Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: 8ajGf+TvgE9gQkDdx5DhkLU1wYIHgUA7uK/+fI3SPXw=
Subject key identifier: 96:61:A9:DB:4F:8F:9D:75:B2:9B:04:79:5D:7D:5C:8D:8D:C2:D4:2A
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 01987450AF5C16397DC6232A3DA110793A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 09:01:41 +0000
Manifest this update: Mon 04 Aug 2025 09:01:41 +0000
Manifest next update: Tue 05 Aug 2025 09:01:41 +0000
Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: 4ryR0hSSspb01dHSG1fPY5LImwbe7eRuN52zdsmu2d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:af:5c:16:39:7d:c6:23:2a:3d:a1:10:79:3a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Aug 4 09:01:41 2025 GMT
Not After : Aug 5 09:01:41 2025 GMT
Subject: CN=9661a9db4f8f9d75b29b04795d7d5c8d8dc2d42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:14:30:e8:1e:d8:a1:3c:9e:8c:a2:c8:39:
e7:42:97:39:fb:05:fc:5e:b8:4f:61:29:06:b2:50:
e5:97:ec:29:da:a8:88:02:0e:d8:fa:91:ff:93:f0:
f1:3b:5f:6f:97:16:75:6d:0d:f2:b6:33:0e:58:ea:
29:f3:11:e1:ec:f1:a2:d3:df:65:a4:67:bd:d9:06:
60:fc:ef:50:54:f1:83:50:c1:4c:13:e9:f8:0f:19:
b6:26:07:29:54:68:0c:85:fc:12:af:5a:28:86:71:
67:5c:49:2a:7f:56:b2:a8:96:bf:41:a1:2c:9d:39:
3f:88:54:9e:df:49:b1:42:43:d7:b1:f5:ca:fb:7c:
03:20:92:74:7f:ee:23:1f:e8:ee:7a:46:b5:b4:37:
b3:5e:57:12:be:b1:e4:03:0d:4c:8e:dd:d7:3c:f9:
28:da:02:a4:2b:8e:78:7e:db:70:c4:1d:64:1b:bb:
9d:1b:44:ee:12:b5:aa:84:73:1e:91:2f:cd:62:40:
b7:e0:5e:2d:b8:17:a0:24:86:a6:5b:7b:0d:73:16:
c5:bb:b8:e4:e4:19:49:84:bf:ee:72:02:35:d8:5d:
57:e0:08:1d:50:89:c8:4d:99:b9:b2:f1:7c:27:fd:
e6:d4:01:63:39:03:c3:a2:7d:8b:67:20:e1:a4:ac:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:A9:DB:4F:8F:9D:75:B2:9B:04:79:5D:7D:5C:8D:8D:C2:D4:2A
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3d:e2:a1:62:03:d8:d5:aa:a6:f7:fe:04:35:28:06:b1:e4:
db:73:6b:91:bd:87:cf:f5:a9:73:67:8a:9a:76:3e:05:a2:99:
38:9d:26:64:4a:b0:d1:96:2c:de:6e:bf:2a:52:43:8b:1b:15:
0a:f7:1d:8b:66:f3:e6:da:89:3a:2c:6f:ac:f7:e1:17:f9:50:
fb:3b:ce:ea:f6:5e:1c:27:ad:94:ab:c4:eb:29:7b:4c:f4:4e:
42:86:f3:f0:b3:fd:66:56:3b:0f:b4:c0:6c:b7:6d:a0:32:bb:
35:b5:39:51:f3:76:c1:4e:7b:76:fd:c9:2f:4e:96:ad:99:11:
1a:87:ec:83:10:ff:93:3e:d4:6b:e2:fa:eb:50:a2:1b:26:0c:
51:38:8c:8d:03:29:06:90:86:9b:6d:a4:9a:10:3d:28:43:17:
25:6e:b2:f5:37:5d:8b:6f:94:29:12:a3:6b:af:ec:08:1a:d8:
8e:00:41:c0:2e:73:40:4b:f2:12:4f:c4:66:c0:45:57:03:e5:
cd:d8:bd:57:4e:69:75:d7:77:28:bf:40:f8:6a:36:9f:e4:4a:
dc:92:48:13:d7:c1:c9:9e:3f:5d:9e:71:89:8f:54:01:41:e0:
b7:5d:9e:15:ff:62:c0:0f:c8:1e:cd:80:f0:03:15:12:00:ae:
c3:e8:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:58 2025 by rpki-client