Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: 4v35ecoCLZ8Pgh7ht6/YGSyJxhMyLNOf2jvGgPZ+aIc=
Subject key identifier: 08:79:28:CB:2E:E4:47:E2:4A:98:D1:BD:54:1D:65:E8:EE:5C:0C:D5
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 01976DABBA47FB66B360A9B7FA08085D2242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 09:01:00 +0000
Manifest this update: Sat 14 Jun 2025 09:01:00 +0000
Manifest next update: Sun 15 Jun 2025 09:01:00 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: Ab+7jyhlfNnmGOPskrd5Qx9FLeY9I8SwHxnPoFhW+/g=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:ba:47:fb:66:b3:60:a9:b7:fa:08:08:5d:22:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jun 14 09:01:00 2025 GMT
Not After : Jun 15 09:01:00 2025 GMT
Subject: CN=087928cb2ee447e24a98d1bd541d65e8ee5c0cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:71:f0:e7:b3:41:f4:3d:a1:f5:91:63:3b:
64:2c:84:d4:77:67:23:27:15:c6:d2:97:b9:c0:38:
0d:55:11:97:79:cb:dd:7d:31:15:99:42:9d:97:bb:
0a:00:30:42:bc:14:73:de:aa:e5:1d:ce:3b:6c:b9:
3c:97:b0:f6:d0:db:25:94:48:01:d6:13:dd:1d:6f:
bd:66:cc:bc:ae:d6:2f:31:4a:15:18:ff:2d:35:2c:
aa:ba:b2:82:4d:0d:43:8d:7f:57:be:72:29:14:1e:
73:c4:16:1c:dd:7e:2b:c6:41:ca:d4:ee:17:6f:ec:
0f:96:2c:1e:0a:4c:e3:36:4c:02:9f:c2:24:37:ff:
f9:d8:b6:15:fe:f5:c9:b0:95:41:06:d7:ef:b6:9c:
5a:65:99:a6:c2:83:b0:dd:81:e1:55:f8:c7:97:52:
ea:dd:61:3d:63:75:73:f4:54:0c:42:7e:d7:d8:d5:
e7:77:d5:06:37:92:65:55:77:f4:eb:ef:d7:bf:f7:
30:63:e8:e6:7e:14:45:9f:94:5c:fb:97:8f:05:5e:
7f:7d:fd:25:92:16:fb:ba:17:23:21:80:34:31:ec:
d8:09:90:f4:6a:d9:dc:32:38:4c:1d:5a:04:fa:44:
d3:d9:32:7f:87:a0:c8:d2:2e:e4:b5:98:28:27:0f:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:28:CB:2E:E4:47:E2:4A:98:D1:BD:54:1D:65:E8:EE:5C:0C:D5
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:88:f0:e5:20:e6:f8:56:77:fe:27:5d:4b:c6:40:3f:1b:da:
2a:0f:5d:40:84:43:c3:21:82:cc:2b:4a:81:fe:75:3c:44:ed:
25:2d:e9:5c:da:21:a7:c2:29:6f:c8:be:ec:92:a9:18:d8:d0:
7a:e6:79:bb:30:c8:7e:cb:7a:19:43:fa:06:43:30:57:a4:72:
80:f2:54:31:9a:d0:05:eb:38:e4:54:c7:b2:15:90:9b:9f:d1:
1d:03:07:7a:19:6f:21:44:57:7a:17:46:0c:08:51:71:f3:24:
e6:e1:d2:3a:e8:5b:ef:a2:bf:5d:c1:5a:c8:87:f7:ec:73:eb:
af:cd:d5:52:37:c2:ef:9b:02:c9:2a:1b:eb:32:63:5e:c0:50:
b7:2c:ca:6d:0d:11:b7:3e:3d:2f:ec:3f:5d:64:ee:c5:f5:56:
d2:cc:9a:d1:58:0f:42:8e:6e:26:cc:b7:12:48:a5:57:b0:2c:
75:fc:3d:af:e8:bc:92:8b:3b:c4:f5:9c:a5:00:de:d5:be:7b:
98:bf:62:d0:6c:e3:ee:fe:37:e7:17:39:18:29:3d:5a:67:55:
8d:88:21:42:a1:db:33:69:e0:44:d9:19:13:d0:6c:d4:c0:f3:
c6:70:35:89:83:1b:48:7c:7a:23:2f:cd:c6:40:4b:22:36:8b:
ad:64:70:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq7pH+2azYKm3+ggIXSJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4
NzFmNzgwHhcNMjUwNjE0MDkwMTAwWhcNMjUwNjE1MDkwMTAwWjAzMTEwLwYDVQQD
EygwODc5MjhjYjJlZTQ0N2UyNGE5OGQxYmQ1NDFkNjVlOGVlNWMwY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVBx8OezQfQ9ofWRYztkLITUd2cj
JxXG0pe5wDgNVRGXecvdfTEVmUKdl7sKADBCvBRz3qrlHc47bLk8l7D20NsllEgB
1hPdHW+9Zsy8rtYvMUoVGP8tNSyqurKCTQ1DjX9XvnIpFB5zxBYc3X4rxkHK1O4X
b+wPliweCkzjNkwCn8IkN//52LYV/vXJsJVBBtfvtpxaZZmmwoOw3YHhVfjHl1Lq
3WE9Y3Vz9FQMQn7X2NXnd9UGN5JlVXf06+/Xv/cwY+jmfhRFn5Rc+5ePBV5/ff0l
khb7uhcjIYA0MezYCZD0atncMjhMHVoE+kTT2TJ/h6DI0i7ktZgoJw+URQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh5KMsu5EfiSpjRvVQdZejuXAzVMB8GA1UdIwQY
MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt
YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz
LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYjw5SDm
+FZ3/iddS8ZAPxvaKg9dQIRDwyGCzCtKgf51PETtJS3pXNohp8Ipb8i+7JKpGNjQ
euZ5uzDIfst6GUP6BkMwV6RygPJUMZrQBes45FTHshWQm5/RHQMHehlvIURXehdG
DAhRcfMk5uHSOuhb76K/XcFayIf37HPrr83VUjfC75sCySob6zJjXsBQtyzKbQ0R
tz49L+w/XWTuxfVW0sya0VgPQo5uJsy3EkilV7Asdfw9r+i8kos7xPWcpQDe1b57
mL9i0Gzj7v435xc5GCk9WmdVjYghQqHbM2ngRNkZE9Bs1MDzxnA1iYMbSHx6Iy/N
xkBLIjaLrWRw5w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:59 2025 by rpki-client