Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: +vkYESFGkOQL8FU0EKdNS3BoerRLKo+tHOZVQ0cdWC8=
Subject key identifier: B9:B9:39:9F:4B:24:66:94:D1:73:7C:01:20:6B:A5:B3:15:28:45:54
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 0196BA48AF02B6EFD83B2B908273E711DF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 13:00:47 +0000
Manifest this update: Sat 10 May 2025 13:00:47 +0000
Manifest next update: Sun 11 May 2025 13:00:47 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: BmumZUTlynAD+8IWiPW5PCtnSQKj8SwLFAmgzyN6moY=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:af:02:b6:ef:d8:3b:2b:90:82:73:e7:11:df:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: May 10 13:00:47 2025 GMT
Not After : May 11 13:00:47 2025 GMT
Subject: CN=b9b9399f4b246694d1737c01206ba5b315284554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ae:11:1c:8f:dc:9d:bf:a6:d0:97:d8:bb:51:
5b:f6:f8:cb:03:81:7a:c7:05:4f:b2:e6:8f:a6:aa:
b9:01:8d:7f:2c:76:49:0b:b6:23:19:01:16:cb:aa:
0b:b4:91:2e:d6:3d:3e:16:ea:69:82:a3:62:49:1b:
0d:da:80:2c:a5:9d:df:34:30:cf:12:8d:59:09:fd:
fb:ae:ec:16:82:8f:14:48:ce:e5:14:99:66:8c:68:
85:a6:6c:ff:48:55:0d:9f:34:13:23:2c:66:14:4f:
47:cd:71:f4:42:60:81:6e:ba:9a:be:53:12:be:89:
f8:49:98:75:74:63:a8:04:21:b8:28:00:82:0e:bb:
99:66:1f:63:18:bc:be:c3:29:d3:48:2f:8b:6c:29:
1c:4b:0e:92:6e:81:e0:41:01:3b:01:47:65:7c:56:
da:3c:f0:e6:89:3e:09:93:c7:09:d2:09:18:0a:bb:
33:6c:97:9a:ce:e2:8b:55:16:88:fe:cf:8c:63:da:
0e:26:3c:1a:44:0a:6c:0b:63:66:d8:c1:88:b4:08:
aa:e9:31:c0:bc:f8:0c:44:46:40:06:3a:87:21:1b:
0c:d9:4a:2b:1d:78:4e:b2:49:8e:97:a2:4e:54:d9:
60:bf:1f:11:14:99:e2:50:0d:fa:3b:ee:9b:a4:9a:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B9:39:9F:4B:24:66:94:D1:73:7C:01:20:6B:A5:B3:15:28:45:54
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:fb:ec:80:56:1e:2d:ae:9a:24:a4:1e:b2:8b:df:ba:aa:
61:9b:6a:5c:8b:00:41:0f:87:b2:2c:2b:05:ec:c1:ac:09:09:
7a:7f:61:2d:42:48:df:d9:02:4d:81:81:4c:42:b8:de:dc:78:
c7:33:ac:5f:d1:2b:84:08:2c:4f:17:ab:8a:b0:0b:77:f3:cc:
c2:3b:4f:75:12:4f:df:ce:7a:77:25:c4:80:40:ac:94:05:9c:
e5:d8:0b:cb:6d:c8:2c:60:e5:0d:b7:17:38:b5:12:10:ca:21:
34:1c:2f:78:16:c5:92:31:b2:0a:b9:a8:d2:ec:6a:68:1b:fc:
a6:e7:3e:c4:0a:ee:30:e5:53:d9:bb:ec:2d:e6:4b:32:58:cd:
9c:f4:40:c4:8e:0f:1c:0a:96:d1:f1:63:e2:7d:ee:b9:9e:25:
17:04:81:25:47:d4:82:18:e9:49:3b:1a:0c:ea:1f:fc:b2:d1:
af:9e:f3:21:8c:de:85:00:30:f7:09:95:a6:b1:36:65:6c:c8:
ac:0f:ba:1b:9e:58:b7:1c:27:f3:bc:a1:6e:da:13:52:38:f4:
5e:d3:72:29:a9:70:de:8f:cf:af:61:d6:8b:b4:16:ed:23:9f:
36:1d:16:6e:9d:ad:95:e7:dc:f1:6f:7b:c5:d1:4b:6c:2f:83:
a5:81:63:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SK8Ctu/YOyuQgnPnEd9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2
MTgxN2MwHhcNMjUwNTEwMTMwMDQ3WhcNMjUwNTExMTMwMDQ3WjAzMTEwLwYDVQQD
EyhiOWI5Mzk5ZjRiMjQ2Njk0ZDE3MzdjMDEyMDZiYTViMzE1Mjg0NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq4RHI/cnb+m0JfYu1Fb9vjLA4F6
xwVPsuaPpqq5AY1/LHZJC7YjGQEWy6oLtJEu1j0+FuppgqNiSRsN2oAspZ3fNDDP
Eo1ZCf37ruwWgo8USM7lFJlmjGiFpmz/SFUNnzQTIyxmFE9HzXH0QmCBbrqavlMS
von4SZh1dGOoBCG4KACCDruZZh9jGLy+wynTSC+LbCkcSw6SboHgQQE7AUdlfFba
PPDmiT4Jk8cJ0gkYCrszbJeazuKLVRaI/s+MY9oOJjwaRApsC2Nm2MGItAiq6THA
vPgMREZABjqHIRsM2UorHXhOskmOl6JOVNlgvx8RFJniUA36O+6bpJqEkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm5OZ9LJGaU0XN8ASBrpbMVKEVUMB8GA1UdIwQY
MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt
MzI0NzFjNTkwOGEyLzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy
LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyr77IBW
Hi2umiSkHrKL37qqYZtqXIsAQQ+HsiwrBezBrAkJen9hLUJI39kCTYGBTEK43tx4
xzOsX9ErhAgsTxerirALd/PMwjtPdRJP3856dyXEgECslAWc5dgLy23ILGDlDbcX
OLUSEMohNBwveBbFkjGyCrmo0uxqaBv8puc+xAruMOVT2bvsLeZLMljNnPRAxI4P
HAqW0fFj4n3uuZ4lFwSBJUfUghjpSTsaDOof/LLRr57zIYzehQAw9wmVprE2ZWzI
rA+6G55Ytxwn87yhbtoTUjj0XtNyKalw3o/Pr2HWi7QW7SOfNh0Wbp2tlefc8W97
xdFLbC+DpYFjsg==
-----END CERTIFICATE-----
Generated at Sat May 10 16:41:23 2025 by rpki-client