Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: p1QGMJYUGYS3detK/e6dSZISHVJpgvPyv5tdyFLJU58=
Subject key identifier: 67:BD:DE:B8:0D:2E:75:77:5A:0E:00:B2:05:B8:1E:3F:F3:A9:10:31
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 0198752C2203C71787722A703DBCE9B1233B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 112F
Signing time: Mon 04 Aug 2025 13:01:23 +0000
Manifest this update: Mon 04 Aug 2025 13:01:23 +0000
Manifest next update: Tue 05 Aug 2025 13:01:23 +0000
Files and hashes: 1: A8fXWSeNOGLpZBq5n912XqwunjQ.roa (hash: AcIcq2rjaaC1zEYSslp0dwr1gScXP+xKrcPZfoqgVE0=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: Vjbqb4os/r5ulcvPCC0168heAQafrqVSY34Fux1Iw0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:22:03:c7:17:87:72:2a:70:3d:bc:e9:b1:23:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Aug 4 13:01:23 2025 GMT
Not After : Aug 5 13:01:23 2025 GMT
Subject: CN=67bddeb80d2e75775a0e00b205b81e3ff3a91031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:fb:fc:2e:f0:89:df:0e:00:bb:6e:28:5d:
36:46:4b:f0:22:3d:61:0a:8e:72:80:cb:12:5a:a2:
e1:52:f4:a1:4a:4a:83:54:a7:bf:66:bf:a5:73:31:
1d:86:c4:29:36:ad:c5:d5:6b:bf:b3:ac:3a:ea:90:
c6:33:f6:c4:50:93:e4:4d:90:87:41:b9:ac:8b:45:
89:36:da:e5:9e:df:fa:80:75:12:cd:02:7a:87:7d:
73:d3:63:9b:c9:c5:7b:ca:cb:25:09:01:6f:5f:73:
9e:b3:45:ee:87:c9:96:3c:40:1f:c0:6f:3c:39:63:
90:76:ad:91:77:d1:cd:48:e7:57:c4:a8:bc:e4:20:
4a:73:0c:05:09:e4:84:13:0e:da:56:35:59:60:84:
1c:54:f6:b7:9f:a4:8c:92:8e:1a:ce:39:f4:3a:7a:
56:58:5e:3e:36:ba:6b:d8:e3:71:a1:97:6a:99:92:
e3:27:76:46:25:9c:88:a2:ab:3d:bd:a3:db:0d:f7:
1c:f1:c7:3a:65:35:c2:cc:8c:c1:02:98:ce:c9:a0:
a5:70:86:b7:9d:1b:18:9f:42:51:b4:0f:ee:6d:2e:
e3:b1:f6:16:fb:de:dc:a4:58:8d:80:fb:bb:64:97:
bb:d8:5b:73:bd:31:e4:17:7e:aa:56:c7:ae:04:4d:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BD:DE:B8:0D:2E:75:77:5A:0E:00:B2:05:B8:1E:3F:F3:A9:10:31
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:79:06:d2:4c:3b:3f:2a:b6:41:29:e5:ba:20:a9:7d:ba:4e:
32:5e:7f:72:f5:64:3b:c6:28:08:10:d4:6a:14:95:19:51:e1:
12:29:77:b2:64:5a:6e:5c:51:68:10:4b:20:0b:55:4e:29:3a:
49:19:c4:41:77:43:b0:9f:a3:8b:8b:97:a0:b4:73:7b:2d:12:
15:fa:7c:d7:ff:98:ff:a7:b8:84:37:4d:af:5d:d7:25:4b:26:
b2:f1:2b:49:34:56:a5:14:42:72:25:b0:45:15:53:6c:3e:cd:
bc:25:21:f3:40:9e:eb:af:76:e7:94:af:8f:31:24:90:41:bd:
79:30:04:de:44:b7:be:09:fd:2d:7a:53:79:3e:db:46:67:6f:
84:2e:38:9e:d4:9a:f6:a6:4a:08:0f:bf:63:6c:53:d7:22:20:
8c:9f:c4:d3:8e:e3:30:47:68:a0:1a:ed:f9:8d:56:9d:25:1d:
4f:9e:e4:c9:55:17:b8:fe:56:1a:0a:52:b7:31:c7:33:90:00:
76:16:83:ca:99:8b:1d:f3:7d:0f:37:a3:4f:ac:5a:a5:81:f9:
78:2f:99:66:9f:7b:79:27:cd:4a:5a:f6:3d:8d:df:6d:5c:fd:
8e:a4:59:0d:74:e4:b1:64:84:9e:75:97:2d:59:68:ee:d6:a3:
8b:27:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:15:59 2025 by rpki-client