Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: NvXoWZ/w99voir95MB172xvJONCiZsfJGGmYkdTKee8=
Subject key identifier: 44:7D:87:C3:42:4E:D1:66:2C:00:87:06:70:5F:A0:49:6C:75:E8:A1
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 01969ED170D7EA8328CCAFD1D3754119B44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 1044
Signing time: Mon 05 May 2025 05:00:48 +0000
Manifest this update: Mon 05 May 2025 05:00:48 +0000
Manifest next update: Tue 06 May 2025 05:00:48 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: 1Fj/wSQZWJQOLWaRMJ63owIFTWFR1DnZXd4ePNNLFhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:70:d7:ea:83:28:cc:af:d1:d3:75:41:19:b4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: May 5 05:00:48 2025 GMT
Not After : May 6 05:00:48 2025 GMT
Subject: CN=447d87c3424ed1662c008706705fa0496c75e8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:0c:d1:a0:e7:73:ba:78:02:d8:fa:92:6e:
be:5d:22:e2:c8:90:72:9a:82:7c:ac:ba:9e:b4:60:
76:29:d9:f2:82:3b:d3:44:2b:e4:dd:4d:a3:01:4f:
bd:40:70:37:b8:bc:c1:b9:50:a1:21:de:21:f0:7b:
d9:14:7b:de:84:af:be:46:96:a3:5e:68:82:f9:e7:
ce:8d:41:6d:2e:2a:f9:eb:1f:9b:4b:77:d5:ab:d8:
81:30:79:b4:e1:dc:1f:53:b3:71:42:91:a6:98:13:
7c:82:ce:dc:e3:0a:1e:e2:a7:45:d1:47:51:e6:a3:
bd:f2:46:b8:75:92:29:80:9f:f2:48:ff:c3:c8:0d:
18:7d:28:a4:92:6b:57:17:ea:e3:de:73:9f:7b:93:
58:13:b6:0b:bc:24:f4:42:bc:e6:36:e5:b8:e7:50:
7e:07:d7:2b:68:50:99:94:4b:02:17:c8:f8:6f:cd:
f8:c0:56:d9:a6:b6:59:fc:02:c1:8e:72:e0:1c:26:
b9:2d:48:0e:40:e3:1c:15:19:a7:41:51:b5:f2:9a:
70:2d:2f:da:00:1e:78:c7:1b:41:1d:28:0b:3c:de:
fa:04:e0:c6:23:3e:ee:29:4e:e2:33:02:b8:dd:1f:
62:95:0d:3d:d3:04:c9:ba:fd:20:f3:c8:33:d0:db:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:87:C3:42:4E:D1:66:2C:00:87:06:70:5F:A0:49:6C:75:E8:A1
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ee:e1:9e:70:5a:eb:51:cf:6c:ae:af:f4:1e:8c:39:02:63:
b3:00:78:a8:38:16:6b:c2:f3:bf:c7:89:49:7d:0c:73:56:61:
37:8b:18:4a:9a:97:87:87:93:2f:1a:68:de:d4:aa:68:42:7b:
c0:99:30:ed:a0:5d:ae:dd:a9:f2:20:b1:8a:4d:66:b4:78:22:
6a:e5:df:9b:28:1f:da:23:4f:94:0c:e7:30:82:27:59:55:62:
2f:6a:e5:1d:ce:a7:5f:74:aa:bc:75:d3:1b:ec:65:c8:5c:31:
10:2f:82:f4:d6:f5:89:4a:29:22:64:01:4e:71:fa:ce:69:a0:
f3:57:32:2a:4f:30:dd:90:87:37:9d:44:44:84:76:7d:67:b0:
20:5b:26:ab:a8:c2:2c:8b:bf:f2:dd:6d:2c:d3:8a:6c:8e:ed:
a6:a5:2d:be:89:8a:af:de:3b:e6:67:3b:44:5d:c0:42:02:85:
14:3b:bb:bd:1c:6e:1a:a8:65:ec:4d:5e:c2:50:4f:fa:1c:d4:
f1:9b:87:ae:82:96:bd:37:ba:0c:58:67:17:50:21:4e:0c:98:
49:ed:d9:8e:0a:5f:22:2b:6f:2c:97:71:bf:3b:73:a0:90:e3:
26:2c:ae:f5:34:c9:b3:cd:54:22:ca:f5:31:13:d4:6f:64:66:
f3:91:b1:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0XDX6oMozK/R03VBGbRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODRhOWU0MGY5MDc1ZDhlYWZjZjY4YTAyNDg0ZjUyOTI0
MDk1NmEwHhcNMjUwNTA1MDUwMDQ4WhcNMjUwNTA2MDUwMDQ4WjAzMTEwLwYDVQQD
Eyg0NDdkODdjMzQyNGVkMTY2MmMwMDg3MDY3MDVmYTA0OTZjNzVlOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR0M0aDnc7p4Atj6km6+XSLiyJBy
moJ8rLqetGB2KdnygjvTRCvk3U2jAU+9QHA3uLzBuVChId4h8HvZFHvehK++Rpaj
XmiC+efOjUFtLir56x+bS3fVq9iBMHm04dwfU7NxQpGmmBN8gs7c4woe4qdF0UdR
5qO98ka4dZIpgJ/ySP/DyA0YfSikkmtXF+rj3nOfe5NYE7YLvCT0QrzmNuW451B+
B9craFCZlEsCF8j4b834wFbZprZZ/ALBjnLgHCa5LUgOQOMcFRmnQVG18ppwLS/a
AB54xxtBHSgLPN76BODGIz7uKU7iMwK43R9ilQ090wTJuv0g88gz0Ns3uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER9h8NCTtFmLACHBnBfoElsdeihMB8GA1UdIwQY
MBaAFByEqeQPkHXY6vz2igJIT1KSQJVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4Mzkt
NWMzZmFmMzczOTdhLzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4MzktNWMzZmFmMzczOTdh
LzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+7hnnBa
61HPbK6v9B6MOQJjswB4qDgWa8Lzv8eJSX0Mc1ZhN4sYSpqXh4eTLxpo3tSqaEJ7
wJkw7aBdrt2p8iCxik1mtHgiauXfmygf2iNPlAznMIInWVViL2rlHc6nX3SqvHXT
G+xlyFwxEC+C9Nb1iUopImQBTnH6zmmg81cyKk8w3ZCHN51ERIR2fWewIFsmq6jC
LIu/8t1tLNOKbI7tpqUtvomKr9475mc7RF3AQgKFFDu7vRxuGqhl7E1ewlBP+hzU
8ZuHroKWvTe6DFhnF1AhTgyYSe3ZjgpfIitvLJdxvztzoJDjJiyu9TTJs81UIsr1
MRPUb2Rm85GxRA==
-----END CERTIFICATE-----
Generated at Mon May 5 14:59:35 2025 by rpki-client