Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: Nj3vyV2zSDgYoWEBD770vRvshVXK8Z/wOUimOZuv+Ug=
Subject key identifier: CB:61:48:65:51:E5:F9:64:A6:9D:F6:F4:97:5F:15:BB:A7:8A:FA:9C
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 019A7226568F891186D953B06CA628FA4601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 05F7
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: wDMTw+7E1uqrYNSfYtmyEAbgwGRpZtSgf0Blmwa0oBI=)
2: yOFjl_Pxx0Rc441XIFCRbQAh0C8.roa (hash: xKAfXgoPQJ/4slkyXjKOtsYsgtyUmgpiHM6n61mT42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:56:8f:89:11:86:d9:53:b0:6c:a6:28:fa:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=cb61486551e5f964a69df6f4975f15bba78afa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:62:42:0c:8e:2a:0a:01:2c:cb:7f:26:2f:
20:f6:bc:d0:59:66:82:da:1d:29:90:a4:27:0c:1b:
a7:00:42:f3:98:dc:f3:ed:d6:41:d5:75:40:b2:cd:
df:c0:d7:33:e2:9f:1f:71:f4:fb:3b:77:f5:d6:05:
e0:33:9a:0b:3e:32:81:7f:3c:a9:b8:01:62:e2:51:
2b:71:e6:b5:cc:d6:c2:e4:53:02:dd:15:b9:b9:25:
7c:8e:96:0e:21:54:db:1d:c9:d4:08:38:fe:ca:24:
73:a7:11:05:e7:81:12:8d:43:f3:9d:84:eb:4b:ec:
20:e4:7f:1b:a2:6f:d9:cf:57:35:43:aa:80:58:28:
8e:e5:50:89:3e:cf:28:8f:d7:6b:2a:4a:0b:44:a5:
6a:28:bc:31:5c:19:e5:d9:22:ff:e6:02:2c:ef:c1:
89:c4:36:1b:52:4a:c6:69:45:90:d7:15:47:39:a0:
cb:45:5d:6a:f3:e5:ed:a8:7d:ee:56:55:dc:ed:bb:
dc:97:8f:82:49:18:d5:dc:e0:13:04:1e:77:bb:9b:
4b:54:5f:bd:b1:ca:0c:ad:f4:66:d7:03:f6:b3:e5:
ca:03:f4:ea:0d:98:ad:89:1a:79:53:2d:00:7f:7e:
9e:cb:80:1d:0e:36:06:85:a2:37:65:ef:95:63:5f:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:48:65:51:E5:F9:64:A6:9D:F6:F4:97:5F:15:BB:A7:8A:FA:9C
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:25:d1:5a:66:37:a6:58:c4:80:60:9d:2e:81:cf:7d:a1:0a:
68:3c:71:47:a6:d7:a6:fa:86:96:f8:44:34:81:ac:96:8d:73:
b2:2d:78:24:b7:23:3b:03:50:2a:09:62:86:cd:04:a8:cd:10:
17:3b:4d:c5:aa:88:c6:2a:91:36:36:52:82:99:59:92:c9:8d:
a0:fb:7a:26:7a:3f:96:92:f2:4e:80:11:02:ed:3f:9e:73:ce:
1d:a1:c2:57:a8:74:60:7b:4b:3a:ce:58:ba:16:0b:06:97:ea:
72:ce:4f:2f:cc:9f:e5:65:e3:ad:d1:17:b8:1c:16:a8:b9:56:
93:ec:d6:32:d9:02:04:1a:1d:0f:38:3b:84:71:57:bc:25:f1:
20:97:cc:35:76:0f:5a:98:7f:16:c7:d6:45:cb:b7:d2:2e:e1:
ca:dd:fa:83:8c:e7:9d:59:88:5e:92:e1:49:39:8a:72:e9:b4:
f2:62:ca:2a:8f:9e:6f:52:11:ea:82:4f:73:5f:f2:fa:60:bb:
1e:3d:e6:68:8d:11:16:52:0d:76:a4:fe:0e:a6:51:0d:5b:04:
74:46:73:d6:7e:1b:ab:e9:59:1b:a2:7d:d8:aa:d7:d9:29:c1:
fc:38:7c:6d:91:d3:af:e4:90:e0:c8:ff:39:cb:cb:65:8a:d7:
b8:22:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:54 2025 by rpki-client