Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
File: Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json)
Hash identifier: pdnhCZO8YtUHqQBR32fVnmu5mevNwYPuHk0L7uc+nBc=
Subject key identifier: 2C:55:C7:76:4B:3F:7B:D0:24:66:A4:40:BF:43:D6:67:36:F4:52:16
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Certificate issuer: /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial: 0198499C6E1A7352B443CA9A5BCEE30ECD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 02:00:45 +0000
Manifest this update: Sun 27 Jul 2025 02:00:45 +0000
Manifest next update: Mon 28 Jul 2025 02:00:45 +0000
Files and hashes: 1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: 0k39E5eEKJtaItlE1TJF6f65y0cKVKfz4s37pxR11eY=)
2: UdTz9ESnCBONhFhPnKTJSPAPKew.roa (hash: 0eKPRYHWi1Fk+s60KVEthvqfye7EFF2oFsVLARt647E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6e:1a:73:52:b4:43:ca:9a:5b:ce:e3:0e:cd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Validity
Not Before: Jul 27 02:00:45 2025 GMT
Not After : Jul 28 02:00:45 2025 GMT
Subject: CN=2c55c7764b3f7bd02466a440bf43d66736f45216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:9f:f1:91:fe:b9:08:7b:34:0e:3a:08:c5:
60:be:f4:66:6c:20:3a:5b:0c:59:cc:14:9f:e0:18:
ca:66:dd:34:62:a6:ca:1f:4b:71:95:23:19:38:84:
21:ad:78:d9:60:8c:79:ee:d2:da:dc:e8:fd:33:ac:
a5:6b:c6:57:eb:ee:24:e2:0f:47:cc:a1:1f:26:37:
1f:ce:73:36:76:2e:17:82:87:88:fa:f0:79:0e:2a:
ea:92:77:c3:ff:fe:96:3c:48:81:a7:c8:b1:c9:ed:
80:d5:00:5d:2b:a3:e6:d9:46:01:16:92:5e:91:70:
69:7f:35:1c:39:d2:2b:95:d4:a0:4b:6d:bf:96:b7:
3f:d5:76:92:03:19:0a:74:fe:16:6c:75:11:2f:6f:
3b:b3:17:c9:11:f6:0a:8a:95:e9:b1:0b:d0:d9:ed:
ce:d2:8d:1e:2a:de:4d:a5:c4:a6:97:95:c8:49:c2:
21:70:e5:14:0f:03:f7:28:17:48:20:b2:d5:89:8f:
c6:a7:d8:01:79:ce:87:38:69:4c:bc:f6:3b:67:53:
4f:46:8a:58:0c:e5:a4:94:15:f4:bf:21:fb:7e:3a:
b4:3c:e9:81:4e:86:1e:9b:ce:81:6f:0c:8b:f8:f2:
49:06:32:4e:7e:53:2a:01:16:7e:0d:0d:12:0d:3b:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:55:C7:76:4B:3F:7B:D0:24:66:A4:40:BF:43:D6:67:36:F4:52:16
X509v3 Authority Key Identifier:
keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:45:f4:e5:64:92:84:55:bf:3b:dd:93:73:c3:0c:87:4a:
61:46:47:4d:67:2e:23:a3:5d:ff:63:af:f0:82:87:45:78:1f:
c2:21:f6:ad:ae:aa:c5:d8:6d:20:05:6e:8f:70:9e:43:8c:89:
b5:16:d0:29:96:71:2b:67:8a:e8:68:43:cf:5d:36:c0:4b:af:
aa:73:2d:73:35:69:36:f0:6d:df:6e:d6:54:af:cf:14:9a:4b:
41:0c:c6:76:b6:14:bc:71:3a:e5:d5:73:7a:ad:77:97:56:c8:
4f:9a:9a:42:e5:2d:a4:9e:a2:b3:62:62:7b:36:ab:25:fe:fe:
d6:06:43:99:8e:f9:65:84:dc:43:d6:da:c8:09:b5:31:a4:63:
0f:f6:b5:16:41:3a:32:55:db:76:8a:6b:db:7d:d3:25:ac:1e:
d5:28:40:c5:66:d8:bf:6b:0c:30:21:16:54:06:ef:b3:20:2c:
36:f0:23:66:48:a0:69:ea:1b:63:6d:51:32:df:a2:51:0a:11:
43:3a:70:1c:03:cd:5a:1e:c7:66:6d:d9:ba:a3:65:96:26:e7:
63:e8:0e:80:10:4b:dc:c8:30:5c:9b:4e:f0:59:ec:db:e1:ee:
dc:a5:91:f0:e2:8a:a7:f9:f9:d1:a9:d2:35:25:60:f2:20:f1:
dd:4c:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:48 2025 by rpki-client