Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File: RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier: GNfv+z/VbsavsFXNpVszaF3KGZdKq+On8/T3vNoR/Y4=
Subject key identifier: 91:4E:96:D6:FB:E9:9B:1F:5D:90:4A:F6:30:1F:1D:5D:88:1B:D9:7E
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer: /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial: 019A72260E5150FDAEADFC47E0286076E1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: LPfon77EPZQvLgT5bz/E3WP8ZHZaxp8nfD1eLdeg09U=)
2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0e:51:50:fd:ae:ad:fc:47:e0:28:60:76:e1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=914e96d6fbe99b1f5d904af6301f1d5d881bd97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:e1:75:c1:64:cc:a2:46:58:7a:d1:fb:63:
48:0e:d5:76:39:83:97:b7:a6:c6:dd:01:4c:e2:19:
b3:b2:44:32:38:51:54:14:81:3e:e2:15:7e:45:f5:
15:0a:a0:fa:54:f3:da:cf:bf:7b:b2:43:12:a5:a7:
16:fd:a8:b5:4d:1e:04:a0:20:96:96:6f:18:f8:d5:
06:3e:ca:00:4b:c9:6c:7e:e6:12:e5:83:b5:ac:ec:
02:44:56:d0:a1:32:5b:4b:3b:12:4c:2d:e6:6d:0e:
23:fd:df:70:90:5c:06:7d:f0:3f:68:bf:67:61:b7:
11:b9:fd:dd:86:61:ad:fb:f6:5a:2e:ab:7e:cf:ea:
f9:65:b9:83:6b:ed:9e:8f:04:08:cf:28:b6:7d:6d:
45:90:0b:cf:1e:ce:03:b8:5e:0a:c9:8d:b6:77:b7:
84:5e:db:ca:35:c2:29:b7:8c:12:59:d8:7a:c8:45:
03:28:fd:21:9e:d9:ae:e1:b0:16:e6:be:25:1e:00:
ae:28:32:14:3a:d3:ca:41:8e:54:ee:ef:29:da:ba:
c5:86:6c:70:95:34:31:02:1a:3f:58:18:d1:a2:a3:
2c:32:be:2a:1e:1b:3e:90:c0:9f:34:d9:1d:58:f4:
85:81:59:77:87:95:d5:1d:bf:4e:64:f6:60:5e:ff:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4E:96:D6:FB:E9:9B:1F:5D:90:4A:F6:30:1F:1D:5D:88:1B:D9:7E
X509v3 Authority Key Identifier:
keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:27:a5:44:43:70:5a:af:38:af:13:86:9d:3c:a0:af:c1:3c:
63:f2:43:18:6f:65:33:c5:04:27:c6:e4:0c:75:ab:32:84:99:
c5:eb:2e:8d:dc:ab:6c:4e:5a:8b:93:a3:78:4f:63:9f:fe:a4:
93:53:73:5d:7d:cb:93:20:3e:91:41:1d:ad:bc:a0:cd:e2:e6:
6a:57:68:8e:8c:09:f2:cf:b1:a3:a8:c8:2d:f4:12:da:c8:21:
3f:df:c2:94:ee:06:43:f9:18:fe:e2:ac:58:55:d5:01:3b:6c:
ef:59:d9:ef:dd:25:5f:8b:5b:6c:fc:19:08:dc:30:a5:f9:6c:
88:15:54:ed:24:e8:2c:45:36:0c:3f:82:51:54:75:f9:3c:6c:
a3:24:fe:c9:c8:47:b9:e7:7f:90:70:3c:35:d4:4d:3b:c4:ff:
02:29:82:74:25:2c:20:7c:51:4a:d3:ce:81:be:38:59:48:0b:
a9:f9:de:b5:8e:ca:7a:ce:72:1d:50:64:75:e5:db:2e:09:50:
52:05:79:68:94:f3:ab:9e:f6:fe:f2:49:7b:3d:ce:ca:4e:be:
bc:97:c3:cd:a4:63:41:24:72:47:3a:f2:2b:de:d7:3f:d6:8e:
e9:99:09:91:27:65:58:d1:68:98:d9:bb:d3:75:f3:10:a8:a5:
9a:88:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:38 2025 by rpki-client