Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: dUeXZK5AoJDM9+WeefnDPdx8eZAycqRQXg47juHBoBo=
Subject key identifier: A5:B6:19:02:EF:C8:65:1D:83:31:59:62:39:EA:B6:7E:19:AF:BD:92
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019A4F61F74C90EB7D09C3385E4B2B419A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:11 +0000
Manifest this update: Tue 04 Nov 2025 15:00:11 +0000
Manifest next update: Wed 05 Nov 2025 15:00:11 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: gsRCnJfJd2s9p0fVcS3YDmvVfq495Jpe6/weLwotURw=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f7:4c:90:eb:7d:09:c3:38:5e:4b:2b:41:9a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Nov 4 15:00:11 2025 GMT
Not After : Nov 5 15:00:11 2025 GMT
Subject: CN=a5b61902efc8651d8331596239eab67e19afbd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:25:4e:e2:53:c9:d1:8c:76:b0:5a:85:01:
45:b3:48:e6:9e:3e:41:b8:5d:79:ea:07:5c:eb:ba:
6b:b9:f4:95:43:f4:6d:6e:f5:50:15:49:3c:5d:9d:
0b:25:c6:a8:73:1b:29:a6:00:cd:5c:18:82:8a:a3:
50:94:0f:da:b4:26:f0:96:f3:28:aa:94:3e:58:28:
4c:14:36:c9:09:34:dd:f6:f3:50:c0:d0:1a:fd:2f:
67:c0:79:15:ff:fa:5d:d4:c4:47:7c:dd:c1:db:1e:
7a:83:6d:05:e0:06:2f:6b:4a:d5:f2:55:c6:fc:97:
cf:87:7e:98:34:84:01:27:4d:8e:53:60:7f:55:5a:
81:9e:15:86:2e:cd:8f:f0:e0:0c:75:25:25:47:27:
55:22:39:da:9d:7e:59:cc:55:e7:72:c8:43:21:78:
6b:6a:3a:bd:0e:09:67:3c:5d:e6:34:27:dd:46:00:
1f:97:e9:97:67:f0:94:6c:62:18:44:78:1e:d9:ee:
b4:ff:35:f9:a9:ea:ce:d9:6a:57:e5:1b:ae:df:e2:
1c:f7:18:23:c4:c1:a9:a6:d9:0f:88:c3:c5:cf:d6:
29:3b:98:03:62:07:49:04:d2:e0:42:81:bf:38:37:
f3:20:59:79:0f:6d:7e:48:be:2b:f8:8b:1d:97:15:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:19:02:EF:C8:65:1D:83:31:59:62:39:EA:B6:7E:19:AF:BD:92
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:67:e1:02:1c:a4:68:63:7d:da:d1:a2:e3:3b:28:1b:52:6b:
f8:a9:ee:69:fe:da:16:7a:f2:98:76:fa:53:2d:37:84:d4:49:
09:52:3e:6c:ba:b2:5a:93:fb:70:09:dd:c9:76:bd:a8:6d:48:
40:a9:54:3b:81:d9:58:77:f6:4b:42:da:c4:26:82:01:18:4a:
da:c1:31:a9:0b:17:56:b6:ce:02:91:7f:ef:d3:cb:24:d1:f2:
9a:a1:a4:3d:a8:c4:e8:2c:d4:d7:a3:e8:3d:9f:39:f5:1d:d5:
59:9d:cb:7c:14:fa:dd:21:ff:2e:db:fe:d5:b2:bb:a4:2b:76:
ba:ea:61:5a:75:4e:55:c7:61:10:ce:c9:92:4d:ab:b4:7a:22:
c2:43:0b:7a:bc:93:64:21:24:3f:7d:d6:c6:24:b8:9e:e4:d5:
be:b1:63:8d:2a:29:21:6c:c8:7c:e6:e5:45:ea:b6:eb:46:d5:
e0:2f:d9:07:4b:c9:f6:74:bf:6c:6c:5c:c3:72:45:79:72:5a:
b6:21:96:70:95:23:ad:5b:52:21:d0:3c:17:5e:76:f4:f5:3c:
11:be:83:45:f3:d3:60:d2:53:b0:57:b2:9b:ab:a9:6a:74:f5:
ca:fb:fd:3f:ae:36:21:c4:1b:7e:15:67:b7:9f:21:50:81:57:
81:ab:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:23 2025 by rpki-client