Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: nX5Y4bQm42EVxsXbShOzsi3FgocddavBejQ35bNrRCA=
Subject key identifier: 61:67:21:02:6E:DD:4C:92:C9:74:5C:08:BA:C7:A3:21:D8:DC:EC:91
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 019A71EEF8A9465117DE3F1E81EA9DCEDCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 0B46
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: POZ832e/eFLy/UGnLDhx3Vt7iRtr+uN0Etpb6cr0sec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f8:a9:46:51:17:de:3f:1e:81:ea:9d:ce:dc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=616721026edd4c92c9745c08bac7a321d8dcec91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:65:f0:c7:de:cb:93:e4:65:6a:91:41:35:
5d:f4:a5:f6:a3:97:4e:d2:64:f6:82:52:6c:df:6b:
c5:50:7b:61:5b:e2:c1:c9:e7:28:b0:97:f0:8b:c5:
ef:84:4f:ec:ce:5d:78:e8:a8:8a:64:a7:5e:ac:df:
1b:fa:21:6b:64:cc:c8:97:da:f5:59:e9:d1:80:41:
f5:e8:4d:84:2b:0d:7b:97:b5:9a:3b:d0:f0:c4:f2:
74:2c:de:08:15:d2:e6:42:a6:38:51:8e:37:01:72:
2e:85:a3:af:73:70:c7:71:72:54:79:7c:a2:2f:1e:
0c:89:c3:8f:73:f9:5e:c7:76:6a:2c:f6:5d:e8:e1:
57:7b:f9:8e:da:0e:d9:41:c7:21:3c:23:dd:06:d3:
6d:d7:02:eb:c0:1f:64:f9:65:a5:ee:64:15:87:da:
5c:d9:39:32:88:7a:bc:60:51:ea:bd:cd:6b:93:cb:
87:cf:18:38:dd:b4:ed:93:44:3a:ed:5d:47:cf:ba:
1e:e4:42:d7:e5:6b:f8:1d:31:24:a0:51:0a:ef:d4:
3b:59:c6:31:61:ef:77:cf:39:7c:a4:f7:1b:8b:7f:
54:cc:d9:73:1c:2e:34:20:d1:e2:82:82:89:0d:93:
ef:bc:3c:04:a0:b1:9a:a2:b6:ba:80:4a:1e:5f:32:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:21:02:6E:DD:4C:92:C9:74:5C:08:BA:C7:A3:21:D8:DC:EC:91
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:91:6b:42:b3:9f:a3:01:be:b0:a4:4b:28:05:94:02:02:ff:
76:0d:d0:1e:f1:c8:1b:34:ed:a4:3c:a7:43:0f:f2:2d:63:c3:
50:78:b1:9c:e3:ac:df:49:b1:89:a8:92:e5:04:e0:58:b7:d1:
5b:f2:8d:af:2d:01:89:e2:0b:cc:fb:e3:6f:9b:40:ab:6a:21:
42:56:2d:3c:52:99:2a:81:a9:4e:33:77:fe:04:32:05:1b:68:
97:50:82:e6:5f:7b:0f:70:be:eb:12:9c:b7:c8:20:d3:fd:66:
ad:c2:f2:f9:69:35:01:a6:74:6d:ad:7e:05:0e:5b:0e:c9:da:
0d:c0:e9:c5:a7:66:5c:97:47:8d:d7:d0:fd:c5:b3:29:39:ec:
f0:be:53:8c:fa:6c:35:8a:6c:61:07:45:df:25:3e:b0:39:ae:
58:60:2f:12:b6:36:68:53:1b:2e:1c:01:c0:9b:20:bc:1c:7c:
32:1f:9a:b2:1b:b0:fd:70:21:bc:e3:f7:6c:cf:63:f0:cc:48:
8a:d5:e0:77:5a:86:e5:b4:96:16:cd:0f:7e:ee:4a:4a:ef:bb:
36:a2:f7:35:7d:06:6b:b7:1d:65:55:50:25:fe:e0:37:4e:c9:
65:45:ab:75:d1:c6:0d:7a:ef:6e:80:45:5d:d0:a4:3e:e3:68:
34:dc:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:42 2025 by rpki-client