Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: 1lbVIEc1bGTCnCSeJsw//MS78J9M2xibm17eIMAJUW8=
Subject key identifier: 8C:F9:24:27:94:BD:F9:E9:35:3B:33:D9:17:95:55:F2:54:B4:86:4C
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 0197737699487EDCF65D55A31EF9CC5F731A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 1523
Signing time: Sun 15 Jun 2025 12:00:41 +0000
Manifest this update: Sun 15 Jun 2025 12:00:41 +0000
Manifest next update: Mon 16 Jun 2025 12:00:41 +0000
Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: DZbYaC1FTDUR4O2u8RC3H+gqEk4nkrKuyKRBK1KruYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:99:48:7e:dc:f6:5d:55:a3:1e:f9:cc:5f:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Jun 15 12:00:41 2025 GMT
Not After : Jun 16 12:00:41 2025 GMT
Subject: CN=8cf9242794bdf9e9353b33d9179555f254b4864c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:95:12:96:bb:a9:ff:25:70:7b:f4:06:0e:
fe:4a:9a:38:ef:b9:0e:e7:ea:96:1d:2a:9c:0e:96:
91:80:67:a9:43:53:48:12:3b:4e:b8:79:6f:fe:44:
17:c4:39:e7:95:05:40:bb:53:4e:f1:13:6a:4e:76:
7e:18:05:88:ac:87:d2:db:bc:59:f1:6a:45:1e:11:
50:78:d5:76:29:6b:55:41:64:87:6f:96:8b:aa:9c:
e7:6b:e2:3a:67:51:db:0a:dd:3b:fb:03:e5:78:62:
fd:b8:31:53:48:f7:70:80:3b:6b:74:3f:cc:75:20:
60:21:01:d3:e0:0f:bb:d7:5f:f2:86:71:2e:62:c7:
1c:5a:22:03:ed:b2:55:45:42:c0:a5:89:bc:25:5f:
10:ad:38:fc:f4:38:c8:d3:98:73:47:28:67:0e:54:
54:d8:3c:ac:3b:b5:0a:52:5e:59:53:04:c7:60:7f:
b3:e3:84:d8:89:31:b0:40:74:77:b8:cd:02:02:eb:
b0:51:9a:41:9b:3d:aa:8c:dd:15:3b:4f:c7:86:ac:
c4:04:ed:9c:4c:a0:d2:b3:18:a7:82:19:9d:48:09:
18:d3:67:6e:de:7b:73:59:3c:78:24:c5:eb:e5:f1:
f4:a5:78:33:12:7b:6a:c8:49:b9:10:b4:eb:ae:ab:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:24:27:94:BD:F9:E9:35:3B:33:D9:17:95:55:F2:54:B4:86:4C
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7f:d6:ad:1a:a5:d8:2e:96:7d:c4:78:4b:eb:37:65:b2:13:
af:38:31:b4:02:b0:29:83:49:ea:27:63:bd:c3:1d:77:96:89:
61:89:e4:b0:d0:51:05:fb:50:6b:26:e8:64:76:59:fd:92:75:
fd:12:05:da:6e:07:d6:dd:d6:4d:27:a6:8c:77:1b:fe:14:0f:
a2:3a:0d:bf:99:0d:a9:8e:a5:ea:12:bd:4e:df:97:44:f0:4a:
45:23:94:c6:65:7d:fd:48:89:34:47:d9:7f:90:e4:42:ac:1a:
44:d8:e5:98:d2:8d:09:d9:28:59:5c:78:ac:ec:ba:69:be:ba:
4a:4a:52:fb:51:ad:6d:22:90:84:9e:b5:bd:a3:cc:74:ba:aa:
3f:f2:ba:5b:40:d8:15:7c:e2:6b:34:19:f4:b7:cb:48:79:38:
46:3e:6a:7e:a5:3b:7f:08:ae:a0:88:12:f7:89:08:03:b2:f8:
56:55:b8:f4:24:fe:97:94:b1:ff:0a:0f:65:4d:f4:05:dd:c7:
38:42:1f:38:4c:ac:a4:0a:38:b4:c8:ec:6d:08:32:e2:36:c0:
48:1a:b7:d9:12:4a:89:1e:d4:69:66:db:fb:2d:bb:a7:47:cd:
cb:4f:47:36:7e:49:2a:f6:95:6e:58:df:72:21:01:c1:9e:4b:
ae:5e:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:54:03 2025 by rpki-client