Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: YsVnneTB5w20rpkXikqRQfkUUi9xlsOWzkzwpvtxEYE=
Subject key identifier: D2:C1:9B:4E:26:FB:84:A4:C1:2B:DF:3A:D9:4F:8C:28:24:7D:F0:2C
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 01963EAFF6B46CF713D07C3ED01CA8CC2645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 13:00:41 +0000
Manifest this update: Wed 16 Apr 2025 13:00:41 +0000
Manifest next update: Thu 17 Apr 2025 13:00:41 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: NeSxMIv9u24D8R/RF71Joy65cMTB5+vUcqMnOq7eFps=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:f6:b4:6c:f7:13:d0:7c:3e:d0:1c:a8:cc:26:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Apr 16 13:00:41 2025 GMT
Not After : Apr 17 13:00:41 2025 GMT
Subject: CN=d2c19b4e26fb84a4c12bdf3ad94f8c28247df02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:9c:7c:41:46:6b:40:c6:8a:8e:49:26:2a:
9f:13:07:c4:aa:af:4c:4e:a0:d9:61:84:56:2f:af:
eb:05:9e:94:9d:89:f5:6d:c8:75:fb:ff:3d:19:7e:
97:f2:c9:cc:ed:a1:ec:91:af:fb:34:6c:45:7b:d5:
c2:ec:9b:65:2d:67:a5:88:f0:a5:75:07:45:a8:5f:
4f:21:b7:67:67:11:4b:55:92:c1:e3:47:f7:4e:0d:
4b:3a:16:95:1b:71:47:ea:61:20:9b:9c:96:45:99:
e5:2e:d3:19:d4:96:51:23:82:85:82:94:0c:9c:fa:
4d:c0:f9:bb:a6:97:25:ce:2f:a6:d9:43:9b:b2:e6:
63:75:96:ab:c5:19:6d:4c:c8:53:9a:b6:52:dc:bc:
f9:8b:60:4f:1d:25:bc:50:b1:fc:18:ff:a4:cd:f3:
66:dc:32:96:de:9b:cc:f4:7d:9f:18:df:fd:be:67:
fe:84:83:ec:c4:81:e1:1c:0a:7c:9e:e6:36:51:92:
37:dd:ea:0c:da:5f:e7:4f:08:39:2b:c8:e3:54:55:
47:de:33:12:4f:5e:f4:60:d6:51:d3:bb:7f:4b:62:
7e:9a:41:25:74:fe:30:66:e0:f0:ba:51:78:27:83:
08:c2:1b:30:77:18:a9:9e:50:70:ea:49:d7:1d:1d:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:9B:4E:26:FB:84:A4:C1:2B:DF:3A:D9:4F:8C:28:24:7D:F0:2C
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4b:c0:df:4a:d8:c6:55:e9:48:f5:30:1f:cc:22:fe:8f:c9:
85:af:0b:9b:2b:7a:21:99:46:5b:e0:5a:62:8f:83:e7:31:03:
5b:f0:ce:61:b4:52:44:03:e4:7f:2b:33:1c:55:d9:0e:79:60:
ef:ab:da:bb:9a:96:70:25:e6:37:99:85:2b:47:30:55:aa:f7:
b4:43:15:37:26:9d:93:ce:c0:5b:3f:6e:03:5a:fb:31:f1:52:
89:98:02:ca:7e:79:c1:0f:ae:9d:2d:dc:19:23:98:9a:44:05:
dd:fb:05:f1:ea:f1:36:50:69:ad:db:a0:44:5e:14:03:0a:42:
ac:1e:48:50:30:5b:60:50:45:61:4c:02:f6:59:ab:7a:f3:3f:
e7:99:00:20:f0:57:50:f9:a8:8e:1d:55:c8:a1:9e:3f:7c:cf:
99:a5:8b:43:0d:04:7b:71:97:6c:4d:aa:bb:b7:64:56:1c:66:
55:a1:44:81:35:11:8c:a3:5c:95:7a:a8:de:25:08:79:9d:bb:
1a:54:2b:a5:b4:17:35:28:2b:e8:5b:af:46:1a:b7:66:2a:79:
3a:c6:9a:a3:27:27:5a:50:0f:76:8d:56:fa:75:59:ec:e1:2d:
54:97:0c:d5:3d:71:b5:e3:9a:05:20:1f:e9:83:6b:bf:61:0e:
34:55:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:03:47 2025 by rpki-client