Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
File: Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json)
Hash identifier: y1eedMr1CeJQCuEQc2d3KNYJsOYcMXMqgAs4BuDOBiY=
Subject key identifier: D4:5C:D7:B4:E5:CA:BF:B9:1D:46:5E:34:CB:6D:5C:BE:AD:AB:1A:92
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Certificate issuer: /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial: 019649D864F7308B333A8DF5BC9CBB2AA6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
Manifest number: 148A
Signing time: Fri 18 Apr 2025 17:00:40 +0000
Manifest this update: Fri 18 Apr 2025 17:00:40 +0000
Manifest next update: Sat 19 Apr 2025 17:00:40 +0000
Files and hashes: 1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: JqQU2qFPRa6x9H4YZsWVPo8FQ/8Btxo+hmOP6/YX9AE=)
2: UdTz9ESnCBONhFhPnKTJSPAPKew.roa (hash: 0eKPRYHWi1Fk+s60KVEthvqfye7EFF2oFsVLARt647E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:64:f7:30:8b:33:3a:8d:f5:bc:9c:bb:2a:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Validity
Not Before: Apr 18 17:00:40 2025 GMT
Not After : Apr 19 17:00:40 2025 GMT
Subject: CN=d45cd7b4e5cabfb91d465e34cb6d5cbeadab1a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2a:cc:41:99:43:e7:94:05:e1:60:47:05:b5:
1c:74:1a:c4:a8:a8:a2:d7:92:d5:b4:03:2c:08:43:
83:45:91:e0:9d:14:6e:3e:c5:4d:1b:94:28:d7:60:
d2:fb:5e:a8:03:4c:20:f7:55:d0:b7:42:9e:e5:1b:
12:db:19:76:55:35:c1:a1:6c:5b:41:8a:c1:f1:9c:
5b:dc:e0:37:41:52:ac:c9:0b:81:e3:43:56:5e:fe:
2d:1e:23:8b:41:e5:bc:55:f4:64:4f:cb:8f:a4:55:
26:5f:0a:18:c4:af:1e:ed:0b:3c:11:3b:bd:38:1f:
50:21:6b:d6:4c:cc:83:14:44:e1:ef:a4:63:f6:86:
96:aa:b7:6e:60:91:dc:7f:c7:bc:3a:e9:2d:ee:a4:
b4:14:91:12:9f:29:e0:7a:12:e3:ff:88:51:52:d2:
16:f8:94:26:23:81:5a:25:ae:be:dd:34:ad:f8:c4:
94:b7:c4:ec:92:26:3d:68:23:75:c0:5b:70:98:d6:
be:f7:07:42:e6:12:65:7b:ca:2b:af:79:a1:1e:c1:
a6:39:bf:1e:69:fc:20:9b:0d:dc:40:60:0b:6d:cc:
a8:48:f8:d1:fd:ac:8d:5b:30:c1:71:fe:7a:76:40:
95:c3:e2:6c:fe:ac:1b:05:1e:34:3e:c4:1c:93:fe:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:D7:B4:E5:CA:BF:B9:1D:46:5E:34:CB:6D:5C:BE:AD:AB:1A:92
X509v3 Authority Key Identifier:
keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1c:95:91:48:a5:6b:6b:0a:70:17:af:ad:80:90:c5:2e:44:
c8:89:47:1c:b7:84:87:16:86:aa:3c:4e:a5:df:e7:97:da:83:
87:8b:c9:b7:74:3c:e2:c9:15:f8:d4:9c:be:ad:a8:ba:e8:b1:
b5:d4:db:ba:89:a5:aa:cf:0e:3d:1e:a3:96:54:4a:34:5d:b0:
94:61:d8:87:df:6a:7b:7a:6d:3c:18:f0:5c:b7:50:cb:88:5b:
03:ce:01:dd:78:b1:e1:57:b3:b3:b7:58:8c:2b:49:0a:2a:c9:
16:ab:e3:78:46:7f:55:8f:bb:9e:93:a0:85:e0:80:19:f7:57:
3b:32:0d:20:9a:d7:0d:a6:c3:70:c4:4a:bf:d4:08:b8:41:17:
d4:0e:71:0f:6f:3d:9c:99:ab:a0:1a:6f:3b:36:8e:d7:04:2d:
69:bd:d3:d5:a9:6e:65:ad:ef:9c:77:a3:27:70:c9:f3:90:3c:
70:11:a3:70:d8:cd:a2:c3:38:32:0f:5f:5b:91:6d:f3:59:dc:
d2:6c:1c:da:0e:4c:76:28:02:b8:d0:49:66:56:b4:5f:fd:c2:
88:c2:a7:49:7f:30:6f:0d:d4:d9:7e:f7:05:69:8f:90:43:f7:
70:f1:96:98:c2:9e:fc:9e:92:81:a3:c6:a9:52:93:b2:17:d1:
e7:50:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:26:18 2025 by rpki-client