Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: DM/bPIIoBXyrvPtMhunYgoWu2djV4fnGIpijDn/hMhc=
Subject key identifier: 92:66:71:92:21:6D:26:43:EE:EA:C3:46:D4:E8:0F:15:6A:C2:EA:48
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 01974AE8F95A57EFF4C5309247DD94841D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 15:01:11 +0000
Manifest this update: Sat 07 Jun 2025 15:01:11 +0000
Manifest next update: Sun 08 Jun 2025 15:01:11 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: K0IGGpAmiTo9zfpFvroGgyt2J9luuiysvk5BKIp78/o=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f9:5a:57:ef:f4:c5:30:92:47:dd:94:84:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jun 7 15:01:11 2025 GMT
Not After : Jun 8 15:01:11 2025 GMT
Subject: CN=92667192216d2643eeeac346d4e80f156ac2ea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:58:4f:13:99:99:23:47:1f:db:a9:9d:d5:
b5:52:b7:7d:bc:96:53:9e:a9:ea:1d:4b:6b:30:29:
cb:01:10:f9:8c:c4:f4:64:5f:db:f9:74:59:b8:49:
92:68:24:1f:0e:d4:94:b9:93:ed:88:7b:2e:84:fa:
f8:7b:b3:20:26:1b:0b:1c:f2:0b:90:41:5c:f6:4a:
15:08:01:d3:7a:cd:6c:88:c7:c2:67:8e:26:d6:77:
16:2a:f1:0d:6f:a3:b4:50:86:f6:67:3c:8b:63:d1:
da:ad:e7:97:79:25:d9:99:c9:6b:d0:87:b7:46:fc:
30:73:2a:c6:9c:d3:b6:22:0a:57:62:fb:44:67:ee:
9b:9c:ff:6c:4d:00:d4:9a:9a:53:52:ce:6b:a2:04:
a0:3b:c8:c0:fe:08:6c:fe:4d:a8:82:a6:11:d7:dd:
f3:16:05:47:5a:31:cb:f8:b9:db:2c:45:9d:c2:d3:
f0:db:74:47:23:09:6d:15:a0:06:fd:e2:1c:ed:ff:
83:bf:16:05:5d:8c:85:b0:6b:7d:3e:64:b1:61:8f:
57:a1:32:ee:eb:cd:ed:0c:0e:1e:9a:53:5a:70:f0:
66:5c:6c:24:1d:33:89:1e:83:b6:3b:fc:e0:85:11:
30:a8:c6:ee:35:93:4e:49:90:8e:b1:0d:7c:02:55:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:66:71:92:21:6D:26:43:EE:EA:C3:46:D4:E8:0F:15:6A:C2:EA:48
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fa:0b:75:b0:0a:cf:63:0b:59:02:37:2a:90:36:ec:3f:e5:
c9:06:e5:8d:a6:01:0e:e7:99:97:c3:cd:4c:3e:b5:fe:6d:6f:
4e:b7:f7:2b:d9:cc:6c:f1:44:06:0c:53:96:51:8b:12:6e:0e:
2a:5b:ad:c0:91:9d:d8:a5:26:8b:dc:33:97:9d:64:35:3f:23:
71:90:3f:d2:f5:5f:81:f2:88:07:40:4f:33:59:a4:63:ce:d1:
74:82:14:c5:37:8e:c5:14:91:a1:44:66:35:98:da:0d:78:0c:
9c:7f:72:0c:4e:e8:ac:c1:7d:a1:2a:fb:5f:db:e7:6c:03:21:
96:79:96:6e:1d:bd:af:d8:74:44:3a:40:6c:a4:c0:4b:da:82:
da:f5:95:82:25:ad:7a:b6:91:30:e7:03:85:a1:d6:e7:7f:56:
cf:e8:55:d4:e4:3c:53:14:01:06:58:e6:ea:8a:34:d8:6d:5a:
41:d0:6e:e0:f7:40:4c:56:91:ef:ba:7e:46:49:d5:e8:a5:b2:
80:6d:a9:78:38:d6:4a:8e:92:5f:23:3d:68:5a:fa:0f:e0:5e:
7d:de:b0:46:10:8f:d6:c0:3f:3a:c4:66:0b:09:54:ab:e3:7f:
2b:75:30:1a:59:71:b9:36:e7:e5:fa:8d:40:20:51:a3:cc:7e:
0c:dc:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:33 2025 by rpki-client