Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: D+tIVOyTN8+Y6BQiCQ2ZqbMfi3Iwgjnwjrmw7VJNS+g=
Subject key identifier: 1D:67:BD:C0:38:C9:E9:34:DA:EE:CE:ED:10:97:C1:43:50:A0:2E:5C
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 01987E2E876D7440314B9D4C543669544DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 07:00:35 +0000
Manifest this update: Wed 06 Aug 2025 07:00:35 +0000
Manifest next update: Thu 07 Aug 2025 07:00:35 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: 5w3ubb7eoxze0Zm5Ix6qH+G88mfcwCd0/sFD4Usi7PQ=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:87:6d:74:40:31:4b:9d:4c:54:36:69:54:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Aug 6 07:00:35 2025 GMT
Not After : Aug 7 07:00:35 2025 GMT
Subject: CN=1d67bdc038c9e934daeeceed1097c14350a02e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:83:3d:96:62:30:d5:d3:e6:1a:f3:ce:48:
12:b5:30:8b:7b:3d:3a:72:55:37:98:bf:90:6c:5b:
69:47:af:02:f5:3e:92:75:3d:1a:07:3f:71:93:37:
af:61:c0:2a:de:1d:9a:55:04:ed:9c:12:38:01:2e:
0a:fa:7a:66:b7:5a:77:57:ab:0e:4f:12:c6:3a:94:
e4:18:21:bd:ec:31:c6:27:44:b2:10:fc:da:b6:6e:
35:0f:e4:bb:5b:fa:05:56:8b:51:49:cc:39:a6:d0:
80:b8:6d:8b:32:86:3c:b4:dc:af:c4:24:7f:5b:25:
78:cc:eb:b8:e4:2f:6c:19:97:9b:59:04:e8:78:4e:
3c:c8:45:30:6b:41:09:c6:4b:bc:85:bb:30:ba:93:
ae:ec:b9:84:78:79:95:a6:39:83:7e:85:37:cc:7e:
0c:23:d3:be:47:76:c4:7a:cb:71:d7:01:7f:da:74:
fa:fb:16:1d:26:37:98:d1:37:9a:0f:48:24:1d:68:
83:80:ea:23:21:6b:0c:bc:16:e3:8d:bd:3f:18:3b:
aa:7f:8c:ec:ac:f6:de:14:8a:0a:31:19:81:21:c1:
be:af:df:f0:bc:92:cb:4d:db:9d:65:bc:26:41:97:
1f:76:25:89:fb:32:c6:53:c0:ce:89:6a:fd:2f:cf:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:BD:C0:38:C9:E9:34:DA:EE:CE:ED:10:97:C1:43:50:A0:2E:5C
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e1:c6:43:59:26:69:14:78:ee:7e:73:d6:4e:67:17:ee:4d:
d4:43:7e:81:70:25:f1:78:d7:9d:59:f1:01:90:55:67:4e:3b:
bf:6c:c4:7b:79:c8:c5:4a:ae:30:bb:01:1f:40:09:7f:a2:9a:
8f:f3:74:ea:e7:51:63:98:46:b2:a9:22:e6:96:9b:ed:71:14:
78:a7:28:a4:f5:3a:07:1b:d1:3d:c4:60:bb:d4:97:d9:dd:5d:
c4:b5:2c:a4:b7:09:8d:59:5a:e6:42:36:6a:d2:0c:78:48:6e:
41:10:a5:65:8f:d1:f3:7d:52:88:21:9b:a4:cb:f3:e5:24:2f:
fb:4a:1b:d2:28:3f:fc:0c:c7:4d:45:01:17:dd:69:a6:d2:69:
38:01:64:cd:c2:9c:e4:96:1c:06:58:ce:cb:c4:74:4c:3c:10:
47:a1:52:f9:13:b1:fc:a2:45:72:9d:a7:cd:97:74:31:15:9c:
f9:23:73:ab:21:d0:0e:28:7b:5b:ef:7c:45:62:5a:85:7f:64:
89:86:48:3a:64:0e:5e:fc:66:2d:12:42:40:06:42:fc:34:3d:
c1:bf:79:01:a1:99:26:9e:38:77:8e:72:3f:ca:e8:7f:01:c2:
91:bd:18:de:56:c4:37:12:79:64:77:b2:fd:e4:33:f0:18:2d:
35:02:26:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:08 2025 by rpki-client