Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: jr3f2gbXFLB0tduJApi+tsv2L7JQdijMpfNu+mxBA/8=
Subject key identifier: 91:49:A5:2B:EF:F0:1D:EC:05:BB:0B:27:F5:0C:87:0C:CA:30:33:0E
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 0199FFFE469F59FF540D226EE3C57B8B96F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 1204
Signing time: Mon 20 Oct 2025 05:01:18 +0000
Manifest this update: Mon 20 Oct 2025 05:01:18 +0000
Manifest next update: Tue 21 Oct 2025 05:01:18 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: lERWejeQ+9v4GUAim9QJGFepYdjzChpmgr7wTUlAOXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:46:9f:59:ff:54:0d:22:6e:e3:c5:7b:8b:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Oct 20 05:01:18 2025 GMT
Not After : Oct 21 05:01:18 2025 GMT
Subject: CN=9149a52beff01dec05bb0b27f50c870cca30330e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:19:4a:97:1d:48:a2:da:c2:82:21:5f:e8:
c9:ad:8f:13:14:ab:47:c9:51:3d:7a:2e:52:c3:51:
0c:75:93:8f:43:e0:80:06:40:22:b4:4c:8a:15:94:
1a:b1:ea:6a:b6:39:78:3f:b1:f7:fa:b2:b2:c0:97:
53:cc:ec:20:2f:e4:fa:1c:72:a6:d9:25:59:24:34:
d9:12:7a:ab:6f:35:36:68:07:80:f1:6d:5a:8f:77:
66:48:57:54:5d:ad:a8:05:b3:c3:91:21:87:eb:b9:
e6:51:b5:b1:00:e5:e8:b6:b0:a2:91:91:b8:11:10:
e9:a9:38:18:d6:5c:8e:86:1a:17:ec:30:0f:8e:f2:
69:4d:9a:1a:7d:05:23:63:ed:8c:01:61:49:d3:d3:
9b:c1:53:bf:a3:fe:63:5c:1e:f3:24:2d:18:d6:7e:
64:3a:40:50:f8:39:d0:e9:08:34:b0:46:4b:76:c7:
f2:00:23:6b:70:aa:b8:09:fc:12:b7:bc:8b:c3:6a:
c5:62:b0:9f:f3:69:ae:93:26:bb:85:c5:e3:17:dc:
5f:db:ac:35:08:b0:6d:12:1c:a1:48:cd:17:37:b4:
37:48:89:ff:6a:12:a8:ff:2d:6a:6a:6b:a9:7f:29:
9c:55:3b:17:90:bb:28:8b:8f:bd:88:ef:22:6b:6f:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:A5:2B:EF:F0:1D:EC:05:BB:0B:27:F5:0C:87:0C:CA:30:33:0E
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:2d:c1:d3:30:72:76:cb:3f:87:50:62:a6:77:af:04:d9:
28:1a:a1:e6:0b:81:ec:f3:4b:a3:51:8a:37:49:4d:b7:aa:16:
ec:52:1c:5a:98:80:e1:13:e9:42:78:93:66:14:87:3d:e7:b7:
d2:d6:19:77:fb:55:59:49:79:32:7b:1f:27:a2:70:72:1b:37:
3a:cd:b9:e2:13:35:ad:62:6d:10:c1:56:64:dc:09:5f:ff:e3:
33:3b:79:70:e3:c7:9c:d1:09:2e:fb:01:e5:54:1b:4b:04:ee:
24:28:e3:b1:2d:da:98:ed:dc:71:11:09:99:17:ad:3c:74:8b:
42:57:c8:49:cc:dd:1f:12:bc:8f:55:9e:11:4a:b1:27:21:3e:
9f:b7:f0:03:cb:40:55:68:d6:ec:39:5e:fa:02:5e:56:c7:21:
e4:8f:e2:52:9e:d1:de:72:a9:c7:49:ea:45:c7:92:c9:a0:32:
e8:b9:03:02:1c:0d:bc:66:12:44:6a:c8:12:98:02:48:b9:7a:
e6:cc:5d:ef:1c:55:e3:38:75:0a:4b:63:ab:6e:05:76:eb:40:
1e:f2:a2:0e:c4:00:ee:a6:7e:7f:18:cc:70:89:c8:35:27:0c:
6c:0c:b4:76:f5:e7:7b:aa:f8:46:ef:24:20:ef:8f:e9:d0:22:
20:df:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:30 2025 by rpki-client