Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: RFkHzp4FBQMWQFfPNUwmMgRC+1xUYcUC1DFgBeXjE7Y=
Subject key identifier: 54:77:93:61:B7:1C:C3:17:81:EE:91:71:F3:BE:60:D7:A7:F4:55:ED
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 0196BFDD109D211443524F602078301ABFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 040D
Signing time: Sun 11 May 2025 15:00:57 +0000
Manifest this update: Sun 11 May 2025 15:00:57 +0000
Manifest next update: Mon 12 May 2025 15:00:57 +0000
Files and hashes: 1: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: G6rsNJYVIZw7sPifc6bSR+rXmGkCEkeYdhm3CZhCHQc=)
2: yOFjl_Pxx0Rc441XIFCRbQAh0C8.roa (hash: xKAfXgoPQJ/4slkyXjKOtsYsgtyUmgpiHM6n61mT42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:10:9d:21:14:43:52:4f:60:20:78:30:1a:bf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: May 11 15:00:57 2025 GMT
Not After : May 12 15:00:57 2025 GMT
Subject: CN=54779361b71cc31781ee9171f3be60d7a7f455ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:b4:00:88:32:e1:2c:a5:c7:9f:e9:30:8f:
e3:f2:f4:9a:2d:55:c3:5a:d1:4f:82:25:23:5c:78:
25:33:65:af:08:ec:1f:35:b7:cf:c4:41:08:75:36:
c6:a2:3d:ae:fe:c5:e8:70:17:74:90:ba:86:7e:70:
30:83:38:d8:7b:ab:45:4a:fd:75:95:01:0a:3d:9a:
a9:6b:1f:df:4c:eb:ee:f6:e8:6b:9a:d5:2d:d0:f6:
70:9c:0c:11:01:dc:81:77:d4:fb:84:a4:46:ed:8d:
07:4b:ae:f3:d2:05:d4:76:1f:f6:75:b4:8d:9f:0c:
6e:1e:d6:0b:0a:97:87:fc:d4:cd:fb:24:25:d9:bb:
d0:12:2c:22:48:bb:fa:ed:12:c7:de:2a:50:42:78:
5a:f0:22:e8:40:f0:00:eb:49:2c:6e:af:b5:c0:96:
4a:46:db:1d:8d:1b:eb:61:5d:ff:6d:ae:21:10:af:
97:70:0a:f8:cd:55:1d:37:98:df:38:96:e4:13:bf:
08:c8:db:e4:6d:2b:a5:04:7a:2b:1d:2f:4f:e5:a4:
0b:74:00:bf:29:9f:58:05:73:3b:c0:69:81:f3:1e:
98:1b:f4:dc:22:a5:39:3d:93:d6:07:37:b3:06:1f:
ed:3f:cf:5f:59:a1:7e:e7:89:78:e1:1c:39:af:89:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:93:61:B7:1C:C3:17:81:EE:91:71:F3:BE:60:D7:A7:F4:55:ED
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0b:3a:c8:ea:3d:7a:02:46:fb:cb:4d:42:f0:26:07:6f:32:
f2:30:3a:dc:b3:c7:4b:58:0b:9f:12:7e:c2:33:6b:c0:b6:01:
3d:17:14:3b:de:f8:a9:ef:23:dd:ce:5b:7e:6c:45:46:a9:59:
b7:a9:7b:c6:79:33:92:44:ea:87:99:17:f8:60:f7:1c:be:1f:
b8:bf:df:9f:2e:6c:37:97:3a:1a:8f:04:15:72:4e:e6:85:fa:
77:ca:5d:57:d2:78:89:26:30:28:03:dd:43:21:65:13:c4:fb:
4c:af:db:31:45:f6:8a:6d:63:ea:39:97:7b:9f:38:85:40:37:
ed:31:26:2f:fc:a3:37:51:92:40:0f:6d:86:16:9a:06:07:28:
7d:b8:86:82:81:c1:43:34:0a:15:e4:f3:03:88:72:6c:15:a8:
4c:cd:54:ab:f8:3e:3f:83:ef:ad:7c:f0:9e:d4:21:fe:ee:ce:
17:25:8a:27:1d:18:c4:2c:2f:2e:07:fc:e9:cb:47:64:19:8b:
ce:7d:6b:08:ab:92:88:4e:b4:9a:54:39:28:b2:b6:5c:19:61:
52:eb:4e:21:78:65:43:88:86:c0:b7:a0:90:09:09:de:1a:a8:
0b:5b:be:b0:f5:f3:1c:e1:ff:68:2e:24:fe:5c:a4:e9:fb:a2:
93:fb:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:22:26 2025 by rpki-client