Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: 9UVLu9dFQpGYd1qcvRcPeXuSOLxVLpfdSE/31hPXPNs=
Subject key identifier: 91:2C:DF:D1:0E:F1:4B:2A:DA:74:87:57:54:31:ED:7A:5F:E3:0A:43
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 019646324D9B0DBD45D47849C2312176CA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 03CE
Signing time: Fri 18 Apr 2025 00:00:23 +0000
Manifest this update: Fri 18 Apr 2025 00:00:23 +0000
Manifest next update: Sat 19 Apr 2025 00:00:23 +0000
Files and hashes: 1: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: 0w66XjBWdfeW7sNi+B21zeJ0IzN9oRYPBZujeKaDBL4=)
2: yOFjl_Pxx0Rc441XIFCRbQAh0C8.roa (hash: xKAfXgoPQJ/4slkyXjKOtsYsgtyUmgpiHM6n61mT42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:4d:9b:0d:bd:45:d4:78:49:c2:31:21:76:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Apr 18 00:00:23 2025 GMT
Not After : Apr 19 00:00:23 2025 GMT
Subject: CN=912cdfd10ef14b2ada7487575431ed7a5fe30a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:ca:7c:c7:bd:b2:de:54:7c:2d:c3:5b:cb:
02:d8:80:f8:78:91:da:eb:ad:ab:11:ec:64:df:bb:
1e:22:b7:cc:46:20:9d:aa:93:46:a4:5e:4e:e0:a8:
11:ca:af:75:69:f1:99:59:c7:80:db:99:1e:a6:0f:
46:a6:79:20:86:51:42:c4:0b:e9:db:a6:8d:d4:03:
ec:af:c8:4b:8a:a1:81:3d:86:45:47:d5:0f:97:91:
c7:c4:eb:b6:e7:03:ac:0b:68:31:78:4d:9d:fd:7b:
71:4d:d0:03:e3:81:df:e8:f8:f6:cb:14:ee:21:9a:
1f:27:71:30:8c:35:74:a1:de:76:39:24:c6:89:dd:
60:39:cc:4a:16:70:ae:0c:eb:cb:e1:a9:47:b1:07:
9d:a3:31:d2:a0:3a:b0:91:6b:a1:74:93:d1:f7:96:
67:30:2c:19:56:91:ee:e6:cb:ce:bd:e7:61:ad:b7:
c6:08:a5:27:66:4b:23:a7:e4:5c:fc:2b:82:5f:57:
ff:36:e2:62:1b:ba:e2:2b:55:12:69:b4:16:33:97:
c6:12:00:1b:48:06:1d:67:d1:8a:3f:1d:60:26:38:
94:c5:fe:6e:85:13:5d:dc:d7:3f:10:b9:bb:17:3c:
96:dc:e1:da:cb:c5:8d:2a:52:0a:83:9c:df:de:26:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:DF:D1:0E:F1:4B:2A:DA:74:87:57:54:31:ED:7A:5F:E3:0A:43
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4b:9b:28:dd:b4:3d:f0:d0:e7:7b:7d:98:ed:11:b2:e5:44:
70:8e:67:cc:13:a2:d0:47:d8:f0:7e:62:ab:0e:76:e4:91:cb:
86:ba:c4:56:d1:ed:30:2d:d6:36:67:9a:b9:6d:de:5a:a1:7b:
e0:1c:bf:0d:43:f5:72:75:66:0c:b4:cf:6a:6a:88:52:24:36:
76:a2:09:82:d4:6a:4a:0d:63:d7:87:81:8b:4a:99:44:cd:24:
1f:0b:87:8d:2e:67:39:67:1a:3b:ea:34:64:6c:9c:9c:04:f3:
c2:2f:1c:4b:b6:b2:00:fc:a1:55:2a:c1:c0:6d:fb:96:2a:38:
6a:8c:52:de:b7:08:99:7f:76:c5:ca:7a:6a:7d:af:6c:6a:47:
31:d4:a4:c2:b5:68:76:28:41:d1:c4:ea:db:7a:d0:4c:a3:4a:
3f:d3:9e:09:cd:53:df:f9:bc:63:f0:c8:c7:c4:ed:2c:e9:58:
a6:7a:d9:0e:15:d4:5e:1b:8b:1a:d6:d3:49:2b:b3:7b:cd:e3:
3b:18:dc:bc:1c:bb:f6:e0:2c:e6:ba:00:66:f3:44:01:dc:b9:
f4:57:34:a2:36:2c:e2:37:f6:94:51:7f:87:26:86:12:cf:2c:
7c:c4:5f:54:79:24:c9:c5:d7:d4:6a:22:9e:10:2e:3d:ea:82:
2d:a7:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:13:55 2025 by rpki-client