Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
File: Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json)
Hash identifier: Ki9/+Vg4LF10GPXeysdR68chvTHq5UDYTaOW47JYqQ8=
Subject key identifier: 39:CD:5E:B9:68:F2:F2:2A:F5:D1:D9:7E:E8:C7:67:8D:7F:48:7C:14
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Certificate issuer: /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial: 019A71EEED2C1B15011B62D83C3A51832EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: oLPuQQxYOWqILZfBc+c0S1QhWeAoeeIp6pVNOWZDjWc=)
2: UdTz9ESnCBONhFhPnKTJSPAPKew.roa (hash: 0eKPRYHWi1Fk+s60KVEthvqfye7EFF2oFsVLARt647E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ed:2c:1b:15:01:1b:62:d8:3c:3a:51:83:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=39cd5eb968f2f22af5d1d97ee8c7678d7f487c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:e0:04:b5:5f:71:10:49:94:01:30:79:f8:
11:2c:c6:77:fb:ae:4b:f5:1a:93:c7:dd:15:12:52:
a9:37:8a:10:bd:b4:2e:33:06:18:b6:b8:c9:b4:3b:
b7:63:97:17:f5:f6:0c:8d:0b:5b:6a:a0:ad:19:40:
7e:c0:8b:fd:0a:c7:ce:8e:59:b5:71:c6:6d:8c:ac:
3a:5f:2f:3e:2d:c6:a1:6a:03:84:c9:de:a4:fc:0d:
d8:ca:ac:02:a2:f6:70:4e:6c:f5:92:36:5e:29:13:
2a:37:92:87:d3:a9:08:f1:7a:08:0b:75:d5:4c:ad:
44:5a:81:50:de:32:64:db:13:6e:15:0f:70:80:92:
9d:33:0c:8e:a0:da:fc:d6:6c:7d:10:61:e8:63:76:
2c:99:84:dd:c7:22:50:19:38:6d:56:d3:7c:1d:36:
5b:43:8c:f8:40:cc:c5:49:83:97:5d:e2:45:c7:36:
a5:6d:f6:9f:ba:bb:dc:4f:79:b8:f0:2d:e5:17:f1:
11:0d:84:6b:4c:7c:d0:1d:8d:b6:f9:f3:ad:17:37:
28:e4:1f:27:22:42:33:eb:50:db:62:d9:5c:3e:fa:
6f:17:f4:a3:7a:cf:22:bf:98:c5:a3:22:c5:6c:39:
ae:6f:d7:1b:3b:6f:da:99:6b:04:e3:7c:b8:b3:8a:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:5E:B9:68:F2:F2:2A:F5:D1:D9:7E:E8:C7:67:8D:7F:48:7C:14
X509v3 Authority Key Identifier:
keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:24:1d:62:6d:bb:d7:53:ad:1f:fb:4b:6c:6f:e4:e2:87:
95:02:95:c8:52:8f:b1:78:b1:5c:40:48:e3:65:91:32:5d:f5:
c1:22:07:1f:d6:b5:50:a4:1d:61:b9:d0:5d:36:74:ea:b7:d2:
66:0f:fb:f5:6d:c1:12:7b:a2:24:64:bf:b2:07:ba:57:25:92:
8e:7e:be:66:1a:6c:89:62:e2:df:3d:33:2a:fe:74:11:53:b6:
a5:91:fc:7e:18:79:45:dd:54:12:1b:d6:a6:b6:ef:2f:c1:9f:
72:1e:03:ce:03:f2:6c:47:2a:4b:99:2b:1f:23:ab:d1:0f:5a:
c2:01:b4:d6:c6:94:cc:3c:67:93:98:24:67:9e:0b:fe:66:b3:
bb:8a:d3:d9:ee:9a:21:2a:81:51:e5:c1:9c:70:0c:da:0c:5d:
45:d1:66:9b:dd:36:ea:13:43:34:2d:1e:a3:2d:52:a3:37:ab:
3e:bc:c9:28:1a:61:c9:da:50:86:4d:7c:de:72:ea:29:a0:87:
f0:3d:0a:be:c2:99:fc:fd:17:02:63:23:fa:aa:6b:31:19:12:
7d:9a:a1:6d:ff:c7:57:53:98:60:f8:6b:76:11:72:19:ab:5b:
ab:9c:42:b3:c4:3d:c3:06:7c:a4:29:e3:b3:a1:f6:ab:eb:e1:
b3:cb:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:32 2025 by rpki-client