Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: PPszjmFZ8nmUrVhCscmmY3qIjAm8C94aNKLJ5PUzBw4=
Subject key identifier: E5:74:FB:E5:79:65:BF:E5:06:AE:0A:1F:2B:E9:76:49:29:2D:D6:2C
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019881D57B8027EBD2C2BB93C26DB87D8723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 00:01:48 +0000
Manifest this update: Thu 07 Aug 2025 00:01:48 +0000
Manifest next update: Fri 08 Aug 2025 00:01:48 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: s62gIBSpLuL7jW51xOEO/y7KP3WYG4DvgE4Z89E9Jmg=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:7b:80:27:eb:d2:c2:bb:93:c2:6d:b8:7d:87:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Aug 7 00:01:48 2025 GMT
Not After : Aug 8 00:01:48 2025 GMT
Subject: CN=e574fbe57965bfe506ae0a1f2be97649292dd62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:f8:aa:16:68:ad:b9:51:c3:15:9d:75:f6:
8b:e7:5a:95:05:3a:1d:b2:e0:7a:95:d0:39:83:7e:
04:71:8d:bb:f5:86:b9:22:22:2a:ee:51:3c:33:77:
d8:5d:33:24:a4:ce:c1:25:63:64:8e:b0:f3:ed:1b:
81:a7:cc:29:6b:95:a4:14:7f:ea:f2:ea:c2:2b:ba:
f7:e2:a0:c6:ad:13:9e:b9:6b:45:60:70:70:e7:29:
a8:47:a0:11:83:3b:f3:e6:fa:35:02:6f:75:24:0e:
83:3c:02:86:65:b8:8b:e4:81:7e:b0:fd:c8:93:15:
83:81:32:3b:18:c0:a6:5b:1f:da:c8:10:06:95:12:
6f:50:46:ab:3a:bc:0c:32:d0:3d:12:31:6d:50:2c:
2d:43:2c:f5:a7:df:d7:39:a0:2e:84:7d:3d:47:5f:
f0:f4:60:e0:aa:e4:6a:58:e8:de:08:35:2f:1d:59:
4d:bc:61:d2:9c:d4:42:44:a5:1d:de:d3:f7:31:b6:
32:77:41:07:42:94:70:50:a0:25:98:82:8c:dd:be:
bb:c0:89:0a:57:27:6d:56:ab:ad:09:ce:52:7f:28:
77:3d:b1:bf:c6:32:8b:a1:4c:79:62:11:6e:78:4f:
49:84:ac:cf:e6:a1:8b:ed:88:7f:07:4f:c8:3a:52:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:FB:E5:79:65:BF:E5:06:AE:0A:1F:2B:E9:76:49:29:2D:D6:2C
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e1:50:86:60:7f:59:b9:0b:70:e0:46:a0:ea:75:3b:a0:04:
ae:76:46:35:5b:b6:38:d0:ed:40:8f:fe:6e:bb:d0:59:3c:e5:
16:6d:6b:fd:31:7f:0c:4d:90:93:87:0b:de:12:b6:c3:57:18:
fd:8a:0e:0f:bd:a9:e6:1c:01:e2:1f:70:fb:ca:a7:68:f7:4f:
91:30:d4:0c:06:08:10:55:8e:00:cc:ab:d2:92:09:9d:84:2b:
1b:4b:a7:e0:51:94:5b:59:a4:d3:8e:bf:b3:fa:09:ed:fe:dc:
3f:8f:d5:4c:f3:b9:3a:a2:a6:a5:e0:2e:99:c4:c0:c0:07:20:
49:39:eb:22:2b:56:0c:96:e4:11:90:85:f5:d5:9d:46:eb:3b:
77:ec:e6:81:78:50:03:de:31:aa:46:14:fe:3e:e0:b8:a0:1a:
80:b4:10:97:09:3d:a4:a6:e6:d6:1b:49:90:54:32:a3:96:95:
4c:c1:50:fa:97:16:dd:2a:aa:92:99:f5:ca:77:fb:66:0c:1b:
fa:bd:b8:d5:d3:d0:81:7a:27:0c:a3:68:e8:30:f9:17:79:9c:
e8:a2:58:6e:1a:24:5f:b1:c8:f6:8f:bc:b6:fa:4c:c1:66:ee:
52:83:38:42:33:55:6e:ca:fe:f4:c2:9d:95:c4:ee:ec:12:d2:
1e:1f:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:25 2025 by rpki-client