Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: eaNzdMC8t15iwnxWTyU5clEKhbKmK1ZlBzoSvNe8esY=
Subject key identifier: AE:62:11:FB:1E:67:16:7E:8D:C6:1F:F9:61:46:88:B3:58:7A:24:4D
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 01977075405A27754317C91338FACBFC15B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 10A8
Signing time: Sat 14 Jun 2025 22:00:21 +0000
Manifest this update: Sat 14 Jun 2025 22:00:21 +0000
Manifest next update: Sun 15 Jun 2025 22:00:21 +0000
Files and hashes: 1: A8fXWSeNOGLpZBq5n912XqwunjQ.roa (hash: AcIcq2rjaaC1zEYSslp0dwr1gScXP+xKrcPZfoqgVE0=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: I7mc+ErUsu9p493WMwybqAYaJvTBCEgECIEEM8KFBdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:40:5a:27:75:43:17:c9:13:38:fa:cb:fc:15:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Jun 14 22:00:21 2025 GMT
Not After : Jun 15 22:00:21 2025 GMT
Subject: CN=ae6211fb1e67167e8dc61ff9614688b3587a244d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:c2:6d:8a:7d:47:c7:63:9e:75:c0:dc:c5:
52:f6:1a:31:6a:43:16:0a:ea:61:80:bc:1f:8f:9d:
ef:ea:5b:f0:75:01:d3:9e:1d:49:81:7e:34:20:7c:
10:35:70:0d:cf:07:b5:5e:b7:ce:33:1e:c1:b3:96:
70:62:3e:78:4d:c2:7e:ec:f1:07:07:e4:ca:cb:32:
0d:71:44:69:08:c4:ac:fd:65:78:c1:da:8f:d7:56:
22:14:c4:a2:46:96:37:ab:96:4a:89:e0:9f:e7:69:
0c:43:f6:66:b6:86:eb:ee:8c:b0:5b:bf:8e:3b:31:
e5:2d:9c:3b:3f:d8:f7:92:e5:76:94:d5:01:35:ee:
64:e6:a2:36:ef:87:4b:03:b5:77:9b:43:fd:34:71:
9d:c9:ea:73:7f:d2:d9:51:a0:ab:ff:86:f0:de:af:
53:ef:ac:14:8b:12:84:64:40:53:36:bb:44:6d:66:
ac:a4:75:3f:ed:d7:72:11:ee:dd:16:d3:41:2d:31:
fb:25:7f:6a:4b:b9:a5:fe:a1:e4:0e:92:c9:f7:62:
ef:04:1b:9b:90:92:1d:60:f3:1f:e1:3c:40:3a:ef:
ff:24:9d:fb:01:9e:00:fe:94:09:53:c5:0f:88:69:
a2:50:f1:d2:bc:92:ad:07:5d:b0:86:55:79:4f:13:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:11:FB:1E:67:16:7E:8D:C6:1F:F9:61:46:88:B3:58:7A:24:4D
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d1:9f:0c:e8:03:70:a6:2b:93:bf:4f:84:d3:c1:ad:51:a7:
52:07:d2:d0:8f:f3:ef:09:c5:4a:ad:8d:2d:07:8e:e6:fa:8e:
eb:d1:d0:a7:49:8d:7a:2c:8a:71:aa:e8:90:cb:4b:08:ec:5f:
bc:71:83:64:ba:e7:3a:fa:72:9e:86:ba:8e:94:fd:a7:38:60:
c3:5d:ed:cc:19:6a:f7:1c:91:0b:08:62:a9:26:e7:14:2f:da:
90:d0:41:95:a8:11:b9:99:23:ff:31:b7:2a:78:b7:b6:30:44:
79:7e:57:71:8d:1d:28:84:61:8e:d2:96:6d:34:9d:f0:8e:ac:
13:be:f1:c0:10:aa:9d:1b:da:51:4d:7e:77:05:77:0f:5f:2a:
cd:92:a4:db:9c:21:6b:f1:d9:33:c2:e6:b4:12:e2:7d:02:39:
9e:7a:27:ca:28:b3:5b:03:bb:c7:87:a8:19:25:d6:cc:df:48:
3b:70:aa:e9:48:7c:31:cb:41:88:a3:37:ad:01:be:49:22:e4:
a0:b8:3a:54:08:18:fa:23:7d:f4:54:f3:08:d4:1f:20:9b:d0:
db:82:27:e9:ea:a2:c1:ee:b9:ae:f5:82:53:de:12:8e:2b:a9:
1f:d1:cf:2f:d6:6d:9a:4b:f0:12:df:ae:7f:3e:6f:0d:06:7b:
33:eb:2e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdUBaJ3VDF8kTOPrL/BW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NGY5ZDJkYmVkOTc0NTM4NDA1YTc5ZjZlYzdlODZjNGFl
ZGQzZDEwHhcNMjUwNjE0MjIwMDIxWhcNMjUwNjE1MjIwMDIxWjAzMTEwLwYDVQQD
EyhhZTYyMTFmYjFlNjcxNjdlOGRjNjFmZjk2MTQ2ODhiMzU4N2EyNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW/CbYp9R8djnnXA3MVS9hoxakMW
CuphgLwfj53v6lvwdQHTnh1JgX40IHwQNXANzwe1XrfOMx7Bs5ZwYj54TcJ+7PEH
B+TKyzINcURpCMSs/WV4wdqP11YiFMSiRpY3q5ZKieCf52kMQ/Zmtobr7oywW7+O
OzHlLZw7P9j3kuV2lNUBNe5k5qI274dLA7V3m0P9NHGdyepzf9LZUaCr/4bw3q9T
76wUixKEZEBTNrtEbWaspHU/7ddyEe7dFtNBLTH7JX9qS7ml/qHkDpLJ92LvBBub
kJIdYPMf4TxAOu//JJ37AZ4A/pQJU8UPiGmiUPHSvJKtB12whlV5TxO8rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5iEfseZxZ+jcYf+WFGiLNYeiRNMB8GA1UdIwQY
MBaAFEVPnS2+2XRThAWnn27H6GxK7dPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2Ut
ZmFhZTRiYWViZWZmLzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2UtZmFhZTRiYWViZWZm
LzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtGfDOgD
cKYrk79PhNPBrVGnUgfS0I/z7wnFSq2NLQeO5vqO69HQp0mNeiyKcarokMtLCOxf
vHGDZLrnOvpynoa6jpT9pzhgw13tzBlq9xyRCwhiqSbnFC/akNBBlagRuZkj/zG3
Kni3tjBEeX5XcY0dKIRhjtKWbTSd8I6sE77xwBCqnRvaUU1+dwV3D18qzZKk25wh
a/HZM8LmtBLifQI5nnonyiizWwO7x4eoGSXWzN9IO3Cq6Uh8MctBiKM3rQG+SSLk
oLg6VAgY+iN99FTzCNQfIJvQ24In6eqiwe65rvWCU94SjiupH9HPL9ZtmkvwEt+u
fz5vDQZ7M+suFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:50:50 2025 by rpki-client