Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: pImm9HZ+Ob7S2wJJmPhJUASGVokt4b3wewLqBPRp1Zg=
Subject key identifier: 7E:3C:B3:B0:00:DD:C5:0E:64:68:4B:68:C4:C5:70:0B:03:E1:F2:37
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019A725CEEADEE09E7F560C624297B1DF6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: i/aojGyD67C/yK8hMrfFt0So4fGnVDO5Dnx5iBNMcyQ=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ee:ad:ee:09:e7:f5:60:c6:24:29:7b:1d:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=7e3cb3b000ddc50e64684b68c4c5700b03e1f237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:1c:68:c1:bd:4c:a8:dc:57:4a:01:20:52:
bf:1d:ef:63:4f:74:e5:b7:09:bd:fd:6c:9c:bb:8d:
d0:71:9c:03:e6:54:a6:17:33:d4:36:4d:62:45:44:
c6:81:ef:bc:cc:9a:ea:89:a4:25:88:93:16:d2:e9:
aa:f5:2f:1d:7f:1d:64:bf:38:8f:0d:6b:fd:90:05:
74:1f:04:b6:49:4e:22:70:2a:2c:e7:fc:6b:b7:b0:
b1:20:c9:75:80:d9:3e:04:e1:6b:2b:1d:1b:00:9e:
4b:57:4c:69:84:64:74:0e:c1:32:79:85:ce:4c:c6:
f4:48:25:36:64:68:f0:b5:68:2e:c6:09:5a:73:0b:
3a:5a:69:78:33:7a:10:9d:30:4a:f2:17:b2:bf:c7:
32:6d:83:1c:7f:2b:f9:44:8a:64:73:fe:ec:59:4e:
46:9a:9a:f1:0c:ab:0e:ef:37:ab:c5:a2:f2:ca:65:
05:16:3c:a3:47:05:09:f7:c4:19:fb:d4:4f:31:46:
ce:e3:43:ae:30:0e:8f:da:d4:04:68:72:5a:e4:8c:
6a:48:0f:7f:9f:f7:e0:b8:0d:37:91:fd:01:d7:29:
8a:6f:1a:45:33:0f:9c:24:8e:cc:47:9b:cc:1c:38:
0c:24:f9:80:d0:2c:ed:e7:76:a8:0a:40:5f:a0:9a:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:B3:B0:00:DD:C5:0E:64:68:4B:68:C4:C5:70:0B:03:E1:F2:37
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:34:50:58:7e:91:eb:35:a2:42:de:d1:92:79:47:8e:97:97:
d0:34:dc:b6:2b:b2:09:ee:27:e0:49:a2:d8:76:30:a1:98:c8:
b3:40:ed:a6:03:a3:bd:18:d5:79:fc:5f:f7:3b:b5:a7:14:5b:
88:f7:03:ec:0e:08:47:6c:48:4d:2f:bc:be:65:f1:f2:42:4c:
6d:a2:d3:7b:fe:1d:2a:55:36:05:7b:94:00:f9:a9:50:f3:6f:
c1:84:dd:b7:42:22:1c:49:35:bc:cb:63:96:be:ac:d7:69:0a:
e7:2c:22:d2:f9:75:59:3b:c8:c1:b7:65:a9:bc:55:dc:aa:fb:
a2:97:16:8d:e3:8f:40:6b:6c:fb:1e:be:48:65:0e:10:bd:a7:
31:68:2f:49:05:09:c7:24:6c:aa:02:b9:5d:0f:a4:3e:d1:55:
5a:e0:60:c5:aa:19:36:66:87:a8:41:4f:92:a1:b1:19:44:72:
e3:1b:e3:c1:f5:ce:45:34:5d:5b:05:d0:d8:ea:3d:40:82:fb:
23:5a:26:16:ff:7c:6c:d3:26:eb:86:f8:ea:df:03:aa:45:cf:
25:91:de:9d:51:73:70:47:f8:c8:08:78:ac:b9:9c:fd:d7:89:
ee:96:33:c4:e8:19:f1:d9:11:ff:3d:33:52:8a:85:21:dc:d1:
75:15:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:34 2025 by rpki-client