Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: 3jF6EJkH5/XVFh4xDq2/HTXQQ5eD7d2URlUOroS8wjc=
Subject key identifier: BE:E2:92:52:E5:25:6E:A5:8C:4E:D9:7C:DE:EA:8A:DD:67:3A:97:11
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019A7225EAEC6ED58059D21BDA8D8A9EF2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: m/LNj792FhUsxTVWAKJSFZSK/+oFMsE4mjELP/h3b4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ea:ec:6e:d5:80:59:d2:1b:da:8d:8a:9e:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=bee29252e5256ea58c4ed97cdeea8add673a9711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:1c:72:c4:d1:f7:bf:20:77:01:c9:19:95:
4f:bc:dc:8c:69:fa:95:00:b1:39:fb:ec:e0:c4:da:
f1:b5:f6:0f:d2:a4:d8:e2:5b:9f:d5:94:6c:c8:d8:
1c:68:c4:19:94:55:c8:86:c7:9d:5a:f2:6e:71:21:
c3:40:25:18:40:50:0f:59:f1:41:c8:60:21:d6:5f:
45:89:96:21:6f:be:56:42:5e:bf:67:55:2b:02:b1:
8d:f2:1c:26:13:bf:a8:a1:43:02:e0:88:c0:52:06:
5f:cf:1e:a8:41:6c:8c:19:88:1d:1d:2b:a6:5c:34:
d4:ff:a2:8d:60:8e:06:49:a4:8a:db:63:f8:d6:ab:
ee:68:86:6d:7c:1b:e0:84:e3:96:5b:b5:ef:4a:13:
48:36:1a:b6:a7:3c:6e:ef:40:fd:3f:f1:5d:2e:7c:
57:74:39:fd:6e:87:7f:7e:38:d5:a5:70:ce:42:71:
80:7e:f2:20:c0:e7:4b:aa:8a:f3:44:8c:f0:53:54:
88:57:e1:07:28:15:56:2a:be:6a:2a:0b:f1:74:87:
07:be:4f:82:2a:ce:77:c6:61:f6:ae:a7:61:4c:20:
40:81:86:87:84:4e:cc:5c:b9:e1:c5:c9:7f:30:ce:
9b:2c:fd:98:25:6d:8b:a8:0e:5c:a8:5b:8d:6a:14:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:92:52:E5:25:6E:A5:8C:4E:D9:7C:DE:EA:8A:DD:67:3A:97:11
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ef:72:10:79:df:a7:82:28:70:bf:7f:a6:2d:00:0c:02:e4:
ad:71:9e:15:49:ce:3d:ef:a0:cd:6f:8d:21:e6:c4:c1:a1:4c:
72:e7:fe:ee:dc:1f:a5:13:b4:62:21:56:ee:0d:7d:55:b9:cf:
a5:30:de:33:ca:b1:f1:df:0a:c7:54:21:1e:df:e5:53:28:ca:
6d:22:89:37:f8:ce:28:7b:e1:44:24:d2:32:74:91:ac:29:f9:
3f:be:ea:39:db:3b:4b:40:60:33:00:75:e8:a7:43:e7:73:fc:
e0:56:aa:f6:7d:68:ee:87:5e:4b:35:ce:f2:db:40:5c:d9:97:
eb:92:03:e9:f6:20:09:ec:58:da:4c:0d:8a:5d:3c:a8:3d:83:
24:a6:d3:d5:c6:8a:68:59:fd:ee:d7:16:6f:36:37:88:64:6e:
e6:40:09:3c:ef:1a:d2:a7:ea:40:3c:24:9c:c1:ed:32:bc:08:
d9:25:7c:03:73:fd:28:bf:13:fc:d4:1c:76:ed:7e:b6:23:26:
cf:59:6d:23:1e:1f:12:4a:34:77:8e:30:0c:b9:aa:32:37:b4:
44:61:5c:33:a7:41:9c:35:6f:54:1a:56:68:c7:d2:83:94:76:
3d:4d:d4:27:54:1f:fd:2b:51:af:7a:af:80:5d:29:fb:a5:89:
9a:08:f8:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJersbtWAWdIb2o2KnvLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjI1ZDg1OWZmMDZiZTFlYmM5N2FkZDVkZWMwNWQzNmZj
ZGNhMmQwHhcNMjUxMTExMDkwMTE4WhcNMjUxMTEyMDkwMTE4WjAzMTEwLwYDVQQD
EyhiZWUyOTI1MmU1MjU2ZWE1OGM0ZWQ5N2NkZWVhOGFkZDY3M2E5NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqcccsTR978gdwHJGZVPvNyMafqV
ALE5++zgxNrxtfYP0qTY4luf1ZRsyNgcaMQZlFXIhsedWvJucSHDQCUYQFAPWfFB
yGAh1l9FiZYhb75WQl6/Z1UrArGN8hwmE7+ooUMC4IjAUgZfzx6oQWyMGYgdHSum
XDTU/6KNYI4GSaSK22P41qvuaIZtfBvghOOWW7XvShNINhq2pzxu70D9P/FdLnxX
dDn9bod/fjjVpXDOQnGAfvIgwOdLqorzRIzwU1SIV+EHKBVWKr5qKgvxdIcHvk+C
Ks53xmH2rqdhTCBAgYaHhE7MXLnhxcl/MM6bLP2YJW2LqA5cqFuNahSodQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7iklLlJW6ljE7ZfN7qit1nOpcRMB8GA1UdIwQY
MBaAFHKyXYWf8Gvh68l63V3sBdNvzcotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMt
MTIzZmEyYWI5NDA4LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMtMTIzZmEyYWI5NDA4
LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe9yEHnf
p4IocL9/pi0ADALkrXGeFUnOPe+gzW+NIebEwaFMcuf+7twfpRO0YiFW7g19VbnP
pTDeM8qx8d8Kx1QhHt/lUyjKbSKJN/jOKHvhRCTSMnSRrCn5P77qOds7S0BgMwB1
6KdD53P84Faq9n1o7odeSzXO8ttAXNmX65ID6fYgCexY2kwNil08qD2DJKbT1caK
aFn97tcWbzY3iGRu5kAJPO8a0qfqQDwknMHtMrwI2SV8A3P9KL8T/NQcdu1+tiMm
z1ltIx4fEko0d44wDLmqMje0RGFcM6dBnDVvVBpWaMfSg5R2PU3UJ1Qf/StRr3qv
gF0p+6WJmgj4xA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:43 2025 by rpki-client