Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: oOqh0wTxYszroZHPK9GeJ8vEXPpcGy+WHkHY92OZGO0=
Subject key identifier: F3:9A:36:ED:14:D2:37:41:4D:93:13:74:8F:19:97:D4:4F:F1:77:D4
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 0199240D580C4184D4948711CBCF18753E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 1603
Signing time: Sun 07 Sep 2025 12:01:18 +0000
Manifest this update: Sun 07 Sep 2025 12:01:18 +0000
Manifest next update: Mon 08 Sep 2025 12:01:18 +0000
Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: eebn3vikVx6ovu9cdEhYWA3Y6YrZvYhmeSG3K0ghuMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:58:0c:41:84:d4:94:87:11:cb:cf:18:75:3e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Sep 7 12:01:18 2025 GMT
Not After : Sep 8 12:01:18 2025 GMT
Subject: CN=f39a36ed14d237414d9313748f1997d44ff177d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:33:e1:86:35:4d:52:32:b0:fa:d7:cf:a9:
42:05:7d:f2:48:61:18:96:a4:5c:b7:75:e1:01:34:
49:56:98:52:ff:25:6d:96:19:9e:d6:f0:f3:ed:5c:
72:34:0a:5b:14:1e:9c:3b:00:d3:1f:0a:06:44:62:
07:82:77:8b:9c:2b:ba:b7:69:5f:e5:86:fe:4b:1e:
62:52:23:45:a8:f6:a8:31:8f:81:2b:51:cc:87:13:
05:22:fe:44:b0:34:8a:b9:6a:a8:c0:c3:61:05:7c:
40:ae:b8:c9:8e:d1:fc:3b:c8:5c:64:67:db:56:62:
b8:25:f6:1f:c4:a3:6d:2f:65:6f:34:66:08:16:9c:
fa:d9:25:e5:05:e8:57:52:64:f2:b9:09:d5:0d:cf:
f4:bf:c8:29:f5:52:3b:96:c3:7e:de:a8:79:e7:5f:
bc:7d:79:cb:5c:8b:2d:db:a1:6b:bf:a1:2f:bf:38:
30:1f:2f:2b:a1:04:77:d0:f9:da:73:a5:89:ef:10:
41:4d:38:27:a5:37:50:58:fc:c7:e7:9a:52:27:30:
cb:37:e9:61:67:ae:77:8e:63:d7:64:ea:a1:c4:9f:
5f:89:40:b7:9a:07:02:91:61:83:ee:85:e8:a3:97:
62:cb:bd:fa:47:8d:e0:a8:76:5c:7f:ad:ff:8d:24:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:36:ED:14:D2:37:41:4D:93:13:74:8F:19:97:D4:4F:F1:77:D4
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9a:4a:93:4e:52:24:05:7b:52:f1:a2:11:24:56:a2:60:82:
b0:86:fd:ee:7f:92:90:74:90:d2:8a:93:23:90:a3:58:0b:42:
5c:3d:8e:83:6c:f9:7f:c9:e5:a3:0b:96:0f:6d:e0:7b:88:b3:
82:ce:71:86:ff:d0:08:6b:4c:4f:d5:5e:27:b8:60:36:dd:c8:
5c:0d:3f:07:8e:bc:cc:be:1a:dd:2c:02:a9:c6:66:95:8d:4a:
03:c7:94:af:68:63:9b:3c:6f:a6:84:a0:9d:7b:b1:e5:56:d8:
d9:19:9d:b3:1a:48:0a:4e:ed:5b:cc:0b:b7:d7:8c:57:c1:17:
a8:ff:89:92:c4:a8:ee:cb:99:24:aa:a2:e0:7d:5e:96:69:86:
0f:ad:3d:e0:b2:ed:36:1d:48:c4:6c:e4:af:01:65:3b:2e:b0:
76:fe:6c:9b:45:82:a0:07:7c:50:d6:b9:19:81:23:01:54:e5:
97:ae:79:41:de:4b:32:13:d9:95:e5:29:bb:e4:b5:02:ef:63:
3e:5d:d8:56:d1:ee:5f:9b:59:d6:45:12:c3:4b:55:3f:02:55:
9a:45:34:6c:0e:05:97:d6:47:67:13:f4:8c:de:7c:06:d4:a2:
07:ee:48:d7:e4:68:60:37:4e:95:a3:68:ee:78:e6:7e:6f:39:
c2:00:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:43 2025 by rpki-client