Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File: RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier: n+KKVBV7JmDU0AdrxkHgmx7H+ZNtBfbPbT4jOshbjkQ=
Subject key identifier: FC:CE:35:0C:43:FC:79:EA:89:B0:07:74:2E:72:E0:60:A4:9E:5B:D1
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer: /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial: 019748F9CD7B9FB1D4FE3970B3E2C88989DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 06:00:19 +0000
Manifest this update: Sat 07 Jun 2025 06:00:19 +0000
Manifest next update: Sun 08 Jun 2025 06:00:19 +0000
Files and hashes: 1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: vR8t9tTgoxmc7M9E8t9VYJf6Hsqvw3l4KhMsh3VZfoo=)
2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:cd:7b:9f:b1:d4:fe:39:70:b3:e2:c8:89:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Validity
Not Before: Jun 7 06:00:19 2025 GMT
Not After : Jun 8 06:00:19 2025 GMT
Subject: CN=fcce350c43fc79ea89b007742e72e060a49e5bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:37:7b:92:3c:be:75:20:25:70:06:67:11:
b3:94:39:38:a3:3e:34:b2:13:ca:57:e2:0d:00:9a:
0f:4f:6e:5b:e2:49:45:6f:8f:02:f4:c3:d8:36:7d:
89:0a:4e:49:e3:12:5e:dc:95:0d:db:53:2e:cb:af:
d4:bd:af:b8:81:10:29:6d:73:35:78:21:3d:69:c4:
d8:73:55:8c:c7:14:26:6c:5b:8b:b9:a3:17:59:50:
a6:d2:30:50:59:92:c4:9a:0d:5f:6c:4d:ba:94:c6:
1d:a2:65:5b:9b:1c:1c:fb:71:61:be:ae:c2:d3:04:
d9:f8:f9:fb:86:17:94:af:43:b8:12:75:0f:3e:21:
d5:26:d0:35:4b:00:5f:66:eb:78:d8:1e:06:b0:f0:
e4:ca:ba:6f:f8:00:45:4a:6d:fb:2c:9b:1b:13:f4:
52:ab:da:56:e9:08:8b:9a:d1:ac:3a:87:c2:f5:9f:
48:00:23:e8:d6:4e:1e:ca:71:56:8f:e4:36:f5:fb:
9f:c7:c7:c9:c7:59:de:a1:75:e4:4e:f7:28:f5:44:
36:02:e3:30:c0:7a:fe:23:5f:5a:2a:cf:c7:a3:ef:
10:f5:8a:90:cd:cf:15:81:f3:cf:e7:90:a1:79:60:
a1:cb:7e:58:34:20:51:ac:9f:c3:25:f6:b9:79:3e:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:35:0C:43:FC:79:EA:89:B0:07:74:2E:72:E0:60:A4:9E:5B:D1
X509v3 Authority Key Identifier:
keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9d:12:2b:bb:ed:5c:4e:d8:92:ab:8f:68:a6:24:f8:9e:34:
d2:b4:5a:a3:c7:1f:a1:8d:11:b8:13:4a:08:e6:d5:31:6b:1d:
9e:c5:93:9c:54:74:92:2b:54:63:41:d3:0b:34:16:51:fe:56:
46:db:d6:28:f4:f1:73:30:a0:b3:c6:26:19:c2:b1:43:48:3e:
5e:a1:3a:b2:d4:ab:74:59:11:c0:ab:2c:01:75:11:28:e2:d9:
77:6d:07:0a:a1:c5:0a:36:c7:bc:c7:fc:68:c7:eb:75:5a:ac:
d7:33:dd:98:2a:21:82:a9:67:4f:77:53:b7:bc:bc:9c:c9:0e:
82:3e:d1:42:63:2a:08:86:84:c8:5e:30:5f:55:7a:e3:09:3e:
d0:3d:03:11:77:d2:af:13:51:75:f1:4b:9e:2f:b1:73:d3:10:
f6:fa:15:81:7a:44:9e:68:1e:55:4f:90:55:90:ed:a3:70:0a:
27:83:40:c3:db:7e:ff:c1:80:76:5b:ec:1f:e4:e7:67:34:1f:
3a:35:a3:a2:fe:7a:b1:d8:3d:49:2a:6d:a8:29:b3:f2:d7:f2:
21:f6:90:87:06:d8:7a:6e:be:60:b8:7a:48:89:18:c0:07:b3:
58:35:b4:0e:0d:ca:b2:fd:71:11:4d:30:93:79:de:fa:50:11:
d6:bb:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:22 2025 by rpki-client