Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: +OLrjl3BrO9nOiiqbZKyg422Lg0gsn7iEkDYU/MnhIw=
Subject key identifier: 5B:7E:7A:AC:20:0C:D0:BE:D8:AC:11:70:DF:61:53:95:0E:BB:3D:92
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019916BEC790625EA851DBBD66784F91AFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 166C
Signing time: Thu 04 Sep 2025 22:00:25 +0000
Manifest this update: Thu 04 Sep 2025 22:00:25 +0000
Manifest next update: Fri 05 Sep 2025 22:00:25 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: MV5CsLz0gUiSvcuCMP4ioNC4YUwnvOLA78ra24C+Uc4=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:be:c7:90:62:5e:a8:51:db:bd:66:78:4f:91:af:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Sep 4 22:00:25 2025 GMT
Not After : Sep 5 22:00:25 2025 GMT
Subject: CN=5b7e7aac200cd0bed8ac1170df6153950ebb3d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:31:aa:f3:46:0d:ec:a8:fa:48:2c:62:21:
36:40:ff:1f:fa:20:73:de:0e:cf:a0:1c:22:df:af:
52:04:cb:48:06:ba:46:71:c6:af:de:34:55:f9:76:
39:26:3e:65:fd:e7:0f:43:13:f0:40:3e:cc:fd:30:
7b:77:c1:24:41:11:d3:71:12:fd:44:9b:c9:1c:15:
cb:b2:3b:72:20:da:ca:a6:04:9d:90:96:b5:e0:41:
cd:7f:b0:41:49:bb:7d:fe:13:10:80:34:2d:10:c9:
cb:fd:bf:24:0b:0d:c0:84:12:a9:c9:d6:23:90:76:
9c:d0:61:d3:17:42:f1:4b:85:6f:be:15:ca:ab:52:
af:f8:c3:b3:96:a5:42:20:c4:da:f6:b4:8e:1e:b3:
62:75:d0:a4:54:47:01:d3:8b:e1:14:46:a3:d0:07:
8a:e1:1d:d1:02:45:f0:03:05:e2:d7:42:74:37:54:
2c:a5:0b:cf:5d:3c:ac:90:3b:56:f1:62:5f:da:cb:
85:f5:c9:76:fd:d7:9a:27:23:df:e3:f1:d0:4a:55:
19:74:13:ab:20:80:c1:d5:69:d9:7e:13:5f:85:0d:
45:79:92:f7:4f:3e:cb:d2:e5:c1:07:8b:89:b7:d2:
16:28:8e:64:b9:6d:1d:3a:a4:31:72:e5:9e:c7:14:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7E:7A:AC:20:0C:D0:BE:D8:AC:11:70:DF:61:53:95:0E:BB:3D:92
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:13:e6:c5:b6:cd:95:f6:94:7b:13:9f:ba:c5:a2:fb:c4:
ee:4f:18:78:8a:21:5f:a8:2d:42:34:ff:77:21:b2:46:f3:9b:
d4:78:9d:cb:6c:bf:d5:7e:6a:5c:59:c6:59:73:01:9f:e3:88:
a2:84:be:65:bf:02:01:a5:ef:3c:c5:4d:a3:bf:73:7f:ff:18:
fc:91:79:26:3e:77:17:17:8e:ee:0c:2c:cc:9c:de:b2:eb:39:
e1:18:9b:ff:21:1c:3a:0b:e6:6b:be:28:fa:33:49:af:73:a3:
2e:13:ec:86:69:56:6d:84:52:99:e1:fb:e2:f0:ee:dd:24:6c:
74:b2:67:81:50:6f:1f:ef:86:85:1d:c4:1a:fc:bd:44:0c:c6:
62:1f:4a:13:fb:7c:94:45:17:e8:d9:83:e2:fe:86:06:9b:71:
6e:4e:ba:f3:90:d1:dd:42:f7:d1:03:22:5b:0f:55:bb:00:99:
2f:55:6f:70:5e:97:96:b6:a6:94:1a:0d:12:02:cc:32:50:9a:
b9:b0:75:da:9e:17:d1:2d:d2:ab:23:cf:28:a2:c5:00:b7:6f:
35:d0:c9:d2:d8:ab:91:42:8c:19:92:1b:23:b8:ed:45:bb:25:
4d:29:b6:31:8b:09:71:91:3f:12:15:55:a4:9d:f4:94:ef:90:
ad:18:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:23 2025 by rpki-client