Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: nbQkxve8kfQPXkOOU3ifHt4zIYXZdNrTxINNIvUKo7A=
Subject key identifier: 4F:68:F6:70:DC:01:81:A3:37:1A:94:4F:0C:04:73:DD:B1:F4:BA:84
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 0196A4D3A75C986EFD62775B70C38D2F0E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 14B8
Signing time: Tue 06 May 2025 09:00:56 +0000
Manifest this update: Tue 06 May 2025 09:00:56 +0000
Manifest next update: Wed 07 May 2025 09:00:56 +0000
Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: i96ojv1SPlojQaqbANV/ZVqGzzno3BwJKgrFLZomIuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:a7:5c:98:6e:fd:62:77:5b:70:c3:8d:2f:0e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: May 6 09:00:56 2025 GMT
Not After : May 7 09:00:56 2025 GMT
Subject: CN=4f68f670dc0181a3371a944f0c0473ddb1f4ba84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:c7:d4:ab:e9:bd:6a:23:3c:73:c8:13:da:
c8:91:e2:8f:45:f2:5b:4d:cd:66:81:05:4b:a1:00:
b6:77:e5:0f:f5:a3:e2:4d:3c:86:3d:22:21:c5:68:
9a:f8:0e:ae:22:07:a2:a3:12:02:5a:ae:08:7d:22:
be:4c:40:de:d8:a4:e9:d1:5f:7b:3d:00:57:11:ee:
d9:65:18:3a:5b:c6:b7:c6:f3:9d:85:81:6a:d2:f1:
8f:d1:67:8b:6c:f0:4a:d3:5a:21:ad:df:05:a8:31:
1f:44:4e:61:ed:f9:c6:58:59:2b:02:2a:04:40:bf:
13:c4:66:51:05:d0:07:90:b2:50:41:67:c8:a7:73:
92:a6:3e:95:26:62:37:92:f4:83:f8:07:3d:0e:47:
49:e0:27:cf:08:9a:10:28:d7:a4:9c:07:1e:a9:fb:
5a:c1:94:13:d0:a6:13:4f:a1:43:8b:d3:c4:c8:dd:
92:55:4f:72:e9:6a:1f:e2:c2:0e:1d:2f:c4:7d:0b:
88:e5:4d:50:77:89:c6:56:7f:22:38:cf:78:0e:cd:
a3:69:7b:ca:f1:10:de:11:49:69:cd:79:0d:12:31:
99:5c:73:ad:bf:65:8f:41:29:56:2d:bf:83:12:a2:
54:57:97:38:d7:bc:7c:79:7c:e6:0e:26:7b:56:da:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:68:F6:70:DC:01:81:A3:37:1A:94:4F:0C:04:73:DD:B1:F4:BA:84
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ee:75:4e:13:fb:63:7c:06:46:de:64:af:fa:89:d9:75:d6:
76:d9:f8:99:26:bb:a6:bd:52:49:d9:5a:0e:4e:00:34:b0:00:
cc:86:db:75:81:ac:25:08:d2:e0:f5:d0:4d:a3:8d:0c:d1:99:
06:7b:8a:c9:18:37:39:6d:c5:ae:67:57:15:e1:0e:48:43:e9:
30:16:56:ab:da:c2:22:67:42:fd:70:ca:74:73:6a:09:08:f8:
0b:e1:2d:9f:b1:10:9d:3c:a5:48:63:2c:d6:95:26:d7:aa:cd:
ae:85:1a:83:3b:79:6a:b3:7d:85:10:c1:da:bf:02:4c:34:e8:
6d:33:54:82:d0:01:d8:49:76:77:66:4d:a0:8e:6a:6b:2c:97:
3e:b8:68:a4:fa:c3:a8:6a:c1:09:a4:24:fe:37:ab:ce:f4:f7:
d2:de:3a:88:14:fd:57:7c:68:0f:37:bb:61:0f:fb:8e:3a:49:
1f:4e:c3:3b:0a:c2:8d:87:44:93:3d:a5:3a:64:aa:8b:0e:b3:
f7:58:8a:25:59:6b:38:2b:10:1f:00:cf:71:36:aa:25:9c:57:
ca:02:b5:21:1d:8b:5c:88:da:da:cc:48:c8:58:30:b2:d1:e1:
dd:22:cc:ac:52:3f:11:60:67:a5:5a:35:5e:12:5a:47:e8:70:
29:86:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:27:27 2025 by rpki-client