
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: gxEAdrBXJsXddtPzLnIhBk/QjfBk9EqegwXfzisK91w=
Subject key identifier: C6:60:2A:7B:0C:5C:B2:B9:B3:74:58:78:22:7F:8E:35:70:4E:89:F1
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 0197B70ED76183E1E74F6DC9330FC15A38FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 048D
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: 8exwfboVl1T7znhRb51uKntw5UNb67skyczwIrNGwQ4=)
2: yOFjl_Pxx0Rc441XIFCRbQAh0C8.roa (hash: xKAfXgoPQJ/4slkyXjKOtsYsgtyUmgpiHM6n61mT42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d7:61:83:e1:e7:4f:6d:c9:33:0f:c1:5a:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=c6602a7b0c5cb2b9b3745878227f8e35704e89f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:5b:35:60:27:54:94:95:4d:ec:2e:6d:c3:
9d:fa:4f:62:9c:63:eb:7a:ae:ea:9d:48:cf:ff:a3:
68:cc:5f:24:ac:dd:c3:57:b3:6d:21:90:fe:c9:0d:
bb:09:09:46:2d:d3:e1:3e:a9:34:14:2b:d8:72:88:
ca:09:eb:0b:b6:51:81:b6:17:55:b2:f0:47:65:25:
7a:43:51:9b:3c:3a:02:b3:8d:6a:ae:db:ec:c7:88:
7c:5e:58:96:ec:1d:b5:f6:cf:33:53:73:da:87:bf:
66:03:3a:61:3d:e0:ea:fa:c0:60:cc:3e:13:ba:dd:
d2:c1:68:83:d2:b5:63:8d:22:5d:10:a5:f7:f6:13:
7a:b3:41:f3:9f:f1:7e:5d:9d:e5:12:77:0e:19:c8:
1f:86:a0:48:0b:36:2a:ab:1c:9e:8d:88:1b:5c:d7:
e4:a9:37:b2:b8:8a:4e:ed:91:65:8b:55:24:2c:5d:
6c:73:7b:3d:d1:eb:45:f6:76:66:8c:b4:50:f3:1c:
2f:b6:02:b6:27:31:03:08:ac:3c:74:e7:a7:4d:e9:
3c:b6:e0:4f:9a:56:f4:97:48:de:5a:74:b5:7c:95:
28:30:0f:f6:55:5a:99:c0:54:7c:6c:00:dc:8e:63:
12:29:26:d6:dc:27:cb:ad:1c:1c:68:3c:ed:45:b0:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:60:2A:7B:0C:5C:B2:B9:B3:74:58:78:22:7F:8E:35:70:4E:89:F1
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:76:30:3a:30:5d:82:c2:1c:53:a7:75:dd:13:ef:cb:50:48:
97:bc:b3:11:eb:b1:56:96:98:d8:dc:eb:ab:3d:57:7d:65:5c:
f4:8a:e0:b5:e3:a3:ee:82:33:25:61:c3:70:12:9e:eb:63:7e:
59:b4:d6:32:3c:57:58:70:4d:c0:73:bc:1e:4a:cd:cd:8c:93:
99:74:a7:f6:82:db:3d:ce:8d:e0:ba:de:c4:30:d3:db:5b:ed:
46:02:f6:09:3e:a1:37:de:ae:34:a8:6e:a0:5c:a1:37:ae:90:
2a:17:81:6a:ff:51:01:b7:5c:f0:84:ba:2e:ae:3b:9f:74:32:
d7:11:6e:c1:2e:09:b3:b9:34:04:85:fd:14:2d:e7:ef:1a:12:
5a:2b:2a:97:40:12:3c:44:03:21:31:34:33:86:7f:7a:04:dd:
63:ff:b5:e9:4f:b7:1a:93:7e:bf:8b:90:a0:25:d7:02:52:2f:
f8:b5:4e:e6:c1:42:1f:db:d2:40:4d:e5:18:81:00:d8:30:7a:
a3:25:fc:c4:fc:c4:8c:ee:c6:80:34:21:07:b0:37:79:53:98:
ef:54:fe:51:5a:81:fa:42:76:d7:b3:ad:10:27:f2:cb:fb:68:
67:18:7f:23:2f:e5:4a:12:34:e7:b7:b8:97:c3:67:b9:b6:26:
6c:99:06:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:25 2025 by rpki-client