Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: IHZplH+YErIUjuucKV+JyXD8rl35CgmUKsh2q2McVpM=
Subject key identifier: 1D:D4:69:DF:8D:FF:FB:39:1D:56:AD:64:A9:3C:25:3A:5C:71:30:8B
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 01967C7BE888744BD2D888518D8150BBE045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 13:00:17 +0000
Manifest this update: Mon 28 Apr 2025 13:00:17 +0000
Manifest next update: Tue 29 Apr 2025 13:00:17 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: huYrpZ8gYfU89lNMUyhbBoIv2d3eDIlEGMWXZ28vSW4=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7b:e8:88:74:4b:d2:d8:88:51:8d:81:50:bb:e0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Apr 28 13:00:17 2025 GMT
Not After : Apr 29 13:00:17 2025 GMT
Subject: CN=1dd469df8dfffb391d56ad64a93c253a5c71308b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:65:5b:6c:e9:0b:7c:8e:6a:1c:fc:3f:a4:
6b:ef:57:1a:f0:b5:70:6c:4a:1a:e1:59:ea:a1:f0:
74:55:89:12:55:fc:c0:61:26:d2:d2:9a:eb:e2:42:
6c:76:22:3a:0b:c8:f0:df:92:5e:17:66:e4:b4:a7:
db:a8:ca:53:fe:a3:b4:81:87:c9:5c:9f:c9:e8:dc:
80:da:e9:d1:3b:6f:8f:5d:7c:1c:b9:90:52:8b:76:
78:d2:7e:f3:65:f4:16:92:a6:67:02:b2:3b:57:18:
46:18:3c:64:99:1d:c6:4d:c2:53:d5:3e:7d:f4:4d:
cd:59:61:15:27:00:5c:1f:bd:0a:e7:0e:c8:9d:5c:
e3:6a:dd:82:af:7a:57:e5:50:0e:e7:a4:89:4a:2f:
91:6b:80:60:31:d4:ce:fc:9a:a2:c1:24:54:36:68:
60:53:d5:18:f3:ed:04:55:26:ee:ae:df:01:d7:ff:
81:b8:ef:7a:45:b0:74:16:81:81:0a:92:96:2e:19:
72:0b:af:6b:cd:8e:21:ea:43:ef:d1:50:91:b5:29:
d6:62:59:20:e9:78:3c:2b:de:7f:72:fe:61:61:60:
21:c6:b2:25:d9:c8:93:aa:14:b2:96:d1:85:23:20:
9d:b4:f7:12:5f:c2:c0:5d:f9:d7:7a:08:49:a8:f8:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:69:DF:8D:FF:FB:39:1D:56:AD:64:A9:3C:25:3A:5C:71:30:8B
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2c:84:eb:b9:d2:63:fe:b0:57:32:02:46:a6:0d:ba:14:c9:
32:2b:49:b5:2a:ed:7e:b6:cb:b6:75:52:57:3c:05:50:22:65:
1c:82:37:ea:91:c7:bf:9b:27:f1:1b:c5:cc:ba:58:8a:6a:01:
23:4c:b9:e3:10:88:ac:12:72:c0:93:a0:96:7e:13:df:d8:c9:
9e:ad:02:d1:ff:6c:7d:9a:38:e5:95:b0:26:48:46:44:dc:21:
bd:68:6e:79:26:33:84:1a:2e:21:c3:59:81:06:5a:e8:f0:f6:
7c:5b:2d:fd:72:fd:76:30:89:01:44:6a:19:0b:09:2f:e9:e7:
2a:f2:39:36:cc:e6:53:ed:85:08:4a:8e:d8:2a:4a:f8:24:e9:
f7:98:ed:3c:4c:41:ce:19:ca:25:3d:42:8e:4e:27:77:16:c1:
15:45:94:ec:bd:21:96:fa:d8:bf:d8:9f:a7:87:6f:55:52:0e:
fb:d0:1c:ef:90:d7:2a:8f:20:31:81:21:b4:f1:a7:c2:98:46:
38:c4:bf:1f:b4:8e:d3:0c:f5:8b:d6:c9:74:81:44:67:35:ae:
c3:04:57:a6:69:c0:dc:65:26:c3:68:a9:f5:a0:c4:43:05:33:
b0:3f:49:5f:67:01:d6:b9:21:12:96:ae:d8:7d:2a:e9:aa:c3:
d6:67:93:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8e+iIdEvS2IhRjYFQu+BFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2
MTgxN2MwHhcNMjUwNDI4MTMwMDE3WhcNMjUwNDI5MTMwMDE3WjAzMTEwLwYDVQQD
EygxZGQ0NjlkZjhkZmZmYjM5MWQ1NmFkNjRhOTNjMjUzYTVjNzEzMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwNlW2zpC3yOahz8P6Rr71ca8LVw
bEoa4VnqofB0VYkSVfzAYSbS0prr4kJsdiI6C8jw35JeF2bktKfbqMpT/qO0gYfJ
XJ/J6NyA2unRO2+PXXwcuZBSi3Z40n7zZfQWkqZnArI7VxhGGDxkmR3GTcJT1T59
9E3NWWEVJwBcH70K5w7InVzjat2Cr3pX5VAO56SJSi+Ra4BgMdTO/JqiwSRUNmhg
U9UY8+0EVSburt8B1/+BuO96RbB0FoGBCpKWLhlyC69rzY4h6kPv0VCRtSnWYlkg
6Xg8K95/cv5hYWAhxrIl2ciTqhSyltGFIyCdtPcSX8LAXfnXeghJqPj31wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3Uad+N//s5HVatZKk8JTpccTCLMB8GA1UdIwQY
MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt
MzI0NzFjNTkwOGEyLzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy
LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyyE67nS
Y/6wVzICRqYNuhTJMitJtSrtfrbLtnVSVzwFUCJlHII36pHHv5sn8RvFzLpYimoB
I0y54xCIrBJywJOgln4T39jJnq0C0f9sfZo45ZWwJkhGRNwhvWhueSYzhBouIcNZ
gQZa6PD2fFst/XL9djCJAURqGQsJL+nnKvI5NszmU+2FCEqO2CpK+CTp95jtPExB
zhnKJT1Cjk4ndxbBFUWU7L0hlvrYv9ifp4dvVVIO+9Ac75DXKo8gMYEhtPGnwphG
OMS/H7SO0wz1i9bJdIFEZzWuwwRXpmnA3GUmw2ip9aDEQwUzsD9JX2cB1rkhEpau
2H0q6arD1meTCw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:22:16 2025 by rpki-client