Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: HaY/p3VC70LHTtP4YQjWjJE0N2C17mXcUXIi0CtH5is=
Subject key identifier: 58:7F:91:F8:68:D2:F9:E4:3C:9B:FF:B2:AB:8E:11:C3:B2:15:83:D1
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 0198D7057BF92253DA5BF9C65648813FA1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:01:57 +0000
Manifest this update: Sat 23 Aug 2025 13:01:57 +0000
Manifest next update: Sun 24 Aug 2025 13:01:57 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: 0MWL2Kub5H4ZgpvTnd1ctLfYwRJ2hExID/qRLVYQtAo=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:7b:f9:22:53:da:5b:f9:c6:56:48:81:3f:a1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Aug 23 13:01:57 2025 GMT
Not After : Aug 24 13:01:57 2025 GMT
Subject: CN=587f91f868d2f9e43c9bffb2ab8e11c3b21583d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:a3:0a:e9:fa:4d:7d:bc:e7:ac:d8:46:56:
11:43:e9:fe:3b:ec:0f:73:3a:61:59:a2:c0:64:33:
80:a1:69:89:06:0b:97:99:f0:9f:73:e6:6b:6c:e7:
39:f2:ab:6c:ef:1a:3b:25:f1:48:fe:cf:04:d0:a8:
ca:07:b3:ea:64:33:b0:a1:24:06:7f:3a:5a:38:a3:
1c:4c:78:aa:18:21:de:79:33:ef:30:bb:b8:a8:cd:
92:12:26:91:65:b2:37:59:66:5d:24:3a:fb:93:97:
d2:a2:40:24:3b:42:85:ec:d7:79:3c:93:2a:6d:ff:
c7:83:31:d0:61:68:3d:db:eb:bd:74:f8:82:7d:3d:
9b:e3:ee:39:59:fb:e6:42:52:79:f7:54:2c:07:12:
10:0f:83:55:aa:24:6e:59:7d:3b:33:75:da:07:90:
a3:8b:2b:87:29:ae:2f:80:69:99:fb:3d:2d:58:51:
ce:bb:3f:37:5a:46:34:6c:a3:3d:69:c1:cb:3c:c7:
5f:a7:07:0b:56:79:05:38:d2:84:24:25:87:5b:04:
97:75:32:c6:36:d9:17:cf:4c:fe:3b:d4:6c:95:5a:
f8:f4:75:34:74:a9:32:3d:84:3a:a2:a2:fe:98:e4:
75:75:3a:3f:d9:3b:29:e3:53:5a:e7:56:f6:e3:44:
2e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:91:F8:68:D2:F9:E4:3C:9B:FF:B2:AB:8E:11:C3:B2:15:83:D1
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ef:06:44:3a:23:76:bb:4f:2b:05:92:d6:7c:7a:dc:37:88:
3a:43:a9:21:d7:75:e4:01:fc:d6:30:ea:0a:c6:e1:7d:b3:17:
c5:30:40:e7:61:02:a5:30:87:e6:d8:bd:9b:d5:a1:18:c3:43:
c9:5e:7f:2e:20:fb:29:5e:11:ab:5d:ed:56:26:4d:fd:1e:37:
4e:aa:e8:26:3e:1e:e9:d1:59:d0:09:d3:0f:37:8f:58:4f:18:
99:41:02:96:e6:e7:52:ea:8e:d7:51:67:8c:8b:56:33:d0:1e:
fb:c9:d2:ed:7f:9b:df:e1:c2:cf:85:83:53:6c:02:7c:89:55:
11:61:05:61:26:13:5f:aa:6f:83:4d:8f:b7:4b:0a:2c:ba:e4:
c2:4c:57:a9:c9:7f:4e:45:77:80:3b:3c:f6:f3:67:e3:8c:21:
3a:50:e1:93:ab:b6:dd:38:65:92:4a:f9:28:d4:dd:ca:39:b4:
f1:cf:a6:ab:07:af:d4:59:f5:31:04:88:77:54:f6:b8:ad:aa:
ee:f7:92:28:0c:b0:35:93:37:37:42:04:e1:55:70:90:51:bd:
67:c4:32:34:9a:ed:f6:20:f3:52:1f:bf:b7:3d:85:f7:00:39:
39:8a:7c:75:74:3e:0b:79:9e:15:83:7f:e9:4d:8c:a3:e4:bf:
70:64:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:50 2025 by rpki-client