Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier: SuAjf9/ek6UTs6qYHMCFvYeEjP7KzN1omMnEh2YGmT0=
Subject key identifier: 01:1B:98:96:9C:B2:0F:46:D8:EF:76:C8:C4:D6:24:B7:B4:3B:46:D5
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial: 019848C03C051A33DE64C1AAE8E8BFD1BE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number: 07D9
Signing time: Sat 26 Jul 2025 22:00:14 +0000
Manifest this update: Sat 26 Jul 2025 22:00:14 +0000
Manifest next update: Sun 27 Jul 2025 22:00:14 +0000
Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: vRUwbJcr46V4vS9/aCwkqPrcFMuS1Csl2Xax/BlAaPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:3c:05:1a:33:de:64:c1:aa:e8:e8:bf:d1:be:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Validity
Not Before: Jul 26 22:00:14 2025 GMT
Not After : Jul 27 22:00:14 2025 GMT
Subject: CN=011b98969cb20f46d8ef76c8c4d624b7b43b46d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:d4:dd:69:73:6b:5f:15:31:15:27:b7:f3:
a2:34:2a:df:d4:f6:99:d0:e5:ae:67:77:6a:53:d6:
af:c0:a6:b0:8c:28:d8:f0:0e:7d:10:93:df:f5:45:
5b:d0:66:e5:92:7e:76:05:8c:f9:06:c2:3a:f9:1c:
62:4a:68:dc:cd:05:fe:70:c8:4c:4f:79:b0:b0:84:
49:4c:43:94:ab:79:55:7e:26:fc:05:36:0a:2c:a9:
9b:2b:49:02:09:85:c3:80:fb:a5:a5:5a:8d:95:c6:
d5:15:79:6d:b1:de:2b:c0:89:14:f2:b0:0e:5e:65:
2c:75:5b:e2:cf:bf:90:dc:0f:ab:79:a6:44:93:94:
8e:e4:66:81:88:ee:b5:13:2c:b8:26:36:48:70:11:
ae:f6:21:5e:9a:f3:0a:cd:0f:91:fb:48:56:5d:27:
fd:57:0b:98:05:8a:d4:21:29:a0:53:04:cf:b6:bd:
f3:07:8f:f9:7b:84:4c:2f:92:42:68:6f:85:1f:86:
b1:3e:1f:48:22:52:86:eb:0b:d4:9d:c3:93:1a:43:
32:b2:b0:88:f0:04:39:1a:1c:e5:85:08:3f:45:73:
8b:71:af:16:01:e0:e5:71:53:91:44:84:14:83:19:
6a:47:fe:4a:fa:7d:f1:5d:a8:69:47:4b:6a:2d:de:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:98:96:9C:B2:0F:46:D8:EF:76:C8:C4:D6:24:B7:B4:3B:46:D5
X509v3 Authority Key Identifier:
keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f2:86:25:6f:eb:60:0c:06:9d:ae:37:7d:91:66:28:56:8b:
f7:fb:e4:49:28:4e:0e:02:bd:6e:99:1c:5c:14:b6:7e:22:31:
ab:2e:be:83:9e:8b:d6:61:9e:4d:e9:6a:26:a9:ec:a8:4d:02:
f8:e2:b2:db:1d:bb:c1:1c:ec:23:77:19:b0:11:41:bc:93:df:
da:98:64:db:a9:6d:e6:c9:fb:6e:ec:71:57:89:46:37:d1:fb:
c3:8b:1f:1a:16:77:0a:42:88:86:a1:3d:7e:eb:ab:da:a8:8e:
39:57:eb:d7:58:fd:40:0d:ac:d6:78:f1:41:e6:f0:47:1b:78:
e1:e7:f3:13:65:01:fd:18:17:ad:b9:7c:73:67:aa:41:bd:8c:
45:9e:ae:8b:9c:99:e1:e6:de:16:3e:33:55:1f:aa:2a:e5:b6:
d4:94:a2:5d:16:f5:f7:5b:08:63:67:79:25:f1:61:c2:c2:54:
19:81:74:cd:7c:30:41:6b:fd:30:1d:87:cc:50:b3:7f:4e:0d:
dd:a3:47:6c:73:8e:02:94:76:ac:9a:8b:8f:cb:68:b2:51:ab:
53:25:d8:0b:da:79:a4:ed:3b:c5:41:a1:e7:74:5e:9e:1e:03:
1f:75:c5:35:50:72:b4:06:88:ae:c9:db:c9:05:36:6d:04:49:
9d:89:66:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:58:57 2025 by rpki-client