Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: RLznuLLu4OziWm9VPDyNhKaXOl/5/GE/xo0kQMrIWq0=
Subject key identifier: F5:F4:C4:F7:07:F7:4D:64:64:BF:2F:66:50:9C:21:A7:52:57:08:9F
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019A00353F106CC4E24AA23AE9923E7070AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 06:01:20 +0000
Manifest this update: Mon 20 Oct 2025 06:01:20 +0000
Manifest next update: Tue 21 Oct 2025 06:01:20 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: 3+Knl73Knf7OcTbkI0nDHHaUpRWvwFyLilCgyEk4wTY=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:3f:10:6c:c4:e2:4a:a2:3a:e9:92:3e:70:70:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Oct 20 06:01:20 2025 GMT
Not After : Oct 21 06:01:20 2025 GMT
Subject: CN=f5f4c4f707f74d6464bf2f66509c21a75257089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:df:ef:c4:29:62:1e:a4:a5:df:ea:e1:a7:
cf:78:9c:aa:27:6d:b7:57:46:2a:e9:3a:03:47:82:
b7:c9:53:0e:de:8c:08:f8:f9:bb:5a:2f:46:fb:48:
e5:70:f4:37:f2:7b:5b:a7:70:16:7a:c8:b2:50:f9:
9d:2b:f4:3a:66:39:a1:90:e7:00:bd:64:c2:0d:8f:
97:cc:62:47:dd:de:b3:ef:3c:67:8b:32:a0:89:b7:
87:b1:2a:52:d4:e4:21:da:b9:38:8f:7d:5f:6b:f3:
75:44:d6:28:f7:f2:28:98:41:3a:6f:50:4c:98:b8:
80:b2:ac:60:b5:0d:38:1c:1f:d9:3d:30:32:19:c2:
9c:b0:18:bc:7d:d0:d2:a1:2c:f8:c1:5e:6a:2d:ac:
13:a2:a1:44:37:fe:97:87:a8:ae:3c:df:3e:e9:ec:
4b:ef:0a:f5:e4:de:dc:ee:d8:79:ce:b5:61:01:5c:
28:2f:a8:e6:f4:ed:08:9c:4c:dd:78:8f:e2:23:ad:
42:c0:c5:6c:ea:d0:54:53:84:c4:0c:94:94:9b:58:
68:ad:1d:0a:20:94:75:13:d4:4f:eb:3c:d4:04:7f:
f2:45:80:d3:44:02:d7:69:d5:64:09:b9:9c:71:da:
cf:5a:e3:2d:b8:66:48:34:85:9b:69:5e:34:bc:1f:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:C4:F7:07:F7:4D:64:64:BF:2F:66:50:9C:21:A7:52:57:08:9F
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:92:28:70:ad:e5:2e:03:e5:81:9d:ae:f7:de:eb:a7:74:c6:
ef:06:cb:ff:ee:bd:61:c0:56:8f:e4:c4:08:68:ac:8b:cd:1f:
bf:95:ce:18:d6:84:e0:7c:26:eb:29:c2:5f:49:5c:97:fe:73:
7f:1d:19:5c:37:4f:4d:35:a2:61:17:f5:94:f0:ff:03:52:fa:
98:e6:76:6b:87:75:e6:30:82:6a:83:05:f4:41:44:45:20:8b:
cf:b9:aa:f1:e6:db:4d:33:1d:e2:ed:f0:e1:9d:dc:dc:7e:40:
5c:d1:22:b3:ed:3e:4c:b0:30:60:88:37:fd:85:98:c9:09:b4:
db:f7:fb:80:7f:2a:d8:0d:bc:49:8c:2a:f8:8e:23:a4:54:a1:
da:a0:8c:30:5f:1a:41:6a:6a:a1:c7:04:7b:03:49:01:0e:8c:
9d:0d:77:19:03:37:e6:e6:e4:5e:7f:38:00:9b:bd:c9:6c:40:
8d:e2:df:7f:50:1e:5d:f9:ab:40:bd:e1:ce:fd:26:cc:ff:b4:
35:e6:13:c0:ab:da:6c:8a:ea:9e:45:70:4e:5b:e8:28:f0:47:
08:5b:eb:0d:6e:38:96:11:2c:66:35:f9:d3:31:9c:a7:67:23:
31:ba:b3:4a:58:fb:b7:21:4a:64:52:6f:92:59:b2:d3:57:66:
0e:48:0d:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANT8QbMTiSqI66ZI+cHCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4
NzFmNzgwHhcNMjUxMDIwMDYwMTIwWhcNMjUxMDIxMDYwMTIwWjAzMTEwLwYDVQQD
EyhmNWY0YzRmNzA3Zjc0ZDY0NjRiZjJmNjY1MDljMjFhNzUyNTcwODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrHf78QpYh6kpd/q4afPeJyqJ223
V0Yq6ToDR4K3yVMO3owI+Pm7Wi9G+0jlcPQ38ntbp3AWesiyUPmdK/Q6ZjmhkOcA
vWTCDY+XzGJH3d6z7zxnizKgibeHsSpS1OQh2rk4j31fa/N1RNYo9/IomEE6b1BM
mLiAsqxgtQ04HB/ZPTAyGcKcsBi8fdDSoSz4wV5qLawToqFEN/6Xh6iuPN8+6exL
7wr15N7c7th5zrVhAVwoL6jm9O0InEzdeI/iI61CwMVs6tBUU4TEDJSUm1horR0K
IJR1E9RP6zzUBH/yRYDTRALXadVkCbmccdrPWuMtuGZINIWbaV40vB/y2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX0xPcH901kZL8vZlCcIadSVwifMB8GA1UdIwQY
MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt
YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz
LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpIocK3l
LgPlgZ2u997rp3TG7wbL/+69YcBWj+TECGisi80fv5XOGNaE4Hwm6ynCX0lcl/5z
fx0ZXDdPTTWiYRf1lPD/A1L6mOZ2a4d15jCCaoMF9EFERSCLz7mq8ebbTTMd4u3w
4Z3c3H5AXNEis+0+TLAwYIg3/YWYyQm02/f7gH8q2A28SYwq+I4jpFSh2qCMMF8a
QWpqoccEewNJAQ6MnQ13GQM35ubkXn84AJu9yWxAjeLff1AeXfmrQL3hzv0mzP+0
NeYTwKvabIrqnkVwTlvoKPBHCFvrDW44lhEsZjX50zGcp2cjMbqzSlj7tyFKZFJv
klmy01dmDkgNIQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:19 2025 by rpki-client