Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: rIpjkU5xJ/DVr5cSIiTB0TIZeigsUi/gaQg2AKMc4Pc=
Subject key identifier: 1F:D4:15:61:8F:37:65:70:2B:4A:E8:E3:D0:15:BD:B9:EB:A9:7B:68
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 0198D5BC08753F97E83BB7C98B936440D5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 1161
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: A8fXWSeNOGLpZBq5n912XqwunjQ.roa (hash: AcIcq2rjaaC1zEYSslp0dwr1gScXP+xKrcPZfoqgVE0=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: XzOClpj3Ui/NU7C0efIJ/K1K0uRA83oSOCRba6UrtYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:08:75:3f:97:e8:3b:b7:c9:8b:93:64:40:d5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=1fd415618f3765702b4ae8e3d015bdb9eba97b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:ca:9a:42:97:84:56:b4:bc:1c:fc:04:7c:
f9:f7:d5:a5:2d:60:db:90:4c:7b:d8:53:77:cd:90:
07:63:aa:16:2f:bb:d6:00:61:e9:7a:71:fe:13:d1:
2b:d7:20:08:e9:e3:ed:62:17:b8:e0:f2:d9:6f:14:
f4:1d:f5:1b:4d:41:fb:a1:4d:ce:44:32:2c:44:cf:
70:b9:3a:b8:28:72:d3:47:a3:ea:8a:97:dd:de:eb:
f3:29:9b:e1:80:78:cd:e9:fc:60:25:cd:1c:a7:cb:
bb:76:27:6f:ae:07:85:f7:c8:93:7d:07:11:0f:49:
ff:fb:d9:0f:16:17:4f:e1:5f:c1:ae:78:b2:a1:79:
70:9b:8d:7c:5a:e2:83:4f:b3:2f:a9:45:f2:b1:06:
4b:08:2f:84:e7:ae:84:47:4e:27:b7:e8:53:87:c4:
07:4b:55:15:c9:a1:0a:bd:f3:fd:e8:10:d8:77:43:
d5:7c:df:b4:9f:d7:0d:59:d4:ad:98:79:11:3f:4b:
9f:8e:24:28:63:57:cf:95:bd:10:64:f8:40:3b:7a:
a3:04:38:ad:ef:7f:1f:b7:05:38:76:2c:3f:d0:40:
02:69:d3:c1:86:fc:72:f7:3e:70:96:42:d8:f8:c0:
81:63:54:70:98:ab:48:50:67:48:64:52:10:51:7c:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:15:61:8F:37:65:70:2B:4A:E8:E3:D0:15:BD:B9:EB:A9:7B:68
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c1:37:7e:4b:21:57:23:51:64:7c:7d:8b:f5:bd:b2:02:5e:
7a:83:4f:aa:61:0f:93:ac:5d:b4:33:1c:18:e3:4f:1a:bf:d8:
fd:41:67:a4:fd:22:3a:38:34:04:2e:01:ea:2f:ee:85:e4:52:
3c:b3:ce:51:5b:9d:56:b9:bf:36:f0:77:97:24:2d:1d:82:00:
4a:2c:7c:b8:84:0a:7a:4f:22:4f:6d:34:ed:78:09:35:21:ad:
59:30:b3:9a:2f:24:2b:e3:d6:cd:f4:2a:6c:64:b0:39:f9:1c:
37:30:1e:29:e6:c1:eb:97:d9:05:94:dd:87:72:86:b1:5d:81:
f3:ee:96:5e:86:68:47:0d:2a:8c:5a:73:d3:20:f2:39:c2:2e:
92:88:74:f2:1c:32:f4:cf:37:d4:5b:a8:17:0d:ca:59:04:b0:
c4:2a:d4:fb:0d:c5:5b:c9:36:ed:18:61:26:dd:0b:aa:72:f1:
55:2e:f6:25:33:09:1e:28:03:bf:c0:89:46:e7:cb:b3:ec:de:
7f:a2:63:73:99:fb:70:f6:a2:03:72:3b:9f:80:47:8b:70:52:
5b:df:f5:60:3a:1c:3d:31:fd:ce:b7:8e:a2:51:51:1d:09:8b:
15:ed:7f:1b:c3:60:56:41:17:e2:55:3d:e1:64:2f:ed:99:ff:
d1:4b:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:46 2025 by rpki-client