Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: 9mHW7V01F8z01KVkMfSutwvoCCCRYm5PgnF915W2Yjw=
Subject key identifier: 63:54:9C:8B:57:B2:CD:5E:12:A6:A4:96:C1:F0:C5:D1:05:8B:E7:FE
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 0196B5FD898EA1276250CB7036A1A6DAE228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 0957
Signing time: Fri 09 May 2025 17:00:13 +0000
Manifest this update: Fri 09 May 2025 17:00:13 +0000
Manifest next update: Sat 10 May 2025 17:00:13 +0000
Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: EMYV97noVwBJq3NkUxh9I3oUM1ec1T+CU1db1u8eCuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:89:8e:a1:27:62:50:cb:70:36:a1:a6:da:e2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: May 9 17:00:13 2025 GMT
Not After : May 10 17:00:13 2025 GMT
Subject: CN=63549c8b57b2cd5e12a6a496c1f0c5d1058be7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:04:50:72:47:f8:5f:b3:f3:3e:30:44:98:
52:6a:7a:a3:24:97:d6:f4:14:ae:d9:b0:9c:12:d2:
6c:29:51:94:55:13:1c:58:f5:48:88:b3:e3:35:8e:
e3:b6:83:5f:32:70:89:0a:85:1f:e9:4d:56:cc:1b:
fc:2c:be:32:8e:dc:d6:3f:6d:ae:c6:e2:37:a0:5c:
4d:dd:8b:59:d6:4e:3b:ba:08:f7:5a:07:0d:bf:d3:
57:2e:7a:b4:d1:0a:3a:75:a2:9e:7b:7f:9a:6d:6c:
df:a9:bf:be:b8:f6:16:12:71:cd:41:31:0e:66:8b:
fc:d8:cc:75:b0:9a:6d:55:96:2b:48:f8:0b:49:e1:
94:84:a0:d3:9a:6f:0b:a3:d6:24:ae:32:5a:1f:42:
cb:2d:d8:47:7a:19:d3:ab:5f:e4:10:f6:8a:b1:28:
de:06:31:75:cf:59:91:41:06:ac:e4:e9:60:56:28:
d8:95:a2:c8:12:10:96:38:2f:90:27:2e:b7:de:62:
ea:79:4c:24:51:c4:b5:c7:95:1d:ab:66:4d:81:60:
72:c0:74:ac:d0:18:4b:6b:4d:40:62:1c:64:13:d6:
e2:c4:41:51:d8:e7:d9:9d:69:6e:ef:83:24:12:44:
ac:c2:7f:f0:b8:1e:12:3a:97:fd:76:a0:0a:7a:67:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:54:9C:8B:57:B2:CD:5E:12:A6:A4:96:C1:F0:C5:D1:05:8B:E7:FE
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ac:42:7f:13:af:14:16:cd:ea:43:8f:23:69:6f:ac:e0:61:
ea:e4:07:da:99:df:b3:a0:f7:d5:34:e5:ff:99:52:32:6b:51:
f8:78:7e:36:d5:93:43:15:11:9c:08:4e:24:d7:2b:a1:8d:be:
b1:a5:38:59:b7:ee:db:c7:d1:e7:17:be:31:df:10:33:ba:53:
61:65:5f:d6:94:1c:59:8a:c7:6d:63:9d:7e:b0:2e:05:84:02:
c7:fb:8e:e7:44:03:93:09:b2:73:69:7e:0e:3e:de:57:63:70:
b8:7b:0d:74:4c:26:34:24:b6:39:ce:df:48:92:ab:50:b8:58:
b1:c3:3d:4e:72:59:91:f0:45:68:bb:da:48:78:86:05:96:90:
f0:6a:e0:6c:32:77:cb:da:ea:69:fd:64:38:ab:d8:78:7e:c2:
44:ed:1d:88:73:47:80:da:11:b2:06:a1:bf:6f:af:b3:b9:ca:
ec:96:01:32:bc:71:e6:62:ea:c9:80:bf:c5:1a:64:6d:f4:aa:
ad:ca:c1:34:9a:25:85:9d:8b:11:c2:1e:1d:05:2a:e8:bc:14:
c6:1b:f7:d9:36:41:80:fd:e2:aa:90:17:8c:f4:fd:9a:42:60:
15:e2:66:03:63:fa:1e:b5:fa:ac:6f:90:2d:df:b7:75:d8:d4:
06:dd:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:32:13 2025 by rpki-client