Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
File: r_RU7PyWgoYqe12-TzubDvxMV9w.mft (raw, json)
Hash identifier: ORnwcd/ChWah0LsVgAKRufo1zTmh6iiwvUKbdFdLHJM=
Subject key identifier: 15:3C:93:E4:17:92:B4:E7:BC:B5:76:F9:83:51:A6:8F:15:12:31:10
Authority key identifier: AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
Certificate issuer: /CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Certificate serial: 01957834716137E4D7B036B967293BB510D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
Manifest number: 0458
Signing time: Sun 09 Mar 2025 00:00:57 +0000
Manifest this update: Sun 09 Mar 2025 00:00:57 +0000
Manifest next update: Mon 10 Mar 2025 00:00:57 +0000
Files and hashes: 1: aziKSjcmtjl7ZRQR41_A0vxpLio.roa (hash: wLgqqaoEM11h+IUGz/tIVa/YuL2NopeoenmAEMfpDUc=)
2: r_RU7PyWgoYqe12-TzubDvxMV9w.crl (hash: Z4qcC75qzuLHbhBt925H/0TetcAgfgeRETBFrQaCsQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:34:71:61:37:e4:d7:b0:36:b9:67:29:3b:b5:10:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Validity
Not Before: Mar 9 00:00:57 2025 GMT
Not After : Mar 10 00:00:57 2025 GMT
Subject: CN=153c93e41792b4e7bcb576f98351a68f15123110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:dd:44:0a:a3:20:8c:93:82:a2:89:7d:ed:
c7:51:b1:82:4a:74:20:89:a8:dc:0d:b5:d3:c5:d5:
f7:31:36:52:43:e1:2c:d4:10:b9:04:7e:b0:12:c0:
31:9f:4b:c7:34:13:50:57:30:9d:f6:00:30:e6:30:
bd:41:18:0e:68:14:89:0f:03:61:51:2a:5d:34:c4:
32:11:99:77:7a:7e:8c:a5:e3:48:50:06:da:e1:7c:
23:59:58:3a:db:00:94:60:eb:c0:17:bf:41:ef:39:
78:be:c8:d4:9b:bb:94:90:ed:59:dc:28:f2:6c:aa:
fb:6f:50:78:46:a5:5f:e7:b8:f0:45:58:19:ec:4d:
a3:83:6b:e9:60:4d:31:76:0a:ee:3c:68:31:40:c6:
bd:f8:27:28:a2:42:cb:58:ab:c0:8b:82:cf:60:62:
51:e9:b6:3c:3a:8f:2e:51:7e:ec:3e:d5:9c:6e:4f:
e8:d7:ae:d2:97:3c:6d:54:34:66:b9:20:62:cc:cb:
32:a7:74:ab:be:74:b8:26:25:b2:77:ed:08:9e:a8:
55:35:cf:f6:49:f8:04:59:10:69:a9:2e:70:67:6f:
9b:e1:ee:41:cf:6c:5b:84:b2:72:a5:42:9c:c3:19:
23:49:27:12:78:b5:cb:fa:35:00:1f:1e:39:8e:d3:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3C:93:E4:17:92:B4:E7:BC:B5:76:F9:83:51:A6:8F:15:12:31:10
X509v3 Authority Key Identifier:
keyid:AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:d2:b7:10:b9:cb:83:cc:15:2d:c4:34:1d:c3:13:8d:09:
6d:4c:d4:e6:62:01:29:18:8f:41:93:a4:5e:ce:d2:cc:17:36:
b8:ac:93:19:83:16:1c:f6:a0:e9:d0:7f:b0:1c:f3:10:ba:3e:
4f:64:b9:87:1a:2e:99:62:d2:c8:96:8b:fa:1b:31:40:8d:d6:
5f:b8:29:5f:c6:97:79:5e:34:7f:22:69:7b:fd:c7:62:24:09:
7c:b7:8d:39:11:ca:b6:24:c4:fb:04:7d:d5:d0:2a:7f:d3:33:
48:35:26:f1:5d:bf:5c:c1:23:61:f8:be:c1:30:c4:aa:d2:c0:
60:a8:36:e5:c0:77:71:02:e6:02:0d:0d:65:51:96:a9:db:e2:
d5:b8:e5:6e:7b:b3:5e:05:c7:83:68:04:ee:b8:be:77:10:6d:
67:3d:cc:e6:e0:d1:69:7c:9e:6b:7a:07:de:d2:15:cd:47:ff:
c8:2c:e3:db:35:4a:00:85:42:da:5f:5a:e3:fb:a4:9a:97:12:
91:78:6a:ff:f6:2a:fe:5e:c2:26:de:bd:8a:1b:5a:8e:fb:b7:
16:ea:3b:25:24:cc:8e:67:31:d1:94:b8:6a:40:79:52:50:49:
05:e3:5a:01:20:32:2c:df:c4:90:6e:f4:52:a0:02:3a:7a:53:
0c:09:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:44 2025 by rpki-client