Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: 8TlMSDc4CWnftz+elQdBoE55ZSbqca2Tf6/YFtNQ+as=
Subject key identifier: 80:99:B2:41:88:0F:01:B9:BF:DC:B1:20:EE:00:C9:91:D8:24:15:FC
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019748FA2D7D885597E7F8C1983FA41A3CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 150D
Signing time: Sat 07 Jun 2025 06:00:44 +0000
Manifest this update: Sat 07 Jun 2025 06:00:44 +0000
Manifest next update: Sun 08 Jun 2025 06:00:44 +0000
Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: W/1filnKrR2lcWXCPTbnPNEN4rRDvXjsG25e6sNjkgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:2d:7d:88:55:97:e7:f8:c1:98:3f:a4:1a:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Jun 7 06:00:44 2025 GMT
Not After : Jun 8 06:00:44 2025 GMT
Subject: CN=8099b241880f01b9bfdcb120ee00c991d82415fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:ab:b4:c4:aa:c8:74:59:58:c7:55:65:bc:
de:f9:36:53:97:74:6c:bb:36:04:3c:cb:f2:c2:15:
8b:17:1f:58:47:b7:cf:22:ab:64:bb:2a:d9:ed:88:
4d:f2:ad:55:af:41:9d:38:04:15:f8:e6:24:6a:06:
57:f2:63:16:49:96:02:4e:09:bf:41:73:3c:85:1d:
77:91:4c:da:6b:a8:c2:b8:37:a2:33:8d:a5:f5:97:
6e:0d:73:7d:28:09:b7:ce:42:64:08:4f:fc:45:09:
d4:72:87:38:b3:4c:c0:60:8c:de:8e:7f:36:84:2c:
b6:79:4b:d4:66:e0:e3:d6:4f:21:f1:1f:60:fd:01:
5c:cc:f7:8e:bc:ab:57:30:86:65:77:b2:31:39:7b:
2f:b2:6b:93:e2:6b:e8:15:83:25:69:ca:34:72:e0:
e1:e6:ec:6e:b5:4f:25:a0:5f:29:e2:38:07:a7:c0:
bc:f2:25:9c:95:07:45:e5:af:e9:4c:0a:b1:31:64:
5a:5a:ea:43:42:84:ef:c4:22:a9:8c:81:08:72:5f:
c2:7a:c3:cf:74:e5:f5:6e:c0:5b:e9:43:70:e5:b1:
4c:01:aa:9c:7d:3c:ac:0e:47:f3:d0:39:ab:ed:0d:
73:00:a3:7a:28:c9:7b:76:68:3b:dc:cc:21:44:66:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:B2:41:88:0F:01:B9:BF:DC:B1:20:EE:00:C9:91:D8:24:15:FC
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:15:59:82:6a:90:71:9c:4d:ef:74:34:0c:78:7a:96:ae:d9:
d0:fe:b5:4e:af:51:56:d2:db:0a:50:71:c9:cd:c5:76:1f:63:
51:c5:3b:34:d9:d2:9c:be:58:73:52:f5:fb:76:5a:08:d6:2f:
6e:e3:98:dc:f9:a5:95:b2:40:01:6b:9e:fb:f1:33:5b:d4:d6:
ff:75:8a:08:b3:19:35:c7:92:9f:36:b1:78:d1:5c:d1:43:54:
5b:5d:5f:42:2c:60:9d:1d:df:72:63:f3:eb:87:16:c1:77:27:
a4:85:ed:98:02:e9:43:1e:0c:20:cc:45:98:90:ef:f5:f9:08:
11:55:5c:4b:42:0b:19:dc:65:7c:64:4d:e5:a9:90:c4:7e:12:
65:0f:ae:b3:0a:16:54:1f:d3:dc:26:a9:20:da:d0:f9:2f:3c:
d7:7d:8a:46:9d:19:91:fa:f2:63:74:cc:57:2c:bd:e7:34:ec:
ab:62:3c:48:4d:59:ab:e6:de:c1:22:16:32:fb:de:a8:7f:23:
d3:f3:c5:f2:9e:e2:cb:96:31:01:33:fe:11:05:0a:1b:2a:ae:
20:20:40:b4:10:d1:45:bc:04:fe:11:ee:07:86:06:73:f6:20:
d8:c9:43:b1:0e:f2:90:c5:d8:c3:d3:c4:a6:a2:eb:44:0c:d2:
3d:e6:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:57 2025 by rpki-client