Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: lor/UFvRf2cdTi31PK134dJyJawKQDZADsq7LR7AZiA=
Subject key identifier: 68:D8:B9:D9:43:47:7A:E0:90:CF:F0:4C:97:B0:05:0D:62:60:47:71
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 01976D749AE9C70016EB62B70C0242AA09EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 09B6
Signing time: Sat 14 Jun 2025 08:00:47 +0000
Manifest this update: Sat 14 Jun 2025 08:00:47 +0000
Manifest next update: Sun 15 Jun 2025 08:00:47 +0000
Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: YnvD34+bDG1rEHvteXDPzdYQbW0pzqnawNF9m6Ve5Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:9a:e9:c7:00:16:eb:62:b7:0c:02:42:aa:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Jun 14 08:00:47 2025 GMT
Not After : Jun 15 08:00:47 2025 GMT
Subject: CN=68d8b9d943477ae090cff04c97b0050d62604771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:34:1c:85:fa:1e:db:50:14:e8:a5:9f:99:
fc:3e:a7:cb:07:ad:a8:33:4d:e6:5c:61:1f:8d:a7:
22:5a:11:54:3b:45:a8:ae:ac:6e:55:38:9c:87:ff:
b9:d0:f0:bf:37:ff:38:53:84:59:ec:c2:f8:bc:b8:
b6:a4:fb:30:53:6f:32:9c:07:a8:07:56:31:cf:c1:
37:95:64:1a:d4:de:2c:89:1e:ba:65:1c:51:bc:43:
70:7c:1c:ce:02:65:11:d3:85:70:02:91:a8:9c:50:
ac:d1:d1:d8:82:25:e2:8d:57:c3:ae:e4:27:7d:d8:
9a:71:af:03:c1:c8:5f:7a:36:ad:b0:17:f7:18:53:
c4:c4:27:26:10:a1:af:c5:c9:b3:9f:d2:e5:45:2f:
50:63:95:37:a5:45:4f:41:c7:73:b8:69:be:c1:d1:
90:e7:b7:51:60:bf:09:02:98:c0:4c:df:79:08:81:
98:06:f4:fb:79:1e:87:28:c1:ec:8a:61:64:c9:42:
57:e1:ce:4d:50:51:3a:2f:a4:a4:2b:07:da:1d:d4:
08:96:9a:86:3a:71:8c:b3:d1:92:13:dc:3c:a5:69:
a8:52:23:35:e8:1e:a9:c1:34:6a:8c:89:b3:82:02:
1e:28:05:20:66:70:73:de:10:fc:62:15:52:8a:08:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D8:B9:D9:43:47:7A:E0:90:CF:F0:4C:97:B0:05:0D:62:60:47:71
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:32:78:ee:1f:68:ce:1e:fb:bd:e2:14:b9:0d:26:21:ae:c7:
fd:0b:00:dc:fc:f6:0f:c7:df:c5:34:1f:ce:1d:fe:51:bc:e2:
a9:89:66:2c:3f:3c:e8:18:76:e3:5c:d3:16:e7:80:f7:13:30:
94:55:68:50:63:92:fd:f0:21:b1:fa:de:13:c1:7f:ba:90:82:
77:1c:81:50:fc:de:18:65:08:2a:f1:71:c3:72:ee:fa:2c:94:
ed:fd:d7:69:8f:3f:67:76:86:d8:fc:f4:bc:94:b2:53:78:b6:
43:d4:04:1e:57:eb:2d:3b:2e:8c:35:b6:f7:33:47:81:dd:3a:
81:dc:c5:4c:25:7f:23:05:d1:b6:0c:9e:e0:b8:1e:98:49:a3:
3e:4a:f0:e9:84:af:06:85:c0:c5:c4:b4:17:7b:44:0f:27:ce:
5d:20:d9:a3:ed:bd:a3:02:46:b6:b6:b6:ae:5d:4b:dd:d9:34:
23:9e:a9:fe:c7:fa:47:90:c7:b4:d2:df:58:5e:fd:2e:2b:1c:
9e:d8:7d:2d:dd:f9:bd:86:f6:fe:89:e0:b7:a4:65:99:0a:e1:
2d:f1:cf:a4:99:73:00:c6:da:41:6f:b7:cb:99:af:19:24:93:
04:49:d7:00:0f:56:9b:56:72:6b:20:a8:85:a9:9a:3d:7b:c5:
00:74:f1:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdJrpxwAW62K3DAJCqgnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGQwNzRiZGViZjQ1MTU0YTI2YmViZmRjZTU1MzgyOTE1
MzRiMGEwHhcNMjUwNjE0MDgwMDQ3WhcNMjUwNjE1MDgwMDQ3WjAzMTEwLwYDVQQD
Eyg2OGQ4YjlkOTQzNDc3YWUwOTBjZmYwNGM5N2IwMDUwZDYyNjA0NzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmA0HIX6HttQFOiln5n8PqfLB62o
M03mXGEfjaciWhFUO0WorqxuVTich/+50PC/N/84U4RZ7ML4vLi2pPswU28ynAeo
B1Yxz8E3lWQa1N4siR66ZRxRvENwfBzOAmUR04VwApGonFCs0dHYgiXijVfDruQn
fdiaca8DwchfejatsBf3GFPExCcmEKGvxcmzn9LlRS9QY5U3pUVPQcdzuGm+wdGQ
57dRYL8JApjATN95CIGYBvT7eR6HKMHsimFkyUJX4c5NUFE6L6SkKwfaHdQIlpqG
OnGMs9GSE9w8pWmoUiM16B6pwTRqjImzggIeKAUgZnBz3hD8YhVSighoxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjYudlDR3rgkM/wTJewBQ1iYEdxMB8GA1UdIwQY
MBaAFIvdB0vev0UVSia+v9zlU4KRU0sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTkt
NTBmYmY3ZTk1MDQyLzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTktNTBmYmY3ZTk1MDQy
LzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDJ47h9o
zh77veIUuQ0mIa7H/QsA3Pz2D8ffxTQfzh3+UbziqYlmLD886Bh241zTFueA9xMw
lFVoUGOS/fAhsfreE8F/upCCdxyBUPzeGGUIKvFxw3Lu+iyU7f3XaY8/Z3aG2Pz0
vJSyU3i2Q9QEHlfrLTsujDW29zNHgd06gdzFTCV/IwXRtgye4LgemEmjPkrw6YSv
BoXAxcS0F3tEDyfOXSDZo+29owJGtra2rl1L3dk0I56p/sf6R5DHtNLfWF79Lisc
nth9Ld35vYb2/ongt6RlmQrhLfHPpJlzAMbaQW+3y5mvGSSTBEnXAA9Wm1ZyayCo
hamaPXvFAHTxgA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:21 2025 by rpki-client