Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: TpOHYxb6v2lGgXzQ4qMRWRMOP4aJYnArlPKQryoReWY=
Subject key identifier: E7:AB:D3:97:4F:AA:72:43:1D:6E:35:5E:0F:30:4A:AE:49:B5:D5:28
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 01974AB1C56235DE6C8D8FD1CD98DFCA026F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 109D
Signing time: Sat 07 Jun 2025 14:00:53 +0000
Manifest this update: Sat 07 Jun 2025 14:00:53 +0000
Manifest next update: Sun 08 Jun 2025 14:00:53 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: 5F+KTk6LvIHH19Agq3LmHxzsjjSub1ojdTHs6B6gXxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c5:62:35:de:6c:8d:8f:d1:cd:98:df:ca:02:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Jun 7 14:00:53 2025 GMT
Not After : Jun 8 14:00:53 2025 GMT
Subject: CN=e7abd3974faa72431d6e355e0f304aae49b5d528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:2d:cb:fe:c8:9d:ea:f9:a0:45:46:11:b4:
a6:05:4d:e8:04:5f:4a:97:26:d4:69:73:30:31:18:
c5:a6:80:49:6f:51:fb:52:24:33:17:e6:c9:dd:67:
84:a0:d2:dd:02:17:3e:b4:07:51:a7:6d:b9:e7:d4:
4c:b3:86:a1:bb:73:e7:cc:33:8d:68:d2:dc:19:b4:
b7:9b:30:3e:3a:8b:78:a3:7d:cc:7f:ba:d7:3f:8c:
89:5e:31:37:52:e1:e8:b6:f0:5d:77:d1:07:3c:1f:
47:e1:e0:25:eb:bd:c4:74:b8:92:b1:97:8a:b2:8b:
27:de:8c:aa:ca:2f:cc:86:83:43:3b:9a:50:03:56:
6c:c3:cf:b2:51:3b:76:63:d2:28:ce:99:9d:0d:99:
38:cb:02:60:a3:a5:ea:a7:77:07:4c:66:40:a8:70:
5c:78:fc:6b:04:39:26:5b:c1:70:cc:58:8f:15:f4:
70:7d:a0:00:f1:dc:d0:78:ca:2d:25:2a:0f:ae:a4:
90:18:97:3c:62:da:f7:88:dc:72:3c:cf:ba:11:c3:
56:5f:ad:2b:85:49:a7:de:0f:43:8f:b4:43:01:d8:
34:be:0d:8e:c9:53:1a:4e:f4:46:31:e5:b0:47:fe:
d8:89:cb:41:2e:fd:0a:26:52:71:de:3c:ed:b7:56:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:D3:97:4F:AA:72:43:1D:6E:35:5E:0F:30:4A:AE:49:B5:D5:28
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8e:41:c8:7f:4e:9a:44:28:61:7c:84:49:6f:58:37:af:56:
ae:0a:ba:42:ea:d0:de:4d:14:a7:97:48:af:25:b2:b0:c1:6c:
f5:a5:12:82:fc:8d:eb:65:a8:a2:26:98:26:59:eb:80:10:62:
c3:45:98:dd:d4:71:f3:4a:cb:91:d4:18:40:ea:83:14:07:0e:
40:47:11:ac:59:6d:d9:1f:97:ae:2c:6b:68:e1:53:a3:e4:74:
e6:a3:36:a9:23:70:e5:ca:1f:dc:74:f9:0c:a6:96:6b:50:f7:
fe:2c:a5:5f:74:a6:ac:63:f9:ca:a8:d6:5a:7a:67:3d:a6:a2:
8a:c0:1b:6e:1d:20:91:ae:40:e7:84:ad:07:64:07:a3:a1:2f:
bd:9a:0b:03:c5:08:6b:eb:01:58:82:7b:fb:c3:a6:f2:fc:32:
69:00:5e:4f:0f:37:0d:53:62:6e:82:2f:7c:2a:0e:3c:4d:df:
39:a0:6b:ea:3c:52:94:ed:7d:3b:a2:63:65:9f:01:24:ff:ef:
a5:c9:97:b6:27:43:af:7d:b1:61:d0:a5:c2:b5:f9:fc:2c:f1:
5c:57:e2:36:a9:46:54:45:ed:b5:16:07:6d:0f:5f:46:7f:29:
1f:dc:3f:86:27:09:4f:2d:2a:9a:ec:f7:84:bd:8e:cd:1e:db:
b3:bb:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:45 2025 by rpki-client