Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: 5yJfSLk7eu6yKGkLFNLvoOpu6scuSB3C5+2+dbYrW+I=
Subject key identifier: D3:F2:19:B0:60:58:A2:73:DA:6E:8D:8E:15:3D:08:8A:2B:37:93:B8
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 0197B70EFF79D60D58E90352E04ED7FF6A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: Q9pTTcD2hyG8Cm+i3qlG5DyDO/Bd2/Dz9adrGv4rDq8=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ff:79:d6:0d:58:e9:03:52:e0:4e:d7:ff:6a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=d3f219b06058a273da6e8d8e153d088a2b3793b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:3f:ed:b3:53:6e:72:f2:40:c4:69:e8:49:
a4:f8:0a:45:9e:fe:08:f0:74:8f:dd:b4:3f:52:44:
4e:d7:d6:76:33:df:00:9d:69:ef:6f:3b:e4:5a:b1:
5b:d7:61:c2:43:d4:c9:d5:c8:59:8e:c8:66:2f:db:
26:be:37:91:1a:c4:67:f2:7a:55:74:de:1b:0e:bf:
69:0e:b1:fa:85:fe:b9:bd:17:99:95:52:b5:2d:29:
71:d5:0c:19:57:e9:cc:35:25:85:16:f5:23:c7:1c:
68:45:2a:0a:ba:63:b3:d5:a1:2c:78:a8:c5:7a:96:
dc:2f:c9:5a:f4:a1:9f:17:e1:c8:e4:85:eb:2d:04:
e3:8e:ff:e4:ae:7b:dd:33:9c:2a:a7:89:5f:7c:69:
82:66:94:78:53:19:33:f2:29:e6:26:17:14:b2:f2:
91:86:ad:5a:ad:f6:47:f6:81:ea:ca:08:9c:75:6b:
7e:60:40:59:cb:15:a7:1f:b7:16:44:ba:19:51:42:
c7:a4:d7:3a:0f:69:52:fb:5f:bc:3c:0b:b5:c5:11:
7f:3e:76:da:f2:a3:9d:04:ac:dd:23:a0:bb:8f:11:
f9:96:c8:95:a3:ec:68:b1:95:c4:ab:74:3b:92:0f:
1d:d5:f2:0f:73:ae:a7:7f:98:b2:b0:5e:9e:c1:53:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:19:B0:60:58:A2:73:DA:6E:8D:8E:15:3D:08:8A:2B:37:93:B8
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b4:2b:a5:7a:a4:0e:0d:08:11:58:ca:97:4f:26:0f:60:2c:
b9:2c:35:1c:3f:b3:8e:1e:2d:13:37:e8:68:eb:ee:01:25:0a:
f2:ba:47:2c:09:25:af:b7:09:63:42:b0:70:c1:85:09:57:61:
e8:c2:f1:51:37:b9:f6:64:e2:29:71:e0:fe:5c:c0:c6:7e:80:
b7:fd:67:0f:9b:d6:e8:8a:6a:15:49:96:60:f3:7d:bf:95:8b:
05:bf:73:d3:ed:fa:80:4c:e4:81:e7:09:14:0d:09:10:31:de:
b5:b1:d5:29:28:3c:6c:e2:07:e0:a7:32:01:a5:98:96:6c:28:
b9:7e:01:d5:bc:07:99:81:1e:8f:bc:d1:cc:ec:2f:80:f7:af:
ef:30:c2:b6:f2:98:54:f4:09:56:dc:2a:71:a1:b9:7f:de:52:
6a:2f:23:da:e1:2c:47:9b:2f:f1:70:60:db:85:c8:f9:5b:af:
f5:0b:45:22:7c:13:b1:2c:7f:07:d6:cd:cb:3a:d3:d2:5f:85:
dc:5f:bb:8a:86:a1:0e:39:21:09:97:0e:72:2e:61:93:f3:84:
42:e8:74:97:db:6b:5a:d0:57:82:be:83:46:64:bc:c7:50:23:
60:5a:fa:6a:66:ef:c5:6e:49:0d:b2:bc:3d:87:a2:dc:fa:e2:
bb:d0:58:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dv951g1Y6QNS4E7X/2qFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4
NzFmNzgwHhcNMjUwNjI4MTUwMTQyWhcNMjUwNjI5MTUwMTQyWjAzMTEwLwYDVQQD
EyhkM2YyMTliMDYwNThhMjczZGE2ZThkOGUxNTNkMDg4YTJiMzc5M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xo/7bNTbnLyQMRp6Emk+ApFnv4I
8HSP3bQ/UkRO19Z2M98AnWnvbzvkWrFb12HCQ9TJ1chZjshmL9smvjeRGsRn8npV
dN4bDr9pDrH6hf65vReZlVK1LSlx1QwZV+nMNSWFFvUjxxxoRSoKumOz1aEseKjF
epbcL8la9KGfF+HI5IXrLQTjjv/krnvdM5wqp4lffGmCZpR4Uxkz8inmJhcUsvKR
hq1arfZH9oHqygicdWt+YEBZyxWnH7cWRLoZUULHpNc6D2lS+1+8PAu1xRF/Pnba
8qOdBKzdI6C7jxH5lsiVo+xosZXEq3Q7kg8d1fIPc66nf5iysF6ewVP4aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPyGbBgWKJz2m6NjhU9CIorN5O4MB8GA1UdIwQY
MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt
YWVhMjUyZGM2M2IzLzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz
LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbQrpXqk
Dg0IEVjKl08mD2AsuSw1HD+zjh4tEzfoaOvuASUK8rpHLAklr7cJY0KwcMGFCVdh
6MLxUTe59mTiKXHg/lzAxn6At/1nD5vW6IpqFUmWYPN9v5WLBb9z0+36gEzkgecJ
FA0JEDHetbHVKSg8bOIH4KcyAaWYlmwouX4B1bwHmYEej7zRzOwvgPev7zDCtvKY
VPQJVtwqcaG5f95Sai8j2uEsR5sv8XBg24XI+Vuv9QtFInwTsSx/B9bNyzrT0l+F
3F+7ioahDjkhCZcOci5hk/OEQuh0l9trWtBXgr6DRmS8x1AjYFr6ambvxW5JDbK8
PYei3Priu9BYBA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:22 2025 by rpki-client