Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier: EdMysjrvNxYA8I8k2PjVtt2BWknL3RLA+0j804F47nA=
Subject key identifier: DC:FA:6F:8E:A6:7E:15:B8:4B:0E:27:8D:2B:EE:F0:05:54:8A:37:28
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial: 019768BBFB8BD3A149037B3E8127903741B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number: 0765
Signing time: Fri 13 Jun 2025 10:00:39 +0000
Manifest this update: Fri 13 Jun 2025 10:00:39 +0000
Manifest next update: Sat 14 Jun 2025 10:00:39 +0000
Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: IgxNNLGLuJ95NKdYU2HWp1WcQY+DitIODfn6TLUTLM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:fb:8b:d3:a1:49:03:7b:3e:81:27:90:37:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Validity
Not Before: Jun 13 10:00:39 2025 GMT
Not After : Jun 14 10:00:39 2025 GMT
Subject: CN=dcfa6f8ea67e15b84b0e278d2beef005548a3728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:31:da:aa:af:57:45:94:f3:32:2f:8b:c5:
3b:39:94:55:1d:4d:f3:a1:0a:2e:99:41:b2:a2:47:
ff:c0:9f:d5:b9:7f:21:48:eb:0f:a8:d2:39:60:a6:
e7:59:35:08:b7:80:1b:bd:9b:aa:b5:06:15:ea:f7:
aa:1a:97:ab:85:8a:9a:b6:68:70:85:58:23:91:94:
e6:4e:a1:e1:f9:dc:ab:08:36:e3:a2:18:13:38:c7:
77:0e:5e:32:7d:2d:f7:12:ee:71:93:00:e3:3f:18:
c4:01:2b:2a:1b:5a:f9:ea:5c:aa:11:47:7f:2a:05:
58:72:7a:4b:34:5b:18:59:6a:77:03:c8:46:86:5b:
ea:0c:5c:94:58:d7:e4:1f:77:59:23:4a:c8:2d:fc:
1f:4b:0c:f8:b5:22:df:61:ed:5b:96:8e:f3:38:40:
1c:1f:e7:0f:38:a4:1e:72:8f:59:af:22:ea:81:64:
e1:52:27:ca:16:19:68:f0:d0:36:65:33:9b:2e:8b:
6e:6a:1c:21:6c:3c:41:98:24:7f:1d:a8:32:44:04:
4c:d5:a6:11:b2:60:2a:d9:0e:2d:37:ad:14:15:5a:
a1:5c:fa:08:ed:e6:77:f2:26:87:6f:2c:88:01:03:
de:27:d7:00:8b:63:cf:94:8f:b4:52:0b:b1:58:ea:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:6F:8E:A6:7E:15:B8:4B:0E:27:8D:2B:EE:F0:05:54:8A:37:28
X509v3 Authority Key Identifier:
keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:c7:57:23:25:cc:9f:65:3a:c3:8a:2f:0c:78:04:d4:c5:
62:ea:56:c0:6a:92:88:3d:83:48:c0:e6:dd:5e:05:7d:a8:73:
20:ab:56:bf:f4:71:b5:1b:2b:c1:18:34:b1:14:b2:71:a9:e9:
ed:55:93:5d:2f:06:76:1b:17:e6:0e:00:bc:b3:1e:a0:54:db:
55:8b:fc:1c:46:65:21:fa:2f:af:95:5b:65:36:ee:4b:cc:de:
31:02:bc:8a:d7:5f:9b:ac:d9:39:ad:1b:1d:5b:6f:55:33:93:
01:ad:3e:ee:6a:99:a6:28:69:e5:79:6f:46:02:26:6a:7e:ef:
13:15:65:04:c5:8c:a4:d3:41:99:4e:40:bd:f6:e6:5c:00:80:
a3:60:df:5b:8c:cc:fd:eb:a6:4d:1e:fe:a7:62:ea:86:e7:7f:
49:ff:67:1d:c6:5f:20:98:13:54:d8:ea:74:e3:7d:d5:b3:60:
51:b0:a6:14:30:c3:d1:93:f5:12:b0:4d:44:88:43:f6:61:90:
eb:9d:15:b9:d5:b4:ad:cd:3b:a7:a8:b1:52:13:ea:ef:14:bc:
e9:7b:cb:83:c1:d4:da:50:2e:bf:c0:9f:97:ef:96:b1:0f:54:
83:e0:f1:75:a4:ca:5e:48:3b:e4:d6:8e:51:c0:e6:91:f1:14:
32:48:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:16 2025 by rpki-client