Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: TvBVnxszMLr3lgaHWGDKY8gXN4jRB13C0ViOJrYJKsk=
Subject key identifier: A9:A2:CA:AE:29:26:80:26:BA:20:7E:9E:8B:14:5E:7B:10:88:24:1D
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019A5375C9FA8EEBF4E1E058C6CFA0E78D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 10:00:19 +0000
Manifest this update: Wed 05 Nov 2025 10:00:19 +0000
Manifest next update: Thu 06 Nov 2025 10:00:19 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: 5s8HLMzu/Km1/vKyjj/3Zwvv7iiTvjV1sAWAvSNZqXA=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:c9:fa:8e:eb:f4:e1:e0:58:c6:cf:a0:e7:8d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Nov 5 10:00:19 2025 GMT
Not After : Nov 6 10:00:19 2025 GMT
Subject: CN=a9a2caae29268026ba207e9e8b145e7b1088241d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:28:2d:5c:1b:27:0e:1a:9b:0d:14:d1:e2:
64:de:2b:69:c1:67:f7:ec:eb:e5:1f:64:f4:86:ab:
d5:0c:c7:2a:8f:f9:63:55:05:13:f8:26:b5:cf:71:
aa:2c:25:81:7a:f8:81:b8:8a:6e:5c:7b:8b:1a:64:
41:26:47:59:a2:77:63:e1:0e:06:91:64:5b:6c:5c:
bf:f1:11:99:dc:5b:b9:3d:20:bc:d7:3b:80:7b:0a:
3e:af:bf:da:a2:cf:de:d0:21:4c:ff:84:2a:e5:e8:
23:de:13:c3:81:48:a4:e5:08:d5:1d:15:f8:54:ef:
1f:dc:ba:4c:ae:74:ab:d2:52:9c:9b:7b:93:04:22:
1d:4f:95:31:69:30:6d:f2:92:26:cc:be:9c:a5:9a:
34:92:15:4e:33:a1:c3:3f:70:25:07:ac:d3:91:e0:
3e:09:01:38:ea:0a:d1:00:a9:a3:17:26:81:76:4b:
7f:12:3b:2d:99:7f:97:96:ea:22:21:33:31:be:41:
48:8f:ad:6b:f8:8c:72:24:b6:10:69:ed:ef:cc:0e:
fc:7c:7f:05:15:60:4a:d7:67:d3:28:9f:69:bc:ca:
7d:9a:a9:00:33:d3:93:d5:e6:2d:eb:34:44:a1:8e:
f4:82:71:cc:d2:22:ef:9c:cd:f5:87:28:cd:09:b4:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A2:CA:AE:29:26:80:26:BA:20:7E:9E:8B:14:5E:7B:10:88:24:1D
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:67:d3:68:75:46:d1:6f:09:97:13:43:9e:ae:3a:87:9d:c2:
ec:e9:cd:2e:e8:53:0c:9f:e7:81:6e:fb:1a:52:d0:bf:60:e5:
74:a2:de:73:ea:f8:54:13:73:ea:85:a0:c0:07:91:04:62:7f:
e6:4e:16:5e:52:21:a0:96:73:d5:ed:27:19:9b:f9:2c:fc:97:
92:7a:f0:87:b9:3b:62:1d:e2:4f:38:60:68:91:68:0f:62:fb:
b8:17:6f:a5:18:39:a1:4c:67:61:3d:d0:dc:02:2b:ed:1e:64:
5d:ae:21:0f:06:f1:db:fa:91:13:84:a4:8a:81:2f:c6:50:71:
f1:a2:14:64:92:64:72:3f:ac:c5:b9:4e:8b:ee:e5:35:ce:4f:
86:5b:d5:6d:37:ac:31:f7:12:71:2e:76:61:c1:ea:71:26:2d:
50:09:1a:14:73:5e:c6:79:c1:80:80:8f:8f:8e:0b:53:17:44:
74:76:82:53:c2:04:1a:a3:fb:5b:64:54:df:46:62:85:da:cb:
97:e6:49:92:39:1a:31:2c:6d:b8:55:1c:aa:ba:85:75:00:f4:
22:18:85:fa:05:00:fe:6e:f8:29:bd:f2:f8:1d:0f:52:8a:71:
08:df:fa:1d:e2:57:a6:a1:7d:7d:33:5b:3d:24:26:e9:3f:c3:
48:0b:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:13 2025 by rpki-client