Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
File: r_RU7PyWgoYqe12-TzubDvxMV9w.mft (raw, json)
Hash identifier: QL4qCcKRvYp2uY8uKWofFVIO6m41rGz2qufrqOCHfbg=
Subject key identifier: 51:8B:CA:77:D8:34:F9:4E:79:4E:A4:6E:4C:3E:85:BD:55:0C:39:FF
Authority key identifier: AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
Certificate issuer: /CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Certificate serial: 0197B7B374BDBAF994E37D7980068C19607D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
Manifest number: 0582
Signing time: Sat 28 Jun 2025 18:01:20 +0000
Manifest this update: Sat 28 Jun 2025 18:01:20 +0000
Manifest next update: Sun 29 Jun 2025 18:01:20 +0000
Files and hashes: 1: aziKSjcmtjl7ZRQR41_A0vxpLio.roa (hash: wLgqqaoEM11h+IUGz/tIVa/YuL2NopeoenmAEMfpDUc=)
2: r_RU7PyWgoYqe12-TzubDvxMV9w.crl (hash: C73S/En5zKBNQnDLDO8AtaKT2ukKPWzGoO7VsEQ5uIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:74:bd:ba:f9:94:e3:7d:79:80:06:8c:19:60:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Validity
Not Before: Jun 28 18:01:20 2025 GMT
Not After : Jun 29 18:01:20 2025 GMT
Subject: CN=518bca77d834f94e794ea46e4c3e85bd550c39ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:8e:0d:51:aa:0d:0e:67:0e:a0:0a:51:33:
5e:a1:b6:2a:01:98:59:4e:2c:d3:88:2f:26:81:75:
db:2a:b8:95:84:ec:94:34:65:08:f6:f6:f3:a2:57:
63:4e:09:87:94:48:69:63:73:16:10:33:ee:ee:37:
97:7c:b3:f2:94:40:7b:bc:ef:99:80:4c:df:f0:c8:
82:d5:bc:14:09:08:40:6c:aa:b2:60:cb:db:7f:67:
e6:e8:21:59:33:f7:1a:ac:70:4e:50:98:3d:9e:4d:
25:33:cd:a5:b6:9d:d9:37:0d:ea:fe:bb:b4:a9:e2:
8a:10:b0:84:47:ff:70:de:b6:42:bf:5f:aa:ba:85:
b9:98:20:48:18:a9:c2:46:98:17:ba:fb:57:0f:5d:
4d:3d:7e:af:a6:2c:24:c1:72:60:c0:21:26:2e:b4:
aa:e2:91:6c:7a:d0:61:e8:1a:78:80:2e:a8:47:27:
c9:ab:7e:a3:6f:ab:28:1b:7f:21:51:de:50:04:20:
5f:bb:13:db:f9:72:88:6b:47:b7:29:8e:6e:0b:ef:
ac:f9:ea:10:dd:53:bb:fb:d1:df:4a:2b:03:bf:15:
d5:15:1f:b2:84:be:02:b1:68:bb:24:f9:9b:62:40:
43:1c:2d:71:89:80:7e:c0:a4:37:93:a2:5a:a2:75:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:CA:77:D8:34:F9:4E:79:4E:A4:6E:4C:3E:85:BD:55:0C:39:FF
X509v3 Authority Key Identifier:
keyid:AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5b:16:f2:66:8c:38:c6:cb:3a:3c:65:47:d8:a6:7c:5b:e7:
d9:a0:95:6f:5a:0b:75:eb:2a:36:29:f0:a1:cc:22:b1:41:78:
