Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: S/1WjoC8TCM3d6SQyX+K4b0ccx2ik3QIapXTVnPff2Y=
Subject key identifier: 02:79:1C:BB:61:42:F4:6D:A6:FA:06:3B:7A:CC:99:0E:BF:A7:6D:C2
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 01984588B24A4C5711C2850197897A11C4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0D1F
Signing time: Sat 26 Jul 2025 07:00:43 +0000
Manifest this update: Sat 26 Jul 2025 07:00:43 +0000
Manifest next update: Sun 27 Jul 2025 07:00:43 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: GZXtela5TggsqMCF7OwinxquosC5s2hlZ1jQ/wFWEFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:b2:4a:4c:57:11:c2:85:01:97:89:7a:11:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Jul 26 07:00:43 2025 GMT
Not After : Jul 27 07:00:43 2025 GMT
Subject: CN=02791cbb6142f46da6fa063b7acc990ebfa76dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:5a:59:18:ad:01:4c:01:d9:6e:0b:1a:df:
5f:db:b2:68:b5:44:c3:b6:39:d3:34:5d:cf:d3:be:
d8:bd:1d:ce:03:4a:b7:f0:1d:51:c6:b0:8c:55:ea:
e6:b3:c1:80:a0:8d:f7:eb:e6:cf:5c:d9:fd:4d:f4:
9d:4a:b7:60:ea:71:48:b0:d8:9f:de:ea:d7:19:e3:
0e:36:e5:40:47:ea:08:d7:1b:13:9c:53:01:2e:7d:
a5:0b:34:f9:8c:22:20:3f:6c:66:fd:71:da:62:73:
de:8c:02:74:19:63:53:f4:2b:00:88:d1:b2:5c:23:
2f:61:c2:4a:6d:a4:db:39:cb:19:43:c3:24:a5:24:
5e:84:6d:48:b6:00:a2:47:a2:b9:f7:df:05:b6:4a:
b7:31:ea:bc:df:d8:94:e4:fd:53:eb:56:52:c3:26:
b8:ca:49:c9:5c:36:95:66:30:75:9b:3f:89:16:5c:
c6:73:30:c2:e1:b6:2d:67:a2:3a:8e:64:8c:39:56:
50:89:53:dd:22:6e:33:4c:ab:61:dc:fd:b0:5f:da:
67:7f:a1:5f:9d:32:21:7d:8a:f4:63:51:ec:e9:53:
c2:a4:9e:b6:de:17:b2:38:6f:ca:c7:9a:16:f1:40:
d2:c5:e3:41:78:7d:1a:81:63:96:00:56:d3:1f:03:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:79:1C:BB:61:42:F4:6D:A6:FA:06:3B:7A:CC:99:0E:BF:A7:6D:C2
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4c:a3:0a:c0:dc:7d:fb:a7:40:6f:3b:6c:48:8a:07:dd:10:
01:41:03:a6:77:ed:15:71:5c:e7:53:7f:5a:db:63:59:a9:37:
c9:06:2d:81:8c:ae:f9:d6:8c:95:b0:43:2f:a4:b2:02:b1:d5:
2b:ff:a7:d4:73:84:2c:0a:a2:80:a2:fe:ff:1d:31:1a:40:a5:
4d:5e:c5:43:ad:54:10:71:dc:30:fb:57:e9:19:7a:58:fc:cd:
8c:f6:0e:23:3d:b2:11:78:71:b1:5d:83:4d:f1:4c:2a:00:83:
c0:c0:49:e6:3d:55:18:f4:27:35:a0:c4:27:fd:e0:60:90:97:
7d:c1:8f:0a:92:20:93:f0:77:e1:f0:d0:b1:e5:f8:25:7c:46:
7a:95:a9:2b:ac:d0:7b:46:33:ff:c1:15:c8:64:1a:75:f9:48:
75:70:f6:1b:a7:9f:bf:e8:1d:2f:08:f6:4d:65:77:aa:2e:47:
6e:68:87:c7:25:86:c1:88:c6:c9:e2:67:8a:57:b5:ae:ab:8d:
98:eb:97:97:f5:2a:7d:a3:38:87:a7:c9:05:ba:90:08:8e:ac:
3b:83:d8:d5:a0:fd:bf:de:fa:e5:c8:de:12:14:8d:93:7d:fd:
0e:35:f5:80:43:89:07:0b:07:76:1c:65:e8:4e:a0:6d:3b:37:
a9:98:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:59 2025 by rpki-client