Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: AUcWhvJdrqYtcxaY72qP4UKGca4zYJt0qr0o7Yg70+w=
Subject key identifier: 83:AD:52:42:ED:10:97:4E:0A:5B:C9:CE:42:4B:D9:23:FF:5B:EF:77
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 0196575D27F0D39212CC263923CD28026023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 101F
Signing time: Mon 21 Apr 2025 08:00:44 +0000
Manifest this update: Mon 21 Apr 2025 08:00:44 +0000
Manifest next update: Tue 22 Apr 2025 08:00:44 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: aMWePBfLG3R6eV+ZldXSYZsKI0lEV124EWP35TzbQUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:27:f0:d3:92:12:cc:26:39:23:cd:28:02:60:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Apr 21 08:00:44 2025 GMT
Not After : Apr 22 08:00:44 2025 GMT
Subject: CN=83ad5242ed10974e0a5bc9ce424bd923ff5bef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:da:fc:1a:9e:71:a0:a8:79:82:aa:77:87:
cd:d2:96:eb:00:40:fa:bf:bb:1b:b1:dd:71:25:56:
bc:52:d9:09:df:c6:72:1f:9f:69:c8:73:0c:9e:d4:
d5:42:95:e5:84:e5:b3:f1:23:ff:bb:b6:53:04:c2:
ec:dd:9e:52:8f:3f:ab:ed:93:90:7d:d0:92:e4:ee:
9c:13:62:68:3d:90:eb:cc:ee:72:41:3f:2b:74:e8:
2d:6b:1c:6f:85:7d:49:05:2b:6b:eb:5e:0d:f0:20:
d1:85:c5:9c:f3:c4:a1:c6:32:17:b3:a6:3c:bb:bc:
5e:2b:fd:93:4f:96:fa:c2:31:1a:95:98:92:5d:1b:
74:d9:d0:b0:7a:4b:af:9d:d0:e9:53:43:6d:d3:1e:
4f:9a:fb:7e:26:94:25:cc:ea:3c:40:26:4d:25:a9:
28:7a:47:92:12:fc:63:b0:a7:34:2a:6c:44:fa:b0:
68:33:28:00:95:5f:ac:2d:83:0d:76:36:b4:67:4e:
98:ef:31:c6:30:31:4a:be:03:d4:f7:21:b3:9f:e7:
9d:81:85:ff:84:b0:28:63:1a:da:ad:96:50:3c:13:
a0:56:62:54:82:e0:ee:0d:cf:01:4c:40:2a:6a:29:
e9:8e:f6:57:b8:c6:ae:4f:a2:d7:5a:34:4e:ab:e7:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AD:52:42:ED:10:97:4E:0A:5B:C9:CE:42:4B:D9:23:FF:5B:EF:77
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:fe:8e:f5:0a:a3:1f:8c:ec:6e:8f:b9:ae:be:49:1a:9c:
39:c3:1f:6c:48:27:6a:82:8c:68:05:3b:19:13:a6:b0:e7:6d:
b6:a5:01:19:03:60:18:d3:b5:74:9f:c3:4e:94:a9:f1:6f:c7:
af:9b:31:fe:2a:33:df:67:2b:2a:11:72:b3:c4:2c:0e:94:81:
42:e7:0b:bd:15:75:c4:2e:48:87:d0:b3:7c:1c:e4:e2:71:85:
05:b7:72:39:76:6e:b6:b1:c0:de:f3:6d:03:49:6b:b3:6a:e3:
f2:aa:1b:21:dc:b4:83:3e:f2:60:96:e9:79:a1:df:e1:a5:4a:
72:0c:bc:84:2f:0e:47:04:79:22:24:a0:20:ee:3c:fe:1a:23:
e3:52:28:d6:b9:ff:c2:73:cf:a8:75:f1:4f:28:50:c5:5a:09:
c5:49:87:e7:ce:40:1d:67:d5:21:9c:88:ad:c2:ee:e7:7b:5f:
22:80:44:9c:a8:45:79:3f:f8:b1:8e:5c:31:d5:fd:52:0c:85:
0a:f9:6b:f5:54:c4:e1:b3:26:9d:32:ed:d2:89:53:81:52:9b:
7e:9c:46:f5:4b:d7:9d:0c:b1:92:66:7a:f8:3b:33:40:d6:15:
e6:c3:bd:70:01:1b:87:65:72:dd:68:5b:88:7d:5f:61:d3:36:
fe:05:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:43 2025 by rpki-client