Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
File: r_RU7PyWgoYqe12-TzubDvxMV9w.mft (raw, json)
Hash identifier: qYfVSgfAmH0zsxfeAT/tWjkfk0LGDczaCaZvQ8VBqe8=
Subject key identifier: 1E:D5:68:3C:25:2D:3D:E1:54:E4:56:FD:2C:AE:6E:4F:15:F7:2F:A2
Authority key identifier: AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
Certificate issuer: /CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Certificate serial: 0197499F148CC07446F807B84740966C51F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
Manifest number: 0549
Signing time: Sat 07 Jun 2025 09:00:51 +0000
Manifest this update: Sat 07 Jun 2025 09:00:51 +0000
Manifest next update: Sun 08 Jun 2025 09:00:51 +0000
Files and hashes: 1: aziKSjcmtjl7ZRQR41_A0vxpLio.roa (hash: wLgqqaoEM11h+IUGz/tIVa/YuL2NopeoenmAEMfpDUc=)
2: r_RU7PyWgoYqe12-TzubDvxMV9w.crl (hash: E7catRY2ouwND/Zi7n/kO5Y33Yvwqg3zFOpSUcHwkDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:14:8c:c0:74:46:f8:07:b8:47:40:96:6c:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Validity
Not Before: Jun 7 09:00:51 2025 GMT
Not After : Jun 8 09:00:51 2025 GMT
Subject: CN=1ed5683c252d3de154e456fd2cae6e4f15f72fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:0e:96:90:a5:09:57:0c:ea:59:94:99:cd:
1a:42:d6:67:be:77:7e:70:b0:fe:de:61:ff:dd:3d:
2f:d0:76:04:70:84:67:13:95:e8:ea:9b:5b:a6:25:
ed:da:79:f8:63:05:53:3b:11:a5:8a:c2:e6:3b:6a:
98:57:e6:42:cc:dc:25:f4:8e:4e:2b:fe:6d:63:b7:
95:18:de:39:c0:ef:89:54:42:02:ce:52:5c:72:0a:
b2:d4:ec:ff:be:4f:df:4d:ff:ac:de:77:ad:7f:c7:
19:7c:47:3f:49:b2:67:ad:00:e7:d8:59:fe:c7:53:
33:d5:0d:1d:4e:81:96:48:bb:17:bb:af:f6:7e:56:
83:12:ea:72:ae:78:d0:e0:9e:b2:60:b4:6e:e4:62:
dc:e5:a2:c7:68:6f:e2:04:5a:ab:3e:1e:e7:66:53:
37:aa:d0:49:ff:e9:4a:08:06:70:ee:35:3b:dc:cf:
d0:3b:d9:bd:fd:4f:32:26:3a:2a:da:a0:da:4c:fb:
c3:d3:cb:92:a1:0a:60:c7:c2:04:f2:3b:e3:a9:47:
f9:d5:6c:d3:41:a1:da:57:e6:2f:64:f7:44:1e:68:
58:e6:1c:32:f1:8b:74:34:d5:f2:63:7a:98:5b:61:
88:fa:a4:fd:d7:0b:e3:30:89:e1:ea:40:0e:6f:25:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D5:68:3C:25:2D:3D:E1:54:E4:56:FD:2C:AE:6E:4F:15:F7:2F:A2
X509v3 Authority Key Identifier:
keyid:AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4f:4b:69:72:01:92:50:dd:94:b1:3f:d6:61:a3:d2:6c:fe:
3d:a4:ed:6c:77:cd:5f:e0:bd:23:8b:0f:ec:d3:e5:f2:be:e7:
0f:84:6f:f0:fc:d8:6e:8c:a7:af:fe:ae:8f:39:ab:df:d0:49:
98:50:03:de:22:b1:34:7d:14:a4:48:09:fb:ad:65:38:e4:60:
87:47:bf:70:00:4b:30:b4:27:41:8a:ca:76:35:8f:84:7b:0a:
02:a2:8c:50:01:e9:47:d9:19:0a:d1:42:15:2c:bb:da:6b:63:
11:68:dc:ca:ff:83:63:05:ba:e2:3c:58:ae:9f:24:cf:95:82:
1d:ae:38:b2:9c:06:dd:ea:7d:b3:49:c6:8e:a7:eb:de:b8:63:
65:73:a1:21:03:f2:19:01:d4:c1:db:f8:58:82:43:0c:93:56:
b7:f7:d1:59:51:42:9c:2b:dc:a7:b2:b5:e1:0f:6a:83:6f:5e:
91:1d:7a:a8:19:ea:88:d0:62:41:4b:7c:68:b7:99:63:82:da:
d5:0b:4e:23:23:e4:40:53:e1:0e:e9:da:35:70:07:be:33:ad:
d4:82:bc:4c:db:42:17:d1:4d:4b:eb:15:39:96:73:92:b6:72:
a5:5f:8e:de:c1:f6:e6:9d:42:3a:6e:59:c7:dd:9c:fa:0e:6a:
2b:46:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:18 2025 by rpki-client