Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: yohES748QB8FW4LJnDYcYyaKdu07RzukTj2OfHdlv48=
Subject key identifier: 28:1A:12:08:F3:A3:EA:82:2A:1F:AA:07:2A:2C:C7:09:21:35:24:DF
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 019746D4F6F4691F2F35F8E86332FCC0ACA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 09A2
Signing time: Fri 06 Jun 2025 20:00:51 +0000
Manifest this update: Fri 06 Jun 2025 20:00:51 +0000
Manifest next update: Sat 07 Jun 2025 20:00:51 +0000
Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: rx0iuFjqGkumTTGlcbwVrTHaoqsv0II3sWYt6XPUra4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:f6:f4:69:1f:2f:35:f8:e8:63:32:fc:c0:ac:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Jun 6 20:00:51 2025 GMT
Not After : Jun 7 20:00:51 2025 GMT
Subject: CN=281a1208f3a3ea822a1faa072a2cc709213524df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:c5:bc:ae:b7:80:1b:05:ce:62:b3:90:9b:
bb:ec:85:6c:8a:c7:6c:b8:4c:eb:be:72:95:35:f5:
ca:ce:dc:ce:90:e5:61:16:0a:ff:c8:f3:d3:d0:44:
98:06:7d:20:06:8d:01:7c:b6:9c:59:26:eb:5f:af:
a7:31:c1:f6:8f:d6:eb:b3:73:4b:f2:8b:82:f6:9e:
0d:fa:fc:99:40:0f:fe:b4:a2:28:ed:9b:66:d3:0d:
89:e2:cf:be:9c:78:6b:6d:67:53:63:4a:8d:22:31:
3a:89:27:4b:83:ae:b4:5a:2f:f7:91:0c:53:ce:18:
f4:60:86:35:30:99:57:c9:9c:78:13:03:6c:e7:a7:
42:b7:3d:29:da:81:40:52:17:a2:e2:c0:a4:53:8d:
c3:0c:54:19:9c:7a:18:f2:99:c0:d6:b8:2b:b9:77:
a9:69:f7:53:b7:cd:89:6e:67:5f:09:dd:a5:87:94:
f6:3c:f5:68:15:a7:41:1d:14:b7:2b:99:ce:90:0c:
d5:cf:19:52:29:f0:92:90:07:d8:c1:17:e5:31:af:
4e:29:12:5f:47:1d:4c:09:be:60:7f:d3:11:1a:3a:
43:fa:eb:61:8c:49:d5:ce:aa:fb:5e:d2:5f:9e:b0:
3f:a8:09:24:1e:11:3f:51:e6:c7:11:88:b9:d3:85:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1A:12:08:F3:A3:EA:82:2A:1F:AA:07:2A:2C:C7:09:21:35:24:DF
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:58:86:4f:45:b6:1a:c9:cc:12:2b:f6:ad:a4:6e:8f:4c:
2a:33:00:ce:5a:3b:b1:2d:5c:e7:e9:a8:f6:dc:3a:32:c5:f5:
67:36:68:e3:ca:84:b8:0d:ad:66:21:63:59:d9:9d:36:4d:5b:
72:a2:4f:4d:56:0b:72:55:e3:57:9e:f2:20:94:5c:a2:ef:a0:
d6:a8:8e:b9:5d:be:9d:3a:53:e3:a7:8e:bc:b7:ee:3c:4a:cd:
3d:70:d0:b8:7c:4f:e2:80:49:60:1d:89:e7:30:08:65:42:ff:
ed:1a:db:77:84:95:b4:0f:b3:03:90:88:e3:da:91:de:40:21:
d0:db:35:98:5b:25:cc:d9:a5:a6:eb:ca:d3:4b:28:dc:32:e9:
77:19:e2:0f:d3:a9:8a:fa:a4:77:e9:ae:8e:74:66:ab:28:b6:
8f:0f:b1:8d:76:69:a9:8e:ef:ff:5f:01:f6:51:da:fe:72:d4:
85:9a:36:bb:c4:a2:00:c2:47:e3:ca:9d:0a:cc:12:33:d3:bf:
bd:0f:e4:d0:eb:eb:32:2a:86:d1:66:35:b4:4a:19:98:61:9c:
a2:15:ea:3a:05:c8:fd:11:96:bb:ef:e1:34:dd:e9:72:6b:71:
35:f1:d1:4d:d6:11:00:db:7a:16:b7:71:c8:5c:e5:7f:43:eb:
27:84:c3:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1Pb0aR8vNfjoYzL8wKyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGQwNzRiZGViZjQ1MTU0YTI2YmViZmRjZTU1MzgyOTE1
MzRiMGEwHhcNMjUwNjA2MjAwMDUxWhcNMjUwNjA3MjAwMDUxWjAzMTEwLwYDVQQD
EygyODFhMTIwOGYzYTNlYTgyMmExZmFhMDcyYTJjYzcwOTIxMzUyNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDHFvK63gBsFzmKzkJu77IVsisds
uEzrvnKVNfXKztzOkOVhFgr/yPPT0ESYBn0gBo0BfLacWSbrX6+nMcH2j9brs3NL
8ouC9p4N+vyZQA/+tKIo7Ztm0w2J4s++nHhrbWdTY0qNIjE6iSdLg660Wi/3kQxT
zhj0YIY1MJlXyZx4EwNs56dCtz0p2oFAUhei4sCkU43DDFQZnHoY8pnA1rgruXep
afdTt82JbmdfCd2lh5T2PPVoFadBHRS3K5nOkAzVzxlSKfCSkAfYwRflMa9OKRJf
Rx1MCb5gf9MRGjpD+uthjEnVzqr7XtJfnrA/qAkkHhE/UebHEYi504VUuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgaEgjzo+qCKh+qByosxwkhNSTfMB8GA1UdIwQY
MBaAFIvdB0vev0UVSia+v9zlU4KRU0sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTkt
NTBmYmY3ZTk1MDQyLzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTktNTBmYmY3ZTk1MDQy
LzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP61Yhk9F
thrJzBIr9q2kbo9MKjMAzlo7sS1c5+mo9tw6MsX1ZzZo48qEuA2tZiFjWdmdNk1b
cqJPTVYLclXjV57yIJRcou+g1qiOuV2+nTpT46eOvLfuPErNPXDQuHxP4oBJYB2J
5zAIZUL/7Rrbd4SVtA+zA5CI49qR3kAh0Ns1mFslzNmlpuvK00so3DLpdxniD9Op
ivqkd+mujnRmqyi2jw+xjXZpqY7v/18B9lHa/nLUhZo2u8SiAMJH48qdCswSM9O/
vQ/k0OvrMiqG0WY1tEoZmGGcohXqOgXI/RGWu+/hNN3pcmtxNfHRTdYRANt6Frdx
yFzlf0PrJ4TDxg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:33 2025 by rpki-client