
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier: ws8A+amMb8xk/G0gAqK7CHQVNNBSlVjCe8fN5+/VxQE=
Subject key identifier: 46:4C:FA:60:13:67:DA:EC:99:79:16:0A:83:CF:F1:36:6F:71:AD:95
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial: 019749D5BA920CD5902F38AC3DE128B21488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number: 0755
Signing time: Sat 07 Jun 2025 10:00:33 +0000
Manifest this update: Sat 07 Jun 2025 10:00:33 +0000
Manifest next update: Sun 08 Jun 2025 10:00:33 +0000
Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: 7E48YEu//L9jy5wCuigIHCfSeyCMmLQeDeI38J+SIF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ba:92:0c:d5:90:2f:38:ac:3d:e1:28:b2:14:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Validity
Not Before: Jun 7 10:00:33 2025 GMT
Not After : Jun 8 10:00:33 2025 GMT
Subject: CN=464cfa601367daec9979160a83cff1366f71ad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:b0:b4:62:33:42:8b:80:0a:1e:da:ee:7c:
e0:51:dd:f0:30:18:6f:f8:01:e9:e9:83:9b:a6:60:
c6:51:44:f1:d2:32:5d:c7:4a:79:79:f9:e0:8b:72:
20:15:2e:60:40:3b:d3:7f:a5:45:9c:fb:93:67:e1:
1f:66:3b:ec:23:15:61:a5:2a:d9:20:bb:34:20:54:
62:c7:14:c2:a4:ae:db:85:99:64:a2:d3:dd:4d:1c:
53:9c:c1:43:41:c3:d9:ab:d2:4e:4c:eb:03:18:56:
2c:e8:ac:7b:3b:ae:39:c4:be:2c:eb:fd:66:0c:8b:
fe:7d:73:81:31:c2:c8:b2:94:56:40:16:5d:1c:93:
e8:8f:da:1a:ca:a3:d8:62:57:9c:8d:32:b7:2f:56:
9e:8d:62:96:f6:94:f8:da:22:0c:fe:86:31:fa:b3:
33:68:f6:3f:77:38:ac:76:ef:a2:39:93:32:f7:37:
3c:76:25:e1:a8:ae:74:91:97:ff:98:af:34:00:cf:
03:06:c9:cb:2e:e1:bc:52:b9:e4:25:3d:7f:da:d3:
22:ee:ff:e2:38:85:ce:66:4c:f8:c5:89:2d:c6:c2:
03:42:dc:10:a3:02:55:4f:4b:0b:40:50:14:da:b1:
4e:65:a4:a1:1a:98:dd:83:60:d3:6e:51:40:90:0e:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4C:FA:60:13:67:DA:EC:99:79:16:0A:83:CF:F1:36:6F:71:AD:95
X509v3 Authority Key Identifier:
keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:40:57:a1:dc:6c:c5:fa:05:69:76:e4:b0:79:83:13:39:76:
47:98:d3:9e:f7:25:48:46:0c:2f:13:2b:14:1e:a2:c0:25:86:
c7:c0:9a:79:c2:41:14:f3:12:5e:fa:c3:41:65:b5:81:11:6c:
91:63:e8:66:4d:59:48:61:87:06:96:b1:37:8a:e4:33:04:f0:
15:a4:b9:c8:3d:6a:74:1e:6a:79:ee:af:2a:0a:ce:4f:2a:8b:
39:48:58:18:54:e6:4f:f6:a7:fa:01:83:69:69:60:5a:f8:2f:
2c:80:7a:db:fb:f4:bd:4b:72:18:be:ee:41:f3:82:f2:41:72:
f5:5e:16:96:8e:7b:18:cb:18:c7:c3:a7:d2:0d:6d:48:d5:b3:
11:10:d8:c0:a5:96:37:3e:42:cb:41:34:15:c1:62:3c:1a:a4:
f4:9d:fe:c2:6e:ce:9a:74:d9:65:04:30:17:50:4d:02:fa:40:
52:a8:d8:69:d9:af:5c:70:98:02:d4:fd:9d:5f:1a:3b:36:3d:
b1:0f:14:96:6a:15:1a:be:7b:f2:92:bb:78:23:87:02:2e:79:
da:91:9e:51:83:48:07:73:65:b1:6d:58:34:a9:bc:3a:8b:4b:
23:2b:84:71:4b:df:a3:33:27:16:45:53:6f:7a:ab:fa:56:bf:
a0:97:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:52 2025 by rpki-client