Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: XfNd0De5h1+d2pLr/ocwrTZK08bvLdO+z6UuD6T4rfs=
Subject key identifier: 8B:3B:E0:A0:A2:23:C6:3E:D2:C3:8C:75:D4:32:A8:94:0E:41:E6:59
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 01974EC5725EDCCAF3B2D6A58E40691A3511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 0457
Signing time: Sun 08 Jun 2025 09:00:51 +0000
Manifest this update: Sun 08 Jun 2025 09:00:51 +0000
Manifest next update: Mon 09 Jun 2025 09:00:51 +0000
Files and hashes: 1: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: EM7mbFRi9vzfHke6N75h7L6kR45MgPtcRNOClhPmQWw=)
2: yOFjl_Pxx0Rc441XIFCRbQAh0C8.roa (hash: xKAfXgoPQJ/4slkyXjKOtsYsgtyUmgpiHM6n61mT42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:72:5e:dc:ca:f3:b2:d6:a5:8e:40:69:1a:35:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Jun 8 09:00:51 2025 GMT
Not After : Jun 9 09:00:51 2025 GMT
Subject: CN=8b3be0a0a223c63ed2c38c75d432a8940e41e659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:32:4b:61:fd:52:d4:26:ea:93:eb:24:1a:bf:
85:57:5a:e7:b9:9b:10:70:05:1e:14:fd:5e:40:9a:
00:a4:e8:da:96:d4:17:80:41:0c:a8:9b:7a:cb:38:
d6:c5:f4:68:08:c4:0d:2b:c6:e4:95:d9:da:0a:c1:
db:d8:a1:db:44:3b:b9:38:e6:12:a6:f3:b7:2c:31:
a0:95:e7:bf:38:27:d2:ef:f7:22:66:82:60:ad:56:
b5:c5:e1:67:a4:5c:36:13:6f:e3:b5:86:ec:ec:71:
41:41:47:57:33:e9:f8:39:f8:c3:de:91:9b:17:50:
27:5b:70:df:a2:e1:6f:6d:ad:10:7b:6a:9c:31:c3:
7b:b1:ad:1a:9d:9f:17:fb:9f:46:89:55:83:c7:0b:
c9:c2:6a:80:22:31:65:27:b1:bc:34:4c:86:02:53:
d0:a6:cd:5b:f7:c2:98:89:f2:1c:fb:a3:26:4b:6f:
c3:f2:d8:34:37:53:c1:94:71:fc:42:da:26:4d:2e:
06:4f:73:fb:36:be:6c:ae:bc:42:82:b3:32:47:da:
b7:c2:b6:30:d5:9e:b3:35:20:76:32:c5:00:be:60:
ef:1f:c5:48:fc:70:7b:fa:c2:db:e3:73:13:08:b1:
17:7c:22:af:3b:d4:62:91:73:a1:d0:81:0d:72:18:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3B:E0:A0:A2:23:C6:3E:D2:C3:8C:75:D4:32:A8:94:0E:41:E6:59
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:91:14:f9:1f:bc:fe:8f:98:9c:89:2f:f9:a2:63:e6:57:54:
8f:33:2f:4f:e2:da:5c:aa:39:e2:29:3e:c2:e6:8c:92:67:5e:
84:94:2c:6f:1a:fc:d3:8a:0a:74:4f:e5:55:43:ad:28:80:5d:
f7:24:df:36:ab:28:d9:98:00:91:68:25:bc:3c:6c:99:5c:c4:
ce:0f:9d:60:f8:4a:a3:ef:91:38:bf:a0:4f:29:c2:da:c5:a0:
5c:9f:01:64:0b:e8:af:2e:1b:e2:c4:76:73:3c:96:6e:ea:64:
30:0d:02:85:5c:65:31:35:24:ea:9d:e8:04:4c:43:74:51:59:
8c:76:02:b0:d0:0b:56:45:e6:e5:f6:9a:8d:99:29:2a:50:6e:
f4:6a:2a:80:fb:2c:cf:d2:a6:c8:36:ef:74:ca:d9:fd:91:46:
e3:09:02:f7:42:92:e3:a6:6b:be:53:56:5d:29:de:6d:c8:32:
80:86:ac:1e:15:b7:73:cd:0e:34:d5:9c:3c:db:d0:03:c0:f4:
d6:dc:e3:54:68:1f:a6:38:5d:7c:5a:d6:23:60:67:08:aa:e5:
cc:8d:35:57:89:30:97:3c:80:32:7b:35:41:74:5d:71:ed:98:
d4:41:9c:18:07:ce:48:d6:e0:80:cf:0c:ce:3d:52:e3:1e:8d:
72:84:22:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:54:36 2025 by rpki-client