Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: SHTZ+/krXOeGt0tA4c7i9/9m9If9AA1kL2ZYuolvVcA=
Subject key identifier: D1:6B:0E:E0:86:D8:F4:FA:47:F4:52:12:CB:A7:C4:B3:0E:93:58:90
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019A4F620EA72B3AA0A4B0C5CBC9DF7E325B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 15:00:17 +0000
Manifest this update: Tue 04 Nov 2025 15:00:17 +0000
Manifest next update: Wed 05 Nov 2025 15:00:17 +0000
Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: akez+o1Nlk2TKpPPse7vNkgRw9rODetBQNjKcz2HNzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0e:a7:2b:3a:a0:a4:b0:c5:cb:c9:df:7e:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Nov 4 15:00:17 2025 GMT
Not After : Nov 5 15:00:17 2025 GMT
Subject: CN=d16b0ee086d8f4fa47f45212cba7c4b30e935890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:19:95:ea:f8:e3:b8:e5:99:ec:c6:8b:68:bb:
18:26:e1:9c:05:9b:74:58:50:70:60:4c:c4:8a:cf:
f4:05:91:57:49:b6:24:58:4d:f6:8b:2a:05:75:0c:
a2:d3:6c:c9:e1:3a:2e:8a:7d:18:8d:42:80:20:e6:
d6:24:e3:af:3a:d4:fd:38:a0:90:cb:14:6e:70:9a:
9c:19:e2:f8:2a:d7:0b:e1:0a:9b:58:5a:3b:14:1e:
67:60:2e:92:13:23:2d:a0:13:25:e3:dc:9f:3d:74:
c6:46:15:ad:9d:e2:ca:9c:ca:57:7a:22:5d:a1:1e:
3b:85:70:b3:b6:29:1d:de:bf:a9:a9:09:c8:da:65:
10:94:25:67:a1:34:e4:82:66:27:29:b7:a0:4c:66:
cd:20:ce:d4:f6:da:75:48:7a:e7:0f:48:a7:c9:6c:
79:66:a1:ff:fb:8b:60:11:cd:28:9e:87:8f:1e:53:
86:15:bd:84:8b:f1:02:ed:1d:83:aa:96:ff:29:5f:
83:8b:ef:ba:49:0f:5b:c3:08:5b:c6:8c:2a:3b:cd:
57:6b:bd:84:99:07:d0:06:c8:68:73:8f:1f:04:3b:
2c:e4:63:59:ae:1a:45:d1:0b:5c:00:80:da:64:14:
09:14:54:3b:1f:71:3d:b3:05:ac:d8:91:2e:dc:be:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:0E:E0:86:D8:F4:FA:47:F4:52:12:CB:A7:C4:B3:0E:93:58:90
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e2:c6:b1:ab:0f:c3:8e:59:b0:43:0c:6b:42:30:1f:eb:a1:
d2:f9:0f:ab:eb:34:27:74:aa:db:39:57:f1:52:f0:28:a2:3c:
cf:87:3b:61:c4:16:ba:98:59:a8:32:24:f2:b5:34:aa:af:14:
06:ec:eb:b9:03:c8:6d:05:2b:9b:53:4d:28:6a:64:3e:26:6c:
f3:60:a8:0c:9c:6e:09:b2:4f:04:7f:2b:17:65:53:26:56:f3:
5a:cb:37:81:53:81:f9:8c:28:d8:b6:97:f3:78:c0:0f:bf:00:
b2:59:cf:fe:cf:e2:b7:94:1e:04:9d:d4:19:ec:34:de:03:81:
69:ef:1b:cf:81:fd:a4:52:8c:07:a6:ae:9c:37:c9:53:f6:33:
c8:9a:85:d1:72:00:fd:f0:26:b5:73:a0:ea:0d:73:21:70:0f:
1a:54:d5:7d:aa:79:4a:fd:fb:60:bf:82:c9:d0:b9:de:5e:3e:
44:38:c2:6b:b0:0e:ce:08:a9:24:e6:fb:08:bf:bf:d0:8b:26:
43:b7:aa:1e:b4:1c:a7:c9:62:e1:e4:07:38:d8:fa:c3:c9:73:
59:34:9b:09:25:20:f5:43:a6:34:bb:34:80:54:33:f6:e7:59:
5a:be:ca:05:6d:58:6b:67:3a:54:db:6c:6d:d8:81:66:e8:bb:
a8:39:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:35 2025 by rpki-client