Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: /f4foQOdAhCyotozlMQCeGJiD7asZvFc8sohR6ys+AY=
Subject key identifier: 08:8C:8F:17:6E:1D:61:9C:5A:63:BC:43:38:AC:90:ED:11:2E:27:A4
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 0198D6986F5FA9C3981B1B927404DDDC5837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 116A
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: 7hFJ4mVZiqVjClKCsR3BEuI19wgJGjkSkndbp71YkCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6f:5f:a9:c3:98:1b:1b:92:74:04:dd:dc:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=088c8f176e1d619c5a63bc4338ac90ed112e27a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:18:48:af:1c:97:7a:02:5d:88:08:17:5e:
a7:9a:04:6c:44:e0:77:dc:56:06:84:de:d7:64:e0:
26:56:42:83:2a:db:64:7a:74:07:68:2b:20:ca:63:
99:b0:b4:bb:e6:2b:c6:57:ca:43:d2:73:0e:34:3e:
d1:93:ab:ff:10:63:83:f2:d9:f1:c6:97:49:b2:fd:
3f:c8:f9:90:7a:e4:56:60:6c:be:03:76:d3:1d:97:
41:25:9b:d0:fa:00:8e:ab:1e:28:6c:3d:e7:e0:dc:
1d:65:bb:3e:dc:92:56:fa:8f:5e:3b:3e:27:79:45:
19:cc:81:c7:82:0b:63:15:45:ba:e3:c1:b2:99:43:
df:ca:99:81:ad:a7:fa:31:1b:3a:3f:bc:f2:cd:f3:
5a:d8:88:0f:3e:eb:25:b6:cd:f5:f7:0f:c6:04:66:
f1:0a:f9:cb:25:f5:5f:8c:58:fb:dd:b6:16:68:51:
ea:23:fa:1d:36:e9:3a:69:86:9d:df:66:ba:90:5f:
33:76:77:2c:74:9d:57:4a:11:e2:6b:4d:3c:00:ae:
02:85:2d:3e:cc:9f:92:fb:cc:a2:99:f6:f1:0a:b1:
be:40:1e:62:5a:88:83:d6:2c:40:5c:07:18:7e:e7:
ba:85:a7:fc:1d:7e:e3:26:07:d5:50:45:16:23:e6:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:8F:17:6E:1D:61:9C:5A:63:BC:43:38:AC:90:ED:11:2E:27:A4
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c2:3e:3b:05:a2:d9:37:d9:81:a6:f9:7e:3b:90:fa:eb:bc:
ab:92:2d:48:1e:71:5d:17:99:5d:59:1a:de:7d:e1:f3:d2:27:
3a:99:14:60:0c:93:16:e8:a2:d5:57:9f:27:56:65:32:e7:bd:
15:8e:5f:fb:7b:e1:d5:b2:7d:d8:b7:57:49:04:7e:b9:d5:2a:
7e:15:ae:12:b2:e7:93:b8:c4:da:f4:95:69:29:b8:50:20:1c:
02:12:af:34:37:19:ed:d5:7d:d1:bf:40:a7:cd:6c:1f:1d:de:
07:6d:52:8b:3a:4a:77:95:51:e1:09:fe:d7:55:09:b9:94:24:
4a:5b:b8:cd:77:7f:48:57:ab:c6:1c:bb:83:2b:2f:47:c7:a4:
dd:30:37:8d:60:17:51:c2:a7:8c:3c:a2:63:9c:f2:a5:e8:36:
d3:b3:76:9b:cb:af:81:7d:12:12:ca:e5:b9:df:12:92:db:c9:
c8:dd:e4:db:d4:bb:5c:0a:9d:93:2b:35:5c:b8:dc:4a:31:c0:
ed:db:49:36:b4:ce:7e:12:97:33:b0:bf:ea:54:5d:8a:33:93:
2b:bc:af:b5:af:76:3a:59:c9:ef:61:f7:cf:af:f4:6d:a2:ff:
16:87:ca:18:33:7a:1e:3d:48:11:0a:f3:13:7d:65:6a:e3:94:
5a:20:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:47 2025 by rpki-client