Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: Crq6EKkV57gIsEJCYhw06tUAR5xQQ71VIV5ceo5lwOQ=
Subject key identifier: FB:D0:87:C0:5E:AF:0F:8C:53:1E:5B:DB:C0:65:BD:EA:1E:0D:01:AB
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019A7225F909C9E355546221B856589E1F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: DPASwCjl6ai4T2vbIHczwgaC15cUV8h3Q/iBF8+uBus=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f9:09:c9:e3:55:54:62:21:b8:56:58:9e:1f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=fbd087c05eaf0f8c531e5bdbc065bdea1e0d01ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:66:c5:3e:93:52:81:60:2a:3f:2e:15:2b:
6f:a9:65:ae:60:88:b3:d8:d7:dd:72:1a:06:ff:b9:
64:f1:3a:48:d0:ed:ed:42:87:4e:fc:7d:c0:6c:b3:
11:45:ef:38:3d:ad:bf:bf:dd:c9:09:74:24:7f:75:
61:49:dc:bd:cf:96:e0:0d:70:33:8a:bb:36:1a:c0:
a7:3b:35:40:eb:f0:1a:67:31:6b:7a:32:43:e3:fd:
70:19:9e:e6:aa:79:19:7a:34:7a:97:9a:20:d8:73:
43:78:20:18:2e:81:6b:c8:33:be:a2:ab:9e:49:14:
61:bd:68:98:1d:57:ab:32:96:80:08:47:bb:35:90:
3f:dc:f5:dc:2c:d6:3c:58:87:f6:a0:25:60:7e:a5:
1e:42:0f:af:37:8a:f8:50:ce:14:95:8d:40:47:9e:
45:40:f5:93:6b:dd:ab:08:b6:4a:9f:3f:88:ac:3c:
f8:1a:20:ee:d8:21:6e:ea:03:0d:d5:ec:b1:c5:10:
6e:8f:c9:03:dc:71:2a:af:39:f6:15:31:cd:d5:fd:
c0:33:86:84:76:c9:82:7d:ac:bb:62:0d:cc:c6:cd:
b3:7b:94:50:1e:50:21:0c:19:cb:0d:59:94:8f:4c:
31:bb:b2:92:2b:3b:df:d2:f9:c8:71:32:46:fc:35:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:87:C0:5E:AF:0F:8C:53:1E:5B:DB:C0:65:BD:EA:1E:0D:01:AB
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c6:4b:a4:3b:62:09:02:ce:d0:12:ea:35:9f:c4:81:44:2a:
3d:b0:91:c0:0c:f1:6a:d6:1e:ef:fb:03:35:fe:32:41:3d:5a:
26:fb:9f:17:64:65:e8:67:07:39:9d:e3:8d:d0:f7:04:2e:ff:
21:da:7f:c3:b7:af:9a:8f:e2:63:33:61:fa:f6:79:9f:cc:7b:
97:ef:c8:b6:0d:7e:97:7d:67:a7:bd:87:e8:48:72:69:60:d8:
c8:9b:3e:5b:56:24:48:b6:44:cb:be:94:76:2d:ad:73:f7:fc:
f2:b0:45:4a:0b:25:fe:30:82:cc:c5:4f:19:45:00:06:1b:f3:
9d:5e:28:73:95:36:08:6e:32:dc:05:f8:6c:5a:24:41:32:71:
8c:46:83:4d:61:b6:ec:f6:73:27:74:94:ef:ec:23:d2:c9:08:
c4:11:ed:da:32:07:a7:55:e7:8e:0e:86:7f:69:1c:45:89:f6:
5d:50:b6:ce:4d:72:e1:3d:91:02:ea:20:6c:44:2b:9e:c9:9b:
89:13:75:c8:e6:87:25:fd:eb:58:cc:1d:b5:94:e8:d2:0f:ad:
70:52:fb:5f:bc:7e:ed:98:d4:1f:64:8b:f8:6f:c3:a5:48:02:
23:55:5c:22:6c:c7:29:6b:c1:0b:97:2c:aa:99:48:59:e9:00:
de:18:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:16 2025 by rpki-client