Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: 3nWZ2KNU886SQkHOowpKKzPmN4DKbBwGAS1swcVAaUU=
Subject key identifier: 8C:D0:A8:22:F8:6C:10:B8:CD:32:43:EA:DF:C9:B1:2E:79:ED:AC:59
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 01974D0D8CA6A6595819C185F9A57FB93E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 01:00:22 +0000
Manifest this update: Sun 08 Jun 2025 01:00:22 +0000
Manifest next update: Mon 09 Jun 2025 01:00:22 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: c/xe8mrsXi3l/PFwIG2LjNsR1qqrryCEfI8+qHwF9oY=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:8c:a6:a6:59:58:19:c1:85:f9:a5:7f:b9:3e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jun 8 01:00:22 2025 GMT
Not After : Jun 9 01:00:22 2025 GMT
Subject: CN=8cd0a822f86c10b8cd3243eadfc9b12e79edac59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:bf:75:a4:80:b7:47:34:9f:8f:72:7b:75:
b4:66:a6:62:1b:a8:d4:b9:7f:a4:e3:ee:b2:fc:4f:
05:91:87:6e:37:57:bb:b0:f3:75:e7:1d:9d:54:84:
ee:07:bf:05:59:a7:f3:b1:fb:93:59:a0:47:c6:99:
ec:a0:cb:53:89:53:75:a8:d7:57:cf:b5:fa:85:bc:
0c:a5:37:be:85:2d:7e:a8:92:c4:a6:42:a0:6d:98:
04:d1:89:24:43:89:a6:ed:83:5a:7e:bc:2c:2e:44:
7f:ab:be:23:5c:0d:e4:8b:ff:d2:fa:31:e3:b7:e4:
10:2f:60:b5:4d:bb:99:8d:16:31:9c:25:8d:05:1b:
33:c7:a6:7b:4a:ea:c5:29:e1:6d:40:7f:41:ed:fe:
3b:70:9d:cf:7d:c1:c0:66:04:31:e0:47:2b:b9:4f:
84:f9:74:46:aa:29:14:0e:eb:17:7b:99:a7:1d:ef:
29:53:ea:36:51:cd:c2:b8:0e:6a:ca:ad:d8:31:45:
0d:c6:b6:6f:cb:c6:11:c6:95:15:10:94:58:69:f9:
8f:fa:96:3e:93:91:4f:a3:8c:8a:62:15:47:65:ac:
60:ff:71:6d:f2:c3:0b:eb:5a:54:97:f0:e8:c0:81:
66:a4:f2:18:aa:e7:d7:1d:79:47:73:c8:2c:66:f4:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:A8:22:F8:6C:10:B8:CD:32:43:EA:DF:C9:B1:2E:79:ED:AC:59
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:85:09:c1:ef:fc:fe:f8:b9:f9:9e:12:d3:8f:1e:1c:a7:57:
d8:b2:70:2e:7a:78:d4:45:2b:ae:53:1b:fb:35:98:4d:86:07:
10:93:30:55:99:8b:37:d9:c1:11:ba:71:35:2e:41:24:d9:82:
e5:95:36:75:ee:6d:10:12:0d:b8:ae:70:aa:4e:1b:17:f7:43:
19:fe:0b:15:bf:7a:d6:04:83:ce:eb:98:d5:4e:cf:a9:4b:4a:
4d:8c:9b:d8:df:b0:0b:3d:f6:e4:9a:a9:bc:39:cf:f0:a9:c2:
ee:ba:b3:7d:fa:e2:73:0d:63:e9:20:5b:2d:c8:c3:da:e6:39:
ae:a9:1a:d8:84:28:c8:35:2b:60:9c:1e:3e:b3:fd:66:0a:a4:
54:c1:ad:fd:35:c8:79:1a:8e:cf:ad:35:0a:2a:e6:01:fa:6f:
cd:3f:0b:1a:b2:d3:5b:3b:37:b2:cf:a6:87:cb:e7:fb:c0:c7:
55:dd:8a:06:e2:de:18:94:25:97:30:ba:44:3d:77:4b:0f:1a:
3a:0c:5d:e5:f9:be:f0:10:5b:68:a2:ec:5c:d8:6a:99:d5:ff:
52:34:9e:d9:8b:f6:6b:a2:0e:16:d6:30:da:c9:bf:e8:01:e3:
96:a4:36:f8:ca:77:33:4c:ab:f5:8f:89:90:61:71:64:82:3b:
22:44:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:19 2025 by rpki-client