Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier: 1LCfuwXgCBbu0FzMw1/c9CgXoHqtdj5NgVnI+JYchTA=
Subject key identifier: 25:CE:56:35:F1:C4:A2:AE:37:F6:75:35:82:93:28:94:36:B3:4C:C0
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial: 019A503DC424B75C898779BB4E5E5AD5C154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number: 08E6
Signing time: Tue 04 Nov 2025 19:00:16 +0000
Manifest this update: Tue 04 Nov 2025 19:00:16 +0000
Manifest next update: Wed 05 Nov 2025 19:00:16 +0000
Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: zEm2Db/79MWr/2XvqT/KkLFu+terDuHwi/Ciu8akPQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c4:24:b7:5c:89:87:79:bb:4e:5e:5a:d5:c1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Validity
Not Before: Nov 4 19:00:16 2025 GMT
Not After : Nov 5 19:00:16 2025 GMT
Subject: CN=25ce5635f1c4a2ae37f675358293289436b34cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:31:55:66:40:1e:a2:bd:f4:f4:c8:bd:ad:
6d:75:6f:78:06:e6:d0:de:ff:cc:cc:b5:22:be:c8:
89:88:0e:d5:86:ab:44:f9:c3:11:0a:a6:63:cb:62:
34:70:e2:8e:7a:0f:8a:64:e3:77:8b:84:38:6e:b6:
ed:83:a3:bd:20:3c:f5:29:23:90:5b:05:87:39:57:
24:e9:a8:8f:31:04:59:cc:63:db:0f:45:b9:f5:df:
1d:01:71:db:34:31:54:bb:7e:07:8c:10:13:d6:a2:
c5:93:02:ea:c9:24:e6:d4:56:89:92:57:d3:62:8f:
d6:82:1e:86:2b:94:3c:8b:ad:27:1e:b2:bf:90:f0:
fc:f4:59:4d:af:00:98:9b:6a:bc:fc:6a:55:64:33:
13:aa:33:c9:2d:a0:05:8a:49:d7:ed:af:a2:ac:45:
18:53:4a:58:04:82:85:4d:ab:05:1a:d5:a9:53:f8:
5c:f3:d7:82:51:37:5e:de:17:50:50:76:7e:69:77:
ca:bd:7c:f1:7d:f7:0f:14:58:12:8d:d1:cf:b3:a2:
ce:46:00:32:34:65:1e:f6:88:99:97:c0:83:a7:39:
25:5b:f3:bd:03:5c:ba:06:68:3a:de:52:83:70:20:
23:28:6e:26:59:87:68:85:4c:dd:7b:ed:12:e2:43:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:56:35:F1:C4:A2:AE:37:F6:75:35:82:93:28:94:36:B3:4C:C0
X509v3 Authority Key Identifier:
keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:07:cd:f9:b3:5e:bd:3f:d8:2d:89:4a:c5:d0:6a:b2:62:3a:
17:47:ac:12:c3:d3:46:d9:0d:c8:31:a1:8a:dc:f5:b3:42:04:
12:c6:f3:21:e0:e9:84:34:2b:12:e6:9c:f8:4e:68:5b:d4:d8:
94:53:dc:2b:67:81:cb:13:a0:cf:7f:78:ad:76:3b:6f:5d:89:
aa:33:c1:ee:57:bc:52:b3:ca:08:11:a6:3d:cf:78:70:e0:a2:
10:33:b9:dc:b2:e4:3d:e5:50:0f:f1:f7:21:07:46:6f:67:4f:
63:88:bd:2c:39:04:df:ee:1e:10:eb:ca:89:03:fc:fe:da:e0:
2f:c8:49:4c:73:4e:0f:28:6a:92:9b:60:a6:44:fe:63:99:55:
da:ab:e4:d3:1c:40:cc:36:25:95:a4:df:db:fb:92:67:fa:3b:
cc:58:0e:6f:b7:ef:92:3a:9d:0a:5a:21:cc:da:38:2a:0d:81:
17:6a:f6:c5:72:9c:3f:b3:89:d0:68:43:8f:31:82:84:f2:57:
5f:18:05:3b:df:29:32:38:b7:b4:35:75:81:51:b2:25:0a:e1:
50:14:05:77:9d:d0:89:9c:2e:96:84:e1:0f:14:8a:fc:53:b0:
54:00:34:d2:22:c6:96:5c:83:01:5f:7b:42:5c:71:47:b2:df:
d4:98:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:20 2025 by rpki-client