Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: iqktbDStbpWQ0bB5qG2H4iiKJ7SLxsByP4t3vaIKdyE=
Subject key identifier: 84:04:8D:0F:70:C1:6C:BC:92:BB:D6:D8:B4:0F:3A:CF:BB:4D:4A:BD
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 019A71EE9DA8C82DB78E322C5AF2C71757E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 123F
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: hxfT0tst1r/BwpFVbKPQ/KJrPN2QGVBqFgGP/5pyRFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9d:a8:c8:2d:b7:8e:32:2c:5a:f2:c7:17:57:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=84048d0f70c16cbc92bbd6d8b40f3acfbb4d4abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:68:71:e3:ac:e6:61:8b:38:c7:ad:6c:03:
be:f2:0c:32:53:99:64:d6:5c:9a:fa:ef:4e:21:70:
e7:7b:de:a7:8d:4a:31:cf:99:65:30:ee:bd:0b:90:
f3:17:76:52:b8:30:2d:c0:d5:86:9a:85:e7:a0:40:
9d:8a:25:ae:aa:1d:73:42:27:e0:84:0a:18:60:ce:
ac:e5:cf:16:1f:15:bd:b8:08:40:7d:4c:75:70:b4:
62:b2:ad:20:d4:96:15:7b:cf:45:f7:07:52:6a:8f:
e7:8a:dd:e9:79:2f:67:73:6b:31:d9:b3:0d:3f:a2:
32:f5:7c:6a:ac:3b:c0:fa:72:59:ea:d8:19:c7:66:
c4:21:fe:0e:39:f1:6d:06:12:34:60:b8:44:54:68:
8f:b2:fc:e9:95:be:a4:d1:79:58:b3:d3:13:01:b2:
9b:63:ea:49:8d:e2:f5:f4:60:7e:17:f0:42:87:91:
c6:21:48:0e:f0:98:af:11:b6:62:0d:7a:c0:17:54:
a5:10:77:01:2c:1a:1b:c2:47:e5:d0:7a:ca:64:20:
16:d5:1d:59:68:50:49:8e:50:46:b1:06:a8:2c:0b:
5e:75:39:ba:c3:3f:8c:1f:e2:1c:2e:c5:c7:f9:57:
75:e6:7f:65:e1:38:16:98:d3:16:22:bf:56:9a:85:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:04:8D:0F:70:C1:6C:BC:92:BB:D6:D8:B4:0F:3A:CF:BB:4D:4A:BD
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9a:09:43:da:4e:f2:dc:28:43:e6:06:dd:2a:9b:0c:aa:f2:
5e:6b:17:4c:65:08:a0:cb:82:2d:e4:1c:41:45:2e:22:e0:6c:
d5:38:95:fc:a2:84:9a:47:b2:33:e8:03:fc:d2:f6:ad:94:4f:
9b:5a:a9:ff:b6:c1:e8:8a:c1:42:7f:cf:1e:b9:ef:7a:c2:a3:
84:b1:ca:ff:c5:71:a7:86:6b:24:ff:f8:35:08:74:83:ef:f0:
1b:53:59:2b:f0:a8:d0:5c:4f:90:e2:24:f4:22:70:aa:cd:b3:
f8:2e:c6:74:f2:a4:c4:43:05:a0:03:19:22:27:73:9a:bf:27:
0b:99:e1:00:36:3a:6f:3f:89:14:c8:c1:41:41:cd:a6:89:4c:
46:19:7b:b8:4e:ee:f9:a6:fa:5c:7e:a4:a8:38:f9:f3:e5:09:
9c:3d:18:de:6b:09:9f:71:63:85:6f:7a:99:97:0e:88:0d:de:
99:e7:5e:09:fd:eb:35:53:49:9c:bc:87:d1:d5:0b:39:0e:e8:
bb:ec:95:ce:00:67:2b:ba:fa:80:8d:39:21:2b:e1:39:6d:ac:
97:ca:c7:95:52:83:e9:c5:b3:f8:8e:bc:ac:8a:37:bd:c1:00:
bf:2d:43:80:82:66:18:cc:e8:ac:4d:2b:00:a9:b3:b8:32:08:
b3:87:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:05 2025 by rpki-client