Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier: bczCVBb+mp7klTqbImfCT1/GZT9ARlqAskn80bEA2z8=
Subject key identifier: DA:80:A0:C5:8B:34:33:A4:0E:6C:C6:BC:BB:BC:63:0D:38:96:84:0F
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial: 0198733D7722731FB3288C1B46FF6913E833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number: 07EF
Signing time: Mon 04 Aug 2025 04:01:04 +0000
Manifest this update: Mon 04 Aug 2025 04:01:04 +0000
Manifest next update: Tue 05 Aug 2025 04:01:04 +0000
Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: o8cr9Zt566SfdCuDtF+V1kvjaf80xWK7cbH1LkhYAAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:77:22:73:1f:b3:28:8c:1b:46:ff:69:13:e8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Validity
Not Before: Aug 4 04:01:04 2025 GMT
Not After : Aug 5 04:01:04 2025 GMT
Subject: CN=da80a0c58b3433a40e6cc6bcbbbc630d3896840f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:da:50:53:64:a3:54:14:ac:5c:67:18:72:
44:66:d4:ee:07:22:6b:96:f0:3e:ca:89:2a:44:49:
5b:91:e3:93:b6:aa:6b:82:e6:84:8e:e8:20:85:20:
4c:6c:d9:af:a9:00:69:9d:c9:44:a8:09:1f:2e:cd:
44:93:ed:5f:5d:b6:82:c9:86:01:f3:9c:4d:01:67:
f4:1f:de:12:d6:45:27:46:1f:41:64:e8:be:f5:6a:
60:cc:da:f2:05:01:52:ba:75:9a:9c:ab:b9:f8:4f:
d0:fc:b2:48:17:48:97:98:35:8a:4d:62:03:39:83:
e3:d7:47:e4:c3:93:07:55:02:62:15:48:19:eb:a5:
80:93:e1:73:b7:21:fa:4a:db:05:cd:15:5f:ee:a2:
d7:a3:d7:cb:93:18:62:f1:15:81:4b:3b:4d:6f:e7:
0d:8d:7a:c2:32:ae:21:e2:76:31:fd:a1:8d:ae:7a:
72:ec:74:bc:70:84:98:4e:7f:52:0b:69:b2:bd:32:
1e:d8:64:44:96:21:b0:69:2d:8f:45:d5:44:4a:0c:
db:9f:13:2c:19:4f:2e:9a:22:00:d7:4f:fd:9b:55:
45:32:1a:81:59:c3:74:2e:f8:eb:d2:ee:f7:c3:ba:
5c:4d:be:cd:7f:e8:c4:bb:12:09:43:70:18:7e:eb:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:80:A0:C5:8B:34:33:A4:0E:6C:C6:BC:BB:BC:63:0D:38:96:84:0F
X509v3 Authority Key Identifier:
keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:86:5d:8e:0e:e9:76:4e:66:28:be:86:fd:86:37:18:18:f4:
94:e3:0e:e6:39:51:18:1f:d5:ec:b0:88:a1:17:fc:91:a2:af:
ff:a3:74:ca:96:b9:d0:fc:24:18:52:bb:e7:b7:94:6d:4b:0c:
a9:49:82:22:d3:08:1c:fb:fa:76:fc:ff:45:7e:e5:26:f8:9a:
33:ec:c5:af:0f:fe:f7:66:06:ef:30:ab:a6:50:f6:f3:71:70:
57:d0:6d:36:73:57:81:ec:6c:7c:63:ed:a8:25:17:7d:3c:79:
d6:2f:cd:cd:a2:6c:f3:be:89:53:20:69:fb:1f:8e:20:3f:9d:
35:d9:3e:3b:38:60:46:3c:8b:3b:cb:e8:98:96:af:6e:23:bd:
22:f7:b0:95:3b:1b:de:b9:b1:97:d8:20:4a:c6:9d:dc:ba:db:
c7:13:65:03:a2:86:15:bb:db:a5:fb:49:c3:b9:df:6d:7a:88:
01:67:53:97:13:cf:fd:a6:d4:73:ed:a5:0e:0a:c7:eb:00:f7:
46:2e:04:65:ed:35:92:78:18:8c:3e:4f:48:95:81:e6:13:c6:
e4:af:e2:4f:39:66:c1:9a:96:aa:19:7e:2c:1b:be:c1:24:a9:
20:b8:11:22:c5:da:9e:47:47:3c:72:b9:04:6b:6b:88:34:92:
cd:e9:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:47 2025 by rpki-client