Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: a5aDTLxJ7JHK5FyeX3qzR2R2azKQ6te4GnrgObjthpI=
Subject key identifier: D8:51:4B:B1:35:88:5F:E2:CE:0A:75:06:BC:22:77:A7:08:9A:4A:E6
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 0197B6D78F4F20B3508144ABFE240C041D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 09DC
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: J09LpFxe4J+WHHak80iu1CYj1Mb3UaeB97y6HYx4pdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8f:4f:20:b3:50:81:44:ab:fe:24:0c:04:1d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=d8514bb135885fe2ce0a7506bc2277a7089a4ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d1:e0:c7:91:04:14:92:8b:dd:25:fe:04:46:
1f:84:62:89:86:37:34:ec:aa:3c:84:cb:ad:e9:88:
99:4b:7a:28:25:e9:8f:6d:09:f3:3b:46:32:f8:3b:
ef:e2:21:f3:e0:89:64:b3:eb:20:70:76:96:b2:1e:
65:11:0a:39:fd:24:8f:a6:43:13:05:09:08:0b:0c:
44:ab:83:9a:38:af:ec:3f:b5:13:29:48:69:45:f6:
4d:a1:33:35:6b:9c:6c:6a:89:28:65:4b:e8:fd:cf:
b2:74:71:7a:fb:86:6d:ff:02:e4:d3:d3:01:31:46:
cd:75:22:6d:c3:18:bd:8f:5b:24:60:17:a6:e2:68:
cf:87:79:78:6e:6f:a8:3d:35:32:b0:ad:6b:28:18:
41:67:7b:65:1b:59:6f:a0:93:1c:cf:e9:2e:28:3a:
5b:a7:c1:7f:6a:f7:29:2a:9b:34:db:f4:a7:66:11:
99:2e:63:34:c1:96:2f:6c:1d:89:60:38:38:98:32:
d4:7b:e3:d5:1e:38:46:44:1f:3e:52:0a:7f:2e:59:
7c:8e:a0:45:fe:7c:a5:75:d2:a2:23:c7:40:41:19:
74:ba:07:3a:f4:f4:a2:80:b0:5b:20:ed:27:ea:21:
83:09:3d:5f:fa:ab:4b:36:42:e2:ea:a5:31:0e:8b:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:4B:B1:35:88:5F:E2:CE:0A:75:06:BC:22:77:A7:08:9A:4A:E6
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:72:75:96:53:e8:02:37:b3:14:ad:e0:8e:8a:11:9e:09:e4:
21:1a:5f:ae:e6:9b:9b:03:27:61:20:33:d2:01:07:60:7b:9a:
52:7c:f4:90:7f:52:7c:f3:21:67:c9:43:82:c6:b8:32:ef:5b:
ac:a7:06:05:89:f5:33:69:da:ca:e5:4c:15:ac:ae:6f:37:71:
07:95:8e:e4:90:31:2b:e9:bd:7d:14:65:d3:0e:47:52:e6:a7:
65:7c:12:57:88:e2:a9:71:0d:f1:1c:0f:30:0c:14:a0:cb:00:
b3:00:e0:ef:4f:ab:51:1f:6e:61:97:72:83:40:01:53:a2:8f:
22:e7:fe:bf:eb:56:df:61:f3:ec:61:ae:bd:ed:4b:e8:77:63:
e9:c8:a3:8a:6d:78:b2:1e:34:1d:5d:2c:a6:cc:33:59:8d:13:
7f:88:59:23:7f:da:c9:6a:60:3e:1e:1a:4c:96:d7:13:95:bd:
2e:eb:e6:49:5a:a7:ae:d5:70:c6:98:6b:30:18:2e:be:b7:80:
db:8a:93:d4:c9:ff:6a:c1:44:29:57:61:ed:eb:c4:c6:9a:39:
aa:26:45:4b:f4:62:33:fb:c7:34:4f:aa:02:67:31:97:36:17:
94:dd:f1:c6:dc:db:49:7b:59:7e:fa:8f:38:4e:9d:68:a7:45:
83:34:48:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2149PILNQgUSr/iQMBB10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGQwNzRiZGViZjQ1MTU0YTI2YmViZmRjZTU1MzgyOTE1
MzRiMGEwHhcNMjUwNjI4MTQwMTA5WhcNMjUwNjI5MTQwMTA5WjAzMTEwLwYDVQQD
EyhkODUxNGJiMTM1ODg1ZmUyY2UwYTc1MDZiYzIyNzdhNzA4OWE0YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdHgx5EEFJKL3SX+BEYfhGKJhjc0
7Ko8hMut6YiZS3ooJemPbQnzO0Yy+Dvv4iHz4Ilks+sgcHaWsh5lEQo5/SSPpkMT
BQkICwxEq4OaOK/sP7UTKUhpRfZNoTM1a5xsaokoZUvo/c+ydHF6+4Zt/wLk09MB
MUbNdSJtwxi9j1skYBem4mjPh3l4bm+oPTUysK1rKBhBZ3tlG1lvoJMcz+kuKDpb
p8F/avcpKps02/SnZhGZLmM0wZYvbB2JYDg4mDLUe+PVHjhGRB8+Ugp/Lll8jqBF
/nylddKiI8dAQRl0ugc69PSigLBbIO0n6iGDCT1f+qtLNkLi6qUxDos2aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhRS7E1iF/izgp1Brwid6cImkrmMB8GA1UdIwQY
MBaAFIvdB0vev0UVSia+v9zlU4KRU0sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTkt
NTBmYmY3ZTk1MDQyLzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTktNTBmYmY3ZTk1MDQy
LzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHJ1llPo
AjezFK3gjooRngnkIRpfruabmwMnYSAz0gEHYHuaUnz0kH9SfPMhZ8lDgsa4Mu9b
rKcGBYn1M2nayuVMFayubzdxB5WO5JAxK+m9fRRl0w5HUuanZXwSV4jiqXEN8RwP
MAwUoMsAswDg70+rUR9uYZdyg0ABU6KPIuf+v+tW32Hz7GGuve1L6Hdj6cijim14
sh40HV0spswzWY0Tf4hZI3/ayWpgPh4aTJbXE5W9LuvmSVqnrtVwxphrMBguvreA
24qT1Mn/asFEKVdh7evExpo5qiZFS/RiM/vHNE+qAmcxlzYXlN3xxtzbSXtZfvqP
OE6daKdFgzRIBA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:43 2025 by rpki-client