Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: 30aU1mZPYzg9JEpvqSlh9gvjMTablSg5bZq8PXLnXd4=
Subject key identifier: 95:93:6B:1F:88:70:B5:46:A1:46:51:2C:67:21:49:2F:27:0F:78:FC
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 0199221EB5A430BE964D4C46558D19202F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 0549
Signing time: Sun 07 Sep 2025 03:01:01 +0000
Manifest this update: Sun 07 Sep 2025 03:01:01 +0000
Manifest next update: Mon 08 Sep 2025 03:01:01 +0000
Files and hashes: 1: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: fV40BhbVjnOoQMixhq4QFBfUTUBV/0v+Yobe47z6S+0=)
2: yOFjl_Pxx0Rc441XIFCRbQAh0C8.roa (hash: xKAfXgoPQJ/4slkyXjKOtsYsgtyUmgpiHM6n61mT42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b5:a4:30:be:96:4d:4c:46:55:8d:19:20:2f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Sep 7 03:01:01 2025 GMT
Not After : Sep 8 03:01:01 2025 GMT
Subject: CN=95936b1f8870b546a146512c6721492f270f78fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:5f:ca:fb:cb:c5:aa:f1:d4:1c:64:81:cf:
e3:e4:84:4d:5c:3f:81:5c:ba:b2:27:eb:2e:0b:c1:
f2:79:af:23:ab:3f:75:23:dd:41:86:32:42:5f:0a:
71:9d:8a:ae:b8:47:0d:91:74:db:ef:7f:3c:4a:dd:
72:fe:13:0e:43:45:22:2a:b6:38:3e:4d:17:41:40:
7d:60:99:b3:74:e4:0f:da:d9:11:1f:7b:c6:d9:db:
93:18:d6:b4:b1:56:15:74:e0:e8:ab:b8:05:45:af:
64:c6:e7:1b:45:13:3b:59:7a:cf:ab:d7:b5:75:fc:
33:4b:ec:19:84:d9:f6:61:bf:14:e1:dd:c5:d4:ad:
27:96:a6:70:43:23:d4:f9:4e:54:c7:3c:0e:7f:ce:
5f:5a:1b:19:f1:e5:d1:41:57:6d:4f:1b:23:8b:05:
8a:52:46:7b:85:6f:4a:98:ba:91:6f:62:67:10:5a:
18:cd:31:bf:1e:de:b7:fe:30:3e:c6:3e:be:00:80:
bf:5e:f8:9b:6a:2b:b4:9c:b3:e1:67:e4:ce:f5:3d:
e3:46:aa:6f:b4:6d:73:8d:79:b0:94:5b:d6:5a:3b:
e6:6d:aa:70:2c:f7:26:00:44:be:87:f2:ef:3b:7b:
52:ce:39:bc:cf:bb:8b:97:96:d5:e5:ba:3b:20:ed:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:6B:1F:88:70:B5:46:A1:46:51:2C:67:21:49:2F:27:0F:78:FC
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9b:12:8f:f4:80:db:d4:79:9e:ac:5f:81:71:55:d9:e0:6c:
39:a6:a8:19:a0:21:1c:3b:fd:de:57:43:50:c7:81:e7:9d:b8:
fa:c0:25:0c:88:9f:bc:36:d8:51:7c:35:2e:a5:a0:b3:64:a0:
01:12:af:93:c7:6c:9a:7e:ff:b5:d6:b9:4d:f5:1c:e1:c6:77:
91:ea:c6:8f:7f:0d:a6:68:dc:96:55:ed:ea:1b:7e:e9:3f:60:
1f:e0:c3:2c:30:c5:f0:0a:2c:b5:75:25:b1:56:67:ab:10:6b:
6d:a0:7a:ef:79:bf:2f:5d:37:85:4b:38:52:d0:e4:08:b9:54:
a1:49:b3:a8:33:85:4f:11:ec:cc:91:4d:c8:22:60:fe:71:9b:
13:ae:28:bf:01:d6:58:4c:d8:16:a4:21:5b:85:6f:9d:ae:57:
39:51:b1:b6:d3:88:19:54:ea:f7:08:83:21:c6:85:e7:d7:d6:
4e:36:b2:ad:a8:6f:26:1e:cb:39:87:78:50:ca:6e:ec:a6:73:
80:53:95:d8:2a:ef:d6:34:58:d9:53:9e:ea:56:2e:a4:db:56:
b8:3a:7f:63:02:08:5a:fc:69:63:55:45:79:f9:f7:4e:d6:fa:
45:b2:c4:55:ef:e2:92:d6:9b:62:67:b6:c7:9b:4e:f5:e3:94:
e6:0d:d1:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHrWkML6WTUxGVY0ZIC8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTUzZThhYzQ2ZGI1Y2U1NzRiYTdlMzllODdlOGFmMDk2
YzFhODkwHhcNMjUwOTA3MDMwMTAxWhcNMjUwOTA4MDMwMTAxWjAzMTEwLwYDVQQD
Eyg5NTkzNmIxZjg4NzBiNTQ2YTE0NjUxMmM2NzIxNDkyZjI3MGY3OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv9fyvvLxarx1Bxkgc/j5IRNXD+B
XLqyJ+suC8Hyea8jqz91I91BhjJCXwpxnYquuEcNkXTb7388St1y/hMOQ0UiKrY4
Pk0XQUB9YJmzdOQP2tkRH3vG2duTGNa0sVYVdODoq7gFRa9kxucbRRM7WXrPq9e1
dfwzS+wZhNn2Yb8U4d3F1K0nlqZwQyPU+U5UxzwOf85fWhsZ8eXRQVdtTxsjiwWK
UkZ7hW9KmLqRb2JnEFoYzTG/Ht63/jA+xj6+AIC/Xvibaiu0nLPhZ+TO9T3jRqpv
tG1zjXmwlFvWWjvmbapwLPcmAES+h/LvO3tSzjm8z7uLl5bV5bo7IO3WFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWTax+IcLVGoUZRLGchSS8nD3j8MB8GA1UdIwQY
MBaAFEYVPorEbbXOV0un456H6K8JbBqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wZDExNzItNGJiMi00OTJjLWI1MTEt
NzhkYzdiMmMzZTg4LzEvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wZDExNzItNGJiMi00OTJjLWI1MTEtNzhkYzdiMmMzZTg4
LzEvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJsSj/SA
29R5nqxfgXFV2eBsOaaoGaAhHDv93ldDUMeB5524+sAlDIifvDbYUXw1LqWgs2Sg
ARKvk8dsmn7/tda5TfUc4cZ3kerGj38NpmjcllXt6ht+6T9gH+DDLDDF8AostXUl
sVZnqxBrbaB673m/L103hUs4UtDkCLlUoUmzqDOFTxHszJFNyCJg/nGbE64ovwHW
WEzYFqQhW4Vvna5XOVGxttOIGVTq9wiDIcaF59fWTjayrahvJh7LOYd4UMpu7KZz
gFOV2Crv1jRY2VOe6lYupNtWuDp/YwIIWvxpY1VFefn3Ttb6RbLEVe/iktabYme2
x5tO9eOU5g3RQQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:36 2025 by rpki-client