Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
File: HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft (raw, json)
Hash identifier: Mat9c3iaWXGyiXO6moh8ZVSdC40XOMNlFvIEmDoumYw=
Subject key identifier: 1F:0F:25:DD:27:A2:83:0F:94:89:3C:EB:72:1A:16:B7:6F:95:E5:4B
Authority key identifier: 1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
Certificate issuer: /CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Certificate serial: 01974CD717EE5937E0F5286E9F61596F8A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
Manifest number: 01D5
Signing time: Sun 08 Jun 2025 00:00:54 +0000
Manifest this update: Sun 08 Jun 2025 00:00:54 +0000
Manifest next update: Mon 09 Jun 2025 00:00:54 +0000
Files and hashes: 1: HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl (hash: n0vZuGNiDnGw2wmNaVHCuzLvsW+CeN0e8/JQbLP8kQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:17:ee:59:37:e0:f5:28:6e:9f:61:59:6f:8a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Validity
Not Before: Jun 8 00:00:54 2025 GMT
Not After : Jun 9 00:00:54 2025 GMT
Subject: CN=1f0f25dd27a2830f94893ceb721a16b76f95e54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:41:6f:2a:90:d9:38:d9:8b:58:1a:73:7c:
b2:8c:1d:50:a1:ff:6c:d0:df:ce:55:78:80:04:4c:
46:aa:8c:9a:75:2e:47:3a:0e:f0:6e:54:f3:d4:54:
3d:e3:7a:8e:45:0e:5f:c2:7a:a0:e2:f6:ed:30:d2:
74:70:ac:c0:9f:8c:6f:80:57:ae:78:4c:8f:6b:16:
7d:93:19:0a:11:06:8e:dc:f2:ca:33:0b:42:0a:96:
94:d8:7b:46:46:1c:58:65:cc:0a:bd:bf:0c:3c:e3:
25:65:31:83:47:9f:72:e3:7a:cb:69:cf:0c:27:00:
8b:59:de:95:b8:41:7a:ee:62:11:c5:f4:41:ec:d7:
c1:27:79:f9:86:ad:c6:77:68:22:70:03:e7:fa:18:
7e:82:1c:45:da:6c:ff:ff:cb:0e:6e:98:c1:8c:94:
23:07:48:d8:d3:ee:10:bb:ce:1d:07:c4:88:cc:08:
99:d4:16:ca:65:14:e7:ee:95:5c:af:08:59:2c:9e:
3e:fc:bc:d3:48:70:ef:1d:28:fb:9f:f4:8a:9b:0d:
2a:c2:ed:62:6e:85:01:c6:b6:82:b1:53:01:79:55:
4f:8e:26:56:75:92:06:9e:b0:55:d5:26:b7:cf:ef:
84:0b:0d:0e:bc:95:24:bf:4f:3d:91:42:0a:22:74:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0F:25:DD:27:A2:83:0F:94:89:3C:EB:72:1A:16:B7:6F:95:E5:4B
X509v3 Authority Key Identifier:
keyid:1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:84:26:1f:fa:de:ed:c3:49:18:b6:d2:fd:75:64:f8:ad:e5:
8d:a8:f8:6a:21:7d:80:e5:5e:0b:98:d3:70:3d:3d:da:6b:ae:
0a:cb:e3:01:a4:6b:a0:a9:c0:0f:83:b0:c2:45:ad:f2:97:bb:
be:5d:e9:5a:0a:d5:92:02:7d:fc:a0:ea:71:5b:12:35:a9:b5:
01:f4:6e:08:ea:6b:ed:a5:96:4b:bd:bb:8b:d5:1c:0c:74:74:
65:15:b2:ba:cb:f4:90:9d:96:e2:87:c2:13:10:ad:ac:d6:88:
c0:9d:ad:34:e5:a6:61:e1:f6:4f:c1:7f:51:ef:c0:98:23:c1:
92:c8:dc:a2:be:b1:54:05:cc:ad:3c:9f:38:84:b6:e0:22:c6:
41:f1:72:2b:d5:4f:0a:98:4d:4f:a4:9b:ad:ed:54:75:ef:0b:
ba:04:48:f6:06:49:d0:b9:14:1d:fd:c9:ab:24:4d:53:3c:54:
85:72:41:d6:4c:0f:df:f8:bc:f6:15:9f:a5:77:8a:05:05:de:
eb:74:ac:99:69:a1:33:6d:17:cb:b1:ed:27:b1:de:60:17:d0:
25:07:3b:1c:4c:0c:ad:00:c3:be:02:ba:16:54:82:e9:f4:0b:
ab:d7:9a:7c:23:69:93:69:1a:b4:a8:92:41:39:d8:4e:c9:5c:
bc:be:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:55:15 2025 by rpki-client