Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
File: r_RU7PyWgoYqe12-TzubDvxMV9w.mft (raw, json)
Hash identifier: xIrwus1uKNwfKBzBzRKqaglgcMx5Iw7yd1wO45+BNE4=
Subject key identifier: BF:45:0A:A8:05:A1:F0:01:A9:A5:18:09:CE:70:61:52:C3:EC:60:EF
Authority key identifier: AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
Certificate issuer: /CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Certificate serial: 0196A19B70633D2F45A898DA4B6A3C23FFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
Manifest number: 04F2
Signing time: Mon 05 May 2025 18:00:40 +0000
Manifest this update: Mon 05 May 2025 18:00:40 +0000
Manifest next update: Tue 06 May 2025 18:00:40 +0000
Files and hashes: 1: aziKSjcmtjl7ZRQR41_A0vxpLio.roa (hash: wLgqqaoEM11h+IUGz/tIVa/YuL2NopeoenmAEMfpDUc=)
2: r_RU7PyWgoYqe12-TzubDvxMV9w.crl (hash: iPRB/rs3EzqyvGYaVL+39VQ4pnK8c4vQ0UvTTr9MN3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:70:63:3d:2f:45:a8:98:da:4b:6a:3c:23:ff:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Validity
Not Before: May 5 18:00:40 2025 GMT
Not After : May 6 18:00:40 2025 GMT
Subject: CN=bf450aa805a1f001a9a51809ce706152c3ec60ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:17:9e:9c:fe:15:54:7d:dc:01:9b:91:af:
1f:bc:90:46:6a:e8:12:2d:f6:e5:5d:8b:65:d0:56:
ea:01:80:a8:ac:90:78:b2:71:d0:5f:11:1e:40:86:
75:7e:45:3b:42:84:09:11:d0:46:b9:bf:ee:c6:f5:
ad:ee:bb:9a:14:a3:2b:00:5c:c1:dc:ed:13:39:4a:
be:cb:d5:2e:a9:60:38:c3:37:2b:71:d9:7c:b8:e3:
f9:a4:6c:a1:c7:65:d3:b6:6c:ef:06:e5:7b:03:ed:
08:cc:ac:66:fd:48:92:14:69:07:78:0f:41:89:b1:
0a:6f:4e:e0:54:09:0a:da:99:35:56:db:36:41:b1:
bc:4b:58:ae:2b:87:4d:e6:fc:dd:e6:16:df:aa:bc:
a8:99:8d:b5:ae:b5:a4:28:fe:53:8d:6e:02:3c:2b:
ca:de:71:f4:39:7e:29:e8:26:f9:8d:5e:bb:55:95:
28:ae:00:82:39:ad:26:2a:91:c6:5d:0e:b7:c9:06:
47:1e:ae:5c:a6:84:7c:99:a9:e7:ec:27:8b:ad:a0:
c4:de:bb:9f:c5:9f:f3:99:7b:41:64:10:7c:26:e2:
ed:16:8e:cd:9f:9f:3d:01:c2:c3:7d:b5:49:04:6c:
33:fe:65:a4:be:e7:20:f7:c6:e2:86:4e:55:11:46:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:45:0A:A8:05:A1:F0:01:A9:A5:18:09:CE:70:61:52:C3:EC:60:EF
X509v3 Authority Key Identifier:
keyid:AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3b:e7:87:cb:e2:ee:63:46:54:f7:f5:1f:5f:64:0e:40:31:
03:79:a7:9e:e4:71:af:46:ee:6a:4a:77:6c:6a:4a:3e:ea:d0:
66:c8:ce:5a:8b:5c:ff:76:12:72:62:bf:41:4e:75:56:9a:44:
c5:ab:63:87:c2:87:e6:f2:6d:a3:d7:a6:47:3e:2f:5c:50:e5:
2f:ca:9c:d9:57:fb:4d:19:ac:fd:0e:f0:9f:7c:da:46:20:b6:
37:5a:f9:c5:0e:a5:38:9e:fc:65:c2:02:38:ef:76:9a:4d:51:
7a:16:1c:3e:e9:d8:b0:ef:a9:36:c6:74:fd:10:ea:8e:31:9a:
ae:7e:e7:32:01:de:36:b1:f8:a1:d9:94:8e:f3:ff:80:93:81:
f7:4c:eb:9c:1d:b8:16:21:79:c9:f1:c7:72:a6:71:b4:a7:97:
7a:16:b8:60:86:94:08:55:45:48:b4:08:1f:72:18:3a:f8:63:
0f:e9:dc:36:56:13:16:93:dc:61:60:bc:f4:a7:49:49:dc:56:
c2:9a:e5:30:47:f6:b1:23:ae:cb:47:4f:c5:70:42:cd:ea:3a:
d3:ca:dc:ae:22:d4:0e:c5:2f:28:81:b6:ed:7f:2e:d7:2d:82:
74:38:6b:01:35:bd:c2:a4:19:e0:96:3e:e4:4d:ea:58:9e:9e:
05:df:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:59:13 2025 by rpki-client