Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: JMz96aXh8E1FdDM7Hyq88VzqykEZk8NdsO+ghHAm3i0=
Subject key identifier: 74:31:37:05:1A:94:57:10:30:85:EE:B0:39:FA:58:F4:48:C6:C4:A3
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 01958C970AB5713026B3424A129B51488D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 0FB6
Signing time: Wed 12 Mar 2025 23:01:03 +0000
Manifest this update: Wed 12 Mar 2025 23:01:03 +0000
Manifest next update: Thu 13 Mar 2025 23:01:03 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: nEnAhUId9PKnsD8uq2AwFXq+J5DtGUAw2wJ7l0BK+1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:0a:b5:71:30:26:b3:42:4a:12:9b:51:48:8d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Mar 12 23:01:03 2025 GMT
Not After : Mar 13 23:01:03 2025 GMT
Subject: CN=743137051a9457103085eeb039fa58f448c6c4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:95:e4:1b:49:c0:81:0b:b8:b9:ac:c2:a8:
f6:d7:94:92:ac:18:76:90:43:c1:68:2b:a6:8c:e4:
0a:3c:1c:1c:ea:9e:7f:10:11:62:a0:f9:0b:88:0e:
b3:f4:09:56:4c:94:83:d2:bf:04:ea:92:2e:e5:dc:
fb:bf:18:b3:0f:7c:9b:b8:a9:41:38:a5:50:a9:af:
dd:08:0b:7e:92:0f:28:5d:e1:57:1f:1a:59:0f:00:
bd:d8:65:f6:99:e1:3f:8b:52:81:d6:f8:2e:52:9f:
5e:cb:5d:66:6a:b2:48:ea:dd:02:bc:65:bc:89:3c:
da:4d:ec:8a:4c:cf:67:9b:ba:75:d7:b1:9d:b4:12:
55:12:36:0a:b7:07:dc:4a:43:50:e6:7a:e0:72:10:
75:4b:68:64:3b:b0:7e:00:6c:17:51:56:f3:d8:73:
f8:d3:03:00:63:09:63:90:b6:60:dc:21:9c:a1:8c:
c0:57:42:f0:53:c0:65:4a:5c:71:57:94:61:d3:0e:
32:e6:56:cb:36:ef:42:04:fc:2e:cd:31:b3:b4:32:
c4:71:fc:e0:a7:0f:f5:2e:91:d9:16:14:50:35:2b:
4a:14:24:3b:c2:88:1d:d8:ae:94:53:3f:1b:c2:84:
a8:2c:43:33:dc:5b:b1:7e:97:ee:1d:8b:a1:d3:22:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:37:05:1A:94:57:10:30:85:EE:B0:39:FA:58:F4:48:C6:C4:A3
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a6:8a:26:ca:7e:c8:21:85:ac:8b:62:88:21:23:9a:f9:ad:
7e:61:d6:c8:52:91:4f:57:02:4f:85:76:13:2d:b9:56:38:d1:
fb:f7:db:9e:91:d9:f9:52:6d:4c:9a:02:03:79:01:86:a4:00:
f8:3b:26:b6:bb:3b:c4:84:c0:fb:be:ab:be:94:78:93:06:22:
8a:e8:c2:56:0f:af:00:89:89:10:99:f5:db:4e:54:a7:64:1b:
67:93:7f:c7:e4:61:a6:25:b4:a1:7d:fd:f3:04:d6:b8:1e:83:
78:13:42:3d:96:9a:c6:79:de:aa:4d:47:67:d2:1e:b2:09:d9:
56:14:55:93:84:c0:e7:33:fe:28:1e:02:e6:e7:bf:b3:63:24:
89:f0:58:7e:ea:96:47:5f:ca:69:9b:ad:a8:eb:df:a7:e7:04:
54:18:40:a0:02:c9:8c:19:ae:27:1f:7c:0b:90:f0:6f:17:76:
6f:82:4e:47:41:76:f3:6a:b8:ba:68:38:92:b7:4b:b6:0f:ce:
89:55:7e:cc:89:d8:25:46:38:b4:9f:26:b9:40:ce:0a:97:e1:
4f:77:fb:1b:af:a8:a7:ec:ef:db:d6:9e:5b:a8:1b:09:63:7c:
c2:dd:18:cd:0a:fb:fe:f0:ae:78:4c:44:1d:b7:42:7c:7d:bd:
07:90:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:53 2025 by rpki-client