de:45:85:a3:ef:aa:dc:0f:33:ed:71:c0:fd:1b:66:02:0d:66:
c6:56:ac:6f:7a:e9:7f:e3:26:a8:d0:30:71:23:8f:28:43:4c:
cc:a5:99:c0:3a:a2:fa:ba:48:cb:2e:61:87:62:40:15:d2:a6:
94:c4:2c:f2:17:9b:b2:20:86:40:5b:bc:03:8a:50:6e:d9:62:
cb:b2:d5:e8:cf:9e:1c:09:39:96:0f:60:f1:4a:a4:9f:96:3f:
43:4e:0c:08:8f:cc:c2:f4:ec:69:fe:e7:5b:c0:78:ed:bb:ed:
c8:db:95:33:11:9d:72:68:dd:24:7d:51:69:65:2f:81:ae:65:
04:ce:5f:b9:ea:70:c4:a0:08:69:c4:2d:24:f1:8b:74:72:5c:
41:16:f4:f3:a8:31:b8:41:7c:8e:04:db:3d:e3:0d:8e:87:34:
8c:2f:21:be:47:e5:1d:85:28:db:e9:33:37:c4:86:74:0b:50:
a1:2b:19:ff:90:72:5c:b6:ad:5a:5f:f8:5c:7b:8a:10:10:34:
53:58:b2:7e:d0:10:9f:5c:2b:03:02:c9:ee:c3:e8:52:cd:ee:
6a:0d:62:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3S9uvmU4315gAaMGWB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjQ1NGVjZmM5NjgyODYyYTdiNWRiZTRmM2I5YjBlZmM0
YzU3ZGMwHhcNMjUwNjI4MTgwMTIwWhcNMjUwNjI5MTgwMTIwWjAzMTEwLwYDVQQD
Eyg1MThiY2E3N2Q4MzRmOTRlNzk0ZWE0NmU0YzNlODViZDU1MGMzOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZqODVGqDQ5nDqAKUTNeobYqAZhZ
TizTiC8mgXXbKriVhOyUNGUI9vbzoldjTgmHlEhpY3MWEDPu7jeXfLPylEB7vO+Z
gEzf8MiC1bwUCQhAbKqyYMvbf2fm6CFZM/carHBOUJg9nk0lM82ltp3ZNw3q/ru0
qeKKELCER/9w3rZCv1+quoW5mCBIGKnCRpgXuvtXD11NPX6vpiwkwXJgwCEmLrSq
4pFsetBh6Bp4gC6oRyfJq36jb6soG38hUd5QBCBfuxPb+XKIa0e3KY5uC++s+eoQ
3VO7+9HfSisDvxXVFR+yhL4CsWi7JPmbYkBDHC1xiYB+wKQ3k6JaonXwXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGLynfYNPlOeU6kbkw+hb1VDDn/MB8GA1UdIwQY
MBaAFK/0VOz8loKGKntdvk87mw78TFfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9SVTdQeVdnb1lxZTEyLVR6dWJEdnhNVjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xM2E0MzItOWRiNi00MzFmLWEyNGMt
MWYzMjM2MzdjYzQ4LzEvcl9SVTdQeVdnb1lxZTEyLVR6dWJEdnhNVjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xM2E0MzItOWRiNi00MzFmLWEyNGMtMWYzMjM2MzdjYzQ4
LzEvcl9SVTdQeVdnb1lxZTEyLVR6dWJEdnhNVjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1sW8maM
OMbLOjxlR9imfFvn2aCVb1oLdesqNinwocwisUF43kWFo++q3A8z7XHA/RtmAg1m
xlasb3rpf+MmqNAwcSOPKENMzKWZwDqi+rpIyy5hh2JAFdKmlMQs8hebsiCGQFu8
A4pQbtliy7LV6M+eHAk5lg9g8Uqkn5Y/Q04MCI/MwvTsaf7nW8B47bvtyNuVMxGd
cmjdJH1RaWUvga5lBM5fuepwxKAIacQtJPGLdHJcQRb086gxuEF8jgTbPeMNjoc0
jC8hvkflHYUo2+kzN8SGdAtQoSsZ/5ByXLatWl/4XHuKEBA0U1iyftAQn1wrAwLJ
7sPoUs3uag1i8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:46 2025 by rpki-client