Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: uzUDRZw1UXFKA0m57TWWk5FDauqmgSmz2imDvwSaDsE=
Subject key identifier: 26:DD:5C:82:A9:25:D4:41:5F:FB:19:98:96:0E:27:37:AF:D2:8D:D2
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019A71B97489D3B86DBC90AD93445E79548B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:50 +0000
Manifest this update: Tue 11 Nov 2025 07:02:50 +0000
Manifest next update: Wed 12 Nov 2025 07:02:50 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: H5AFRG55/ma6CudAIwtFbU+4Yf8hX0Pp6vGtMN0tq30=)
2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:74:89:d3:b8:6d:bc:90:ad:93:44:5e:79:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Nov 11 07:02:50 2025 GMT
Not After : Nov 12 07:02:50 2025 GMT
Subject: CN=26dd5c82a925d4415ffb1998960e2737afd28dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:f4:c1:68:de:7f:4a:e0:9f:3e:a6:28:6d:
c1:7d:c4:79:45:e1:7b:f4:c8:e1:48:c5:1f:d4:e9:
f8:22:27:2e:80:64:6b:e7:f4:84:ac:3e:28:ce:24:
29:ba:92:47:3a:91:04:b7:39:f1:98:1d:f0:18:d7:
d3:91:ab:e3:f4:c7:2f:0e:b0:2b:9a:b6:9f:24:25:
bd:9f:8b:f4:f6:d2:dc:5c:a0:b0:5b:78:1c:54:11:
88:a5:36:4d:02:17:2c:e9:4b:46:82:1e:f2:15:bf:
ee:89:a6:2d:b4:3d:6d:b5:8e:e8:13:77:b9:02:ec:
20:3c:cc:ff:3a:50:6b:96:c5:bd:2c:87:c5:ec:03:
6b:71:7c:fe:c5:a3:7e:9d:c7:6d:65:f9:b6:b0:bc:
b7:c3:e1:ed:bc:dd:be:cc:df:25:98:0f:31:d2:1e:
cf:4f:1f:8e:bd:fb:f6:05:05:95:46:fc:bd:2c:e7:
76:a3:06:e7:11:64:11:d8:46:cb:e9:c4:4e:f4:b1:
fb:7d:49:e1:27:c8:bd:5f:d4:ff:34:7f:94:f2:2b:
33:9a:ce:b4:39:02:3b:47:5d:ad:c9:5f:e6:a8:87:
99:fb:9c:15:81:60:4d:c2:99:6e:9c:eb:bf:c7:7c:
b2:fb:1e:ed:77:c3:3c:cd:d6:66:e4:ba:cd:01:9a:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:5C:82:A9:25:D4:41:5F:FB:19:98:96:0E:27:37:AF:D2:8D:D2
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3b:ad:20:e4:47:50:1e:7f:36:95:31:95:21:97:76:28:cf:
6e:eb:d8:e5:01:d8:56:80:40:f1:a9:7a:70:59:67:fa:ba:8e:
d9:0a:c7:6b:9b:13:7a:ec:00:4e:e7:76:a8:b9:bf:ec:d6:b9:
89:6e:aa:d5:28:7f:fa:3e:b5:37:99:7d:ad:53:dd:cb:08:f9:
6c:da:d2:59:fe:e3:08:c5:c9:06:45:b1:74:9a:c9:83:11:69:
9e:3d:0c:e2:b7:e5:43:87:ba:03:d0:77:b9:25:75:a3:68:2d:
b2:6f:96:d9:f5:85:5c:f6:83:24:ea:e2:dd:be:34:1f:ec:f9:
c0:7a:5d:30:36:aa:34:92:21:40:37:2f:5d:f5:c4:c6:ab:fe:
11:6c:41:a3:de:1b:61:54:d2:78:ce:65:37:89:47:65:44:b2:
8d:70:a5:b4:d9:6e:6c:f1:60:6a:2f:bb:56:0f:59:d5:73:aa:
cf:53:3f:44:39:f2:6a:e5:21:35:04:13:d2:d0:ab:28:d2:ee:
0d:cb:5e:cd:a7:d2:92:29:8e:3e:29:b1:86:70:3f:d9:82:72:
60:fb:0f:25:c3:9a:3e:43:a2:f7:b3:ff:70:29:01:c2:cf:c7:
8a:48:51:4b:76:28:29:78:9f:d8:0b:f0:54:1e:5b:79:92:ab:
9a:86:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:40 2025 by rpki-client