Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File: RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier: bKNKLHYpqozS9V6e9uSYL+ApJP7hMsWaj8K6COs9Hso=
Subject key identifier: 67:22:78:D9:CE:B7:96:1F:C3:22:22:9A:F6:6B:E0:80:AA:DA:D5:85
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer: /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial: 0199240C9A461F04CD4011032B7E8795942B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 12:00:29 +0000
Manifest this update: Sun 07 Sep 2025 12:00:29 +0000
Manifest next update: Mon 08 Sep 2025 12:00:29 +0000
Files and hashes: 1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: unCRyENs9kFA6Gr84aW0RGHgpsxGueKv5WobuAnk7Hs=)
2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:9a:46:1f:04:cd:40:11:03:2b:7e:87:95:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Validity
Not Before: Sep 7 12:00:29 2025 GMT
Not After : Sep 8 12:00:29 2025 GMT
Subject: CN=672278d9ceb7961fc322229af66be080aadad585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:36:b9:aa:b7:f5:33:85:9e:f1:27:4e:5a:
07:11:bf:0b:55:8c:bf:31:57:56:08:a1:b7:db:05:
05:a9:a5:8b:2b:92:5a:6b:e2:89:a5:88:08:b0:1f:
6b:db:6d:4c:68:ea:46:41:80:0c:90:66:61:71:62:
bb:0e:2b:c8:48:f3:11:f2:08:84:e7:a6:20:e7:d0:
06:43:3e:ac:e7:a0:f6:40:74:b6:dd:a3:e1:77:66:
14:f4:ac:41:54:63:57:d7:59:65:db:f5:46:01:9d:
56:c5:0a:3b:3f:25:56:b7:4b:3d:15:b3:13:c8:07:
1c:df:16:31:fd:ca:2d:b8:e5:b9:b5:c1:cb:77:90:
c6:70:f6:a9:0c:86:e9:f1:c4:0c:2a:36:b4:6c:56:
66:98:e9:a3:8c:e8:67:5c:a3:8c:00:ea:09:ad:e1:
53:d8:e5:a4:31:85:99:6a:74:7d:ba:03:bd:73:c5:
95:39:17:fb:1e:b1:3c:f6:5c:f6:41:aa:b2:e6:4b:
2d:28:b1:56:a8:8d:a5:60:33:51:b7:59:db:6c:9d:
62:53:28:ef:d2:d7:ad:42:f4:5a:02:2d:66:73:b0:
bd:9a:f9:e0:f1:5e:64:0b:aa:f6:a7:29:4e:d1:9b:
df:4a:ec:1a:7b:24:63:d6:0b:48:55:54:7a:08:c6:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:78:D9:CE:B7:96:1F:C3:22:22:9A:F6:6B:E0:80:AA:DA:D5:85
X509v3 Authority Key Identifier:
keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:46:2e:13:6e:40:82:36:37:b4:16:2a:c3:d6:78:bc:98:
20:50:60:14:7a:3a:04:52:8d:2b:fd:be:d7:78:1f:e7:f5:c4:
ac:26:2f:34:9d:7f:bd:f1:de:e0:ae:48:9b:05:27:1a:8c:61:
98:cc:81:bc:4d:3a:a6:ce:ea:87:cb:e4:84:b2:11:1a:2f:87:
52:7c:9a:d1:33:27:81:15:6c:d2:c4:db:fb:b8:c4:93:48:16:
25:f2:56:64:59:4c:65:00:40:1b:1f:ca:70:05:4f:e9:4e:20:
4f:3d:9d:ec:f1:3c:a9:5d:5d:7d:aa:69:bb:04:a3:21:44:09:
91:f1:38:f4:59:dd:3f:8f:f4:c9:56:23:1a:db:ba:30:8c:36:
a9:d4:83:ef:0d:31:00:c1:ad:3b:f7:0e:72:ab:da:a6:7f:38:
40:e3:73:55:1e:a6:31:2d:57:d4:db:a7:ae:26:8c:31:e4:fe:
e8:e7:f8:36:37:0b:b7:c6:02:f4:f6:32:a6:8d:a7:e9:ec:d7:
23:55:d8:8f:4d:85:e0:4e:08:03:be:57:17:44:b6:07:cd:e8:
eb:3d:76:77:4c:da:66:7e:ce:14:c2:16:d5:69:b2:ac:65:c8:
ac:c1:e8:f6:d8:53:28:9a:e2:af:0f:1f:34:65:a4:04:ee:32:
9e:46:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:56 2025 by rpki-client