK45DGCG+qfW8pPAuWn4RIYt4Yl6MB8GA1UdIwQY
MBaAFByEqeQPkHXY6vz2igJIT1KSQJVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4Mzkt
NWMzZmFmMzczOTdhLzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4MzktNWMzZmFmMzczOTdh
LzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkdKgpjM
iREPO/Cx5Knbfe23h6tePo51XIZD9B+Lqp+aooludNWbFybn9q4HdQStT+EjAKnD
h+v7La9s3u+UPLNYWKAbr+HEyPvnAgsevSAawClTfU5mQMN2fJCJ9cyEQ5667UdB
5gSrImKxoRcL2iGvPd35xZEAF3+NTV/0Bwx6YlrQxhTreAKOQgstWYpc4YrNwe1e
MAUu3nDkPilInpWTzaSOSMQxU4i79JbESBYW31Y/YNXSkLY2xxNEYGYsVRASdBbx
1i2EhvWqq9apghUM4IgdgZktftn/ElmryBOgFeStI+POzqM25Sl9ds3FL4dk3OhW
yMZ62qxj5iFs6g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:11 2025 by rpki-client