Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: 7inMTpUcF4aXtemcby0bVRk+JY0m4iK5ZcWDgHbbXcc=
Subject key identifier: D0:63:DD:6E:A8:65:69:B2:C3:EE:A9:52:12:51:A9:B5:C4:AD:6B:0C
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 0198D6CE131DD1F4EE5231CA11B62B9DA607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 12:01:26 +0000
Manifest this update: Sat 23 Aug 2025 12:01:26 +0000
Manifest next update: Sun 24 Aug 2025 12:01:26 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: YmohPYFa2fMmFzrhNhJLZXZxPwMcu5u1MMmQQpxu9dg=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:13:1d:d1:f4:ee:52:31:ca:11:b6:2b:9d:a6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Aug 23 12:01:26 2025 GMT
Not After : Aug 24 12:01:26 2025 GMT
Subject: CN=d063dd6ea86569b2c3eea9521251a9b5c4ad6b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:61:22:45:31:62:51:e2:a4:4c:b4:e9:0a:
1e:6f:b7:77:32:8b:e5:51:ac:b0:0c:54:5f:1d:86:
87:76:ac:47:ef:47:3c:d2:dc:5b:6f:e4:73:3b:52:
20:04:73:60:9b:41:1c:55:8f:e2:1a:a9:53:ab:ed:
9b:ec:31:7a:68:e3:2d:74:e6:34:48:d5:e1:04:dc:
b3:08:ff:d4:54:8f:b6:0e:06:81:11:e5:e8:f1:0e:
67:50:ad:60:6f:86:e4:7a:2a:0f:de:a5:84:1f:2e:
f5:76:b2:d0:a2:33:24:72:8c:54:27:2e:7e:2f:72:
60:6e:0e:f2:35:ef:c6:a8:87:5c:b2:1d:f6:96:94:
48:99:da:91:f4:55:c9:18:8c:26:16:d3:d5:d2:73:
a4:d1:ed:69:7c:81:e5:f5:b5:92:26:e0:27:6e:1a:
d9:75:ea:b5:11:9a:48:50:0f:a9:51:e3:43:01:48:
4f:c6:35:9d:01:ee:12:f0:33:e2:c1:cc:d1:df:6c:
5a:b8:5b:4f:9e:b9:33:8a:45:e3:3e:17:1f:f1:7a:
b3:4c:49:a7:45:36:62:8d:f0:c2:e8:97:58:2c:9f:
43:51:3c:d1:ee:fb:a4:69:e6:8e:c4:d9:5c:f8:c0:
36:99:2a:1e:a2:94:a3:8f:b9:6d:85:58:7e:d1:a0:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:DD:6E:A8:65:69:B2:C3:EE:A9:52:12:51:A9:B5:C4:AD:6B:0C
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:12:f8:6c:f1:1f:02:23:55:44:37:90:e5:a8:0c:0f:09:f1:
91:30:e4:05:11:50:0e:cd:b0:1e:80:64:50:5f:8f:4b:0b:e5:
8c:c4:94:f3:04:38:e2:ad:b7:c2:c8:26:2d:f6:e2:79:a3:07:
e7:4b:9e:e2:6e:fc:56:b2:16:80:30:57:dd:77:5c:1e:2f:e4:
0b:8e:5e:25:11:07:43:8d:ad:76:c7:2c:4e:f3:fb:83:52:7f:
c2:25:10:6f:5e:c3:ec:29:cc:c1:70:29:35:88:b2:0e:d8:79:
7a:1f:92:29:19:ec:21:8b:8b:7c:8e:b2:2d:19:32:77:10:b4:
89:c3:d1:d4:7a:b2:27:92:b6:b3:e2:d0:82:70:24:1b:f2:0e:
07:bb:9e:aa:0f:12:82:ac:28:57:12:7d:4b:85:a1:7c:0f:80:
22:79:7d:70:7d:a2:85:f7:13:91:e8:10:8f:28:17:f4:ed:4f:
11:c2:6d:98:0e:1d:d6:24:a8:ba:74:6a:07:84:c7:ce:97:2f:
76:37:a0:4b:74:49:a7:3e:06:c4:83:83:33:74:2a:b4:36:d8:
dd:df:1f:94:94:06:e5:c2:8b:e5:80:7e:8e:49:d2:1f:36:30:
3d:8d:ba:f0:b0:5a:5b:a7:f1:5e:97:98:01:73:23:ed:fc:ed:
ed:3b:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:22 2025 by rpki-client