Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: p835Mq9dLqasifdvQlzjizBsAaRAqiPgYctTb+RryeE=
Subject key identifier: 55:98:47:17:A0:A7:A7:29:57:5D:42:68:1C:A8:2C:10:34:33:23:CE
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 01984AAECEDD05F0F188774127A6C2201004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 1119
Signing time: Sun 27 Jul 2025 07:00:26 +0000
Manifest this update: Sun 27 Jul 2025 07:00:26 +0000
Manifest next update: Mon 28 Jul 2025 07:00:26 +0000
Files and hashes: 1: A8fXWSeNOGLpZBq5n912XqwunjQ.roa (hash: AcIcq2rjaaC1zEYSslp0dwr1gScXP+xKrcPZfoqgVE0=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: 3YowItSaioMnyhq3hq4l5lkv7qKMXa/uPhlgSB1ixvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ce:dd:05:f0:f1:88:77:41:27:a6:c2:20:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Jul 27 07:00:26 2025 GMT
Not After : Jul 28 07:00:26 2025 GMT
Subject: CN=55984717a0a7a729575d42681ca82c10343323ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:7e:20:09:0c:4f:f9:b7:7e:fe:4e:f8:e9:
73:08:fc:64:87:1c:ff:c8:74:5d:7f:e8:29:ce:c8:
e4:2a:bd:49:3c:65:5e:23:8b:48:1e:37:e6:6c:5d:
d7:64:ae:8d:9c:b7:c1:54:52:3e:72:c8:49:ff:8e:
49:be:c1:b7:b6:86:7a:49:fe:ed:58:d9:7c:b3:0b:
ab:05:e3:b8:e3:1b:c0:30:0d:a2:ea:6e:6c:f2:14:
d0:c4:83:08:f8:8e:28:af:6b:58:7b:a8:7f:97:15:
da:84:8d:31:d0:b1:3c:8a:a8:73:d4:7e:6f:d7:01:
aa:1c:0e:7b:66:57:72:d1:46:ed:0e:46:b0:93:67:
9a:49:b8:b2:b3:13:fa:34:31:82:e2:7c:75:d2:9d:
ea:a9:c7:6a:76:e1:38:01:73:c2:c5:de:46:0e:34:
15:83:c1:61:26:08:5d:c3:ba:55:77:db:d3:df:b5:
51:d3:98:32:49:b4:4d:51:5e:65:ae:ea:c7:7b:53:
5b:2e:fb:35:ce:1b:79:7d:66:94:0e:ef:d8:80:48:
34:44:80:5e:ed:33:5b:dc:08:ad:2f:a2:dd:51:41:
99:01:b6:27:f0:6e:0b:a6:8f:c7:65:3a:10:b9:21:
f9:1a:fc:79:d7:9d:1b:59:69:fb:35:65:b9:a4:dd:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:47:17:A0:A7:A7:29:57:5D:42:68:1C:A8:2C:10:34:33:23:CE
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:75:55:71:9b:1f:cf:1a:43:64:b6:50:af:a2:c2:8e:54:
1a:b9:70:79:6b:3e:1a:2a:1f:58:b8:c2:5a:97:ef:61:27:db:
72:0b:82:ed:60:56:e5:f1:b2:75:b8:8a:89:68:34:4f:d3:3e:
d2:9c:18:84:c0:cb:88:6f:79:e0:62:16:55:cc:07:28:58:71:
0a:d3:44:01:6d:10:7c:b1:04:d5:87:2a:66:52:e3:aa:89:4f:
62:8b:12:c8:be:5c:aa:84:8b:4f:5a:cc:27:c8:a0:60:3e:45:
e5:7b:2c:2a:06:03:15:17:8d:8b:28:84:99:a5:db:f2:f0:80:
6f:24:04:d7:92:c5:98:19:66:1b:d7:d5:95:41:38:84:17:c6:
26:48:7e:1f:07:97:19:f3:5d:47:72:39:69:27:c8:ad:ca:67:
d1:4a:5f:9a:31:7c:f8:25:1c:94:fa:66:1a:e9:db:31:1b:ba:
6d:df:7b:61:85:72:9f:15:02:5c:c6:cc:d2:9d:b4:72:7f:3d:
39:00:62:4b:1d:c4:06:35:72:cd:08:09:69:6e:44:69:35:41:
17:da:6a:d7:35:79:07:f5:da:a6:c9:8c:16:1c:6b:0c:c5:04:
44:ea:d3:e0:c5:26:75:6b:b2:d6:39:8c:25:26:59:71:51:b6:
b3:80:2a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrs7dBfDxiHdBJ6bCIBAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NGY5ZDJkYmVkOTc0NTM4NDA1YTc5ZjZlYzdlODZjNGFl
ZGQzZDEwHhcNMjUwNzI3MDcwMDI2WhcNMjUwNzI4MDcwMDI2WjAzMTEwLwYDVQQD
Eyg1NTk4NDcxN2EwYTdhNzI5NTc1ZDQyNjgxY2E4MmMxMDM0MzMyM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVp+IAkMT/m3fv5O+OlzCPxkhxz/
yHRdf+gpzsjkKr1JPGVeI4tIHjfmbF3XZK6NnLfBVFI+cshJ/45JvsG3toZ6Sf7t
WNl8swurBeO44xvAMA2i6m5s8hTQxIMI+I4or2tYe6h/lxXahI0x0LE8iqhz1H5v
1wGqHA57Zldy0UbtDkawk2eaSbiysxP6NDGC4nx10p3qqcdqduE4AXPCxd5GDjQV
g8FhJghdw7pVd9vT37VR05gySbRNUV5lrurHe1NbLvs1zht5fWaUDu/YgEg0RIBe
7TNb3AitL6LdUUGZAbYn8G4Lpo/HZToQuSH5Gvx5150bWWn7NWW5pN0SOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWYRxegp6cpV11CaByoLBA0MyPOMB8GA1UdIwQY
MBaAFEVPnS2+2XRThAWnn27H6GxK7dPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2Ut
ZmFhZTRiYWViZWZmLzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2UtZmFhZTRiYWViZWZm
LzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHux1VXGb
H88aQ2S2UK+iwo5UGrlweWs+GiofWLjCWpfvYSfbcguC7WBW5fGydbiKiWg0T9M+
0pwYhMDLiG954GIWVcwHKFhxCtNEAW0QfLEE1YcqZlLjqolPYosSyL5cqoSLT1rM
J8igYD5F5XssKgYDFReNiyiEmaXb8vCAbyQE15LFmBlmG9fVlUE4hBfGJkh+HweX
GfNdR3I5aSfIrcpn0UpfmjF8+CUclPpmGunbMRu6bd97YYVynxUCXMbM0p20cn89
OQBiSx3EBjVyzQgJaW5EaTVBF9pq1zV5B/XapsmMFhxrDMUEROrT4MUmdWuy1jmM
JSZZcVG2s4AqPA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:10 2025 by rpki-client