Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: Bi3L4uGucwI2Bv7flhBfWaN0ImBl9PgUQ0C1VFVFc/4=
Subject key identifier: 51:73:F1:B2:8B:EF:BD:2E:8E:E5:0A:03:A0:30:B6:C1:E2:C6:84:71
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 0199221EB0AAB8687359DBF3F6A482A9EABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 03:01:00 +0000
Manifest this update: Sun 07 Sep 2025 03:01:00 +0000
Manifest next update: Mon 08 Sep 2025 03:01:00 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: wK9u6KpYJgnVhseOTVZHKBEjRVkAG1wmEU7g0YVaKts=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b0:aa:b8:68:73:59:db:f3:f6:a4:82:a9:ea:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Sep 7 03:01:00 2025 GMT
Not After : Sep 8 03:01:00 2025 GMT
Subject: CN=5173f1b28befbd2e8ee50a03a030b6c1e2c68471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:5b:2d:1b:aa:e3:6c:b3:b7:d6:a9:66:48:
5b:3f:27:ed:ea:2a:92:01:b0:37:cb:bf:77:27:db:
2f:5f:be:a1:03:73:7b:0a:0b:91:5e:ee:7f:40:85:
5f:80:c0:0a:03:5c:ea:6e:5a:2a:92:08:58:ec:aa:
63:7b:e7:5b:46:11:13:fd:f8:e1:70:bf:45:8f:d6:
a9:97:18:35:f6:98:44:13:af:fd:e0:01:55:35:56:
64:c2:f1:ce:f9:45:72:f7:72:86:1a:87:35:80:f2:
d8:1a:95:b9:dd:5a:0f:c1:0c:78:18:37:aa:a8:75:
a0:a2:54:b0:7c:e9:d5:d3:82:6d:94:b3:ce:af:0f:
5f:99:81:87:93:81:52:a0:12:44:18:75:6a:7e:c8:
c2:99:d2:26:f1:80:29:43:50:1c:34:35:2f:1f:c8:
32:58:85:81:58:dc:3c:08:45:49:eb:08:e5:fb:8a:
b8:41:b1:25:10:11:ed:2e:6d:dd:e9:9d:27:8f:c3:
68:75:0b:c0:a0:44:66:4c:ce:ae:03:15:26:27:9a:
ba:89:1d:48:1d:2c:74:dc:7f:c0:76:c0:22:77:86:
1f:7d:cc:98:9e:c9:c2:96:66:42:98:6f:35:4f:68:
ce:87:d3:65:03:f7:43:64:59:d5:19:e5:7d:ed:9c:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:F1:B2:8B:EF:BD:2E:8E:E5:0A:03:A0:30:B6:C1:E2:C6:84:71
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:72:83:86:b9:80:c1:71:21:4b:51:50:23:bd:b1:82:2d:
ad:dd:93:3c:04:4b:d4:e1:b9:ae:c2:db:50:89:7d:65:e4:26:
88:13:11:d2:6b:ce:8a:04:b1:a8:c0:fe:57:55:ee:a4:55:57:
f0:4d:1c:a7:94:1e:be:74:2b:5c:db:c7:ee:c7:83:73:55:cd:
18:72:9d:23:05:92:5e:7f:ab:e9:00:e5:68:39:33:90:34:11:
2d:06:22:ad:3f:bc:bc:de:6f:5e:3a:a0:01:43:a8:72:ab:d9:
16:24:d1:99:61:17:d4:6e:ae:1c:60:09:fa:a7:68:68:f1:6c:
9b:7b:be:6c:82:8b:8f:ae:b7:9f:52:8b:29:4e:83:66:b4:9d:
7e:c7:91:7f:62:18:33:a3:b6:4d:70:dc:39:e4:64:c1:08:0f:
24:e6:ba:84:f2:2e:0a:bb:76:8b:8f:9b:38:8f:8d:2e:fa:ba:
d6:dc:2a:a0:b9:63:54:e6:2e:07:c7:38:46:bb:78:6e:ab:a6:
f5:91:21:cc:3c:3d:71:db:cc:03:ee:b9:b1:3c:e7:7e:28:0a:
00:0f:47:98:ac:62:42:dd:c6:bf:91:4c:a0:34:34:c2:87:66:
f1:d4:ed:a7:38:2b:98:c0:31:21:bc:e8:6f:e0:88:3b:28:7e:
89:70:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:09 2025 by rpki-client