Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: xhwBTyqXbSIYkcBGvKsCdSTUdueMnMUKxRdKg+FNK9w=
Subject key identifier: F0:05:89:1E:12:15:7B:8D:B2:F2:EE:05:C2:A4:66:4D:91:49:EB:F2
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 01976026AAE4B7D7E0116FC74684BCEA2CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 07E8
Signing time: Wed 11 Jun 2025 18:00:36 +0000
Manifest this update: Wed 11 Jun 2025 18:00:36 +0000
Manifest next update: Thu 12 Jun 2025 18:00:36 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: xKmSH6K3kgnOMUyvrsIohOBu1ohbzp3yIn3mYpc2dVg=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:aa:e4:b7:d7:e0:11:6f:c7:46:84:bc:ea:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Jun 11 18:00:36 2025 GMT
Not After : Jun 12 18:00:36 2025 GMT
Subject: CN=f005891e12157b8db2f2ee05c2a4664d9149ebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:29:3a:7b:c7:9e:0e:fe:2c:f8:8b:a6:36:
79:4b:07:23:57:a1:3f:2c:7f:bc:e2:83:b2:7f:95:
ff:d9:6a:df:b2:d6:22:a2:61:54:8c:08:4b:8e:9a:
ac:5f:c6:19:8f:66:0a:40:f5:9b:3b:0e:c2:a0:17:
20:f4:01:72:e9:22:99:e2:36:3f:50:3c:f9:86:54:
02:74:06:e2:5d:73:64:0e:ac:3e:f3:33:91:e4:d4:
fa:4c:e2:a8:95:91:4a:46:70:a4:dd:99:b2:e9:64:
e1:0b:c6:1d:63:a7:d5:18:91:2c:34:0d:78:d8:72:
79:2e:9a:87:c4:14:b4:37:20:be:70:c3:c9:67:da:
5d:48:89:d0:01:05:c3:f2:96:c3:a2:a1:7f:f3:3b:
8f:2b:cb:40:f0:b4:3a:b4:a1:bd:68:de:15:cd:6c:
ce:4a:fc:a6:08:04:14:40:3a:74:65:50:c0:93:8f:
3e:ac:de:df:bb:cd:21:ef:44:c5:e2:37:a1:a4:f3:
fa:7e:5f:15:b0:aa:71:7a:35:46:98:84:c4:f6:e9:
84:d7:8e:25:0c:ef:03:3b:01:a6:67:d8:f1:15:37:
1e:f1:dc:5a:77:2a:68:df:c5:6f:8d:5c:ed:aa:97:
62:f8:a5:d5:2a:70:6d:f5:53:eb:5f:c5:10:6f:28:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:05:89:1E:12:15:7B:8D:B2:F2:EE:05:C2:A4:66:4D:91:49:EB:F2
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bf:3d:90:f3:04:38:e1:9f:f0:cf:24:25:33:59:13:67:95:
67:c7:f7:a9:1d:26:f1:e0:ff:d3:1b:9b:61:1a:ee:59:13:91:
8f:2a:00:3b:65:7c:7f:0d:a9:fa:e6:b0:88:4c:86:9a:48:c2:
7f:9e:02:e9:14:dc:51:17:80:65:79:e3:18:64:69:48:24:f2:
91:bd:10:14:f3:1b:79:bf:38:de:68:14:af:99:d0:6e:96:9f:
31:05:e7:77:85:b6:11:c6:df:55:55:15:4f:f7:2a:fb:64:2f:
c6:a4:b7:68:53:2a:52:0a:08:c1:bc:c7:7e:d6:e2:2f:27:e3:
71:e8:7a:65:3d:a0:b4:7c:2c:1f:3c:4b:26:11:9e:97:c7:11:
c0:6f:00:8d:5c:e8:6d:2b:10:31:64:2d:62:d0:95:eb:cf:19:
56:83:c8:b7:2b:05:83:a9:1d:cf:b9:82:56:a3:5a:75:17:33:
36:6d:66:d0:5a:4b:f7:36:3b:4e:60:13:85:82:e5:9e:0f:17:
3e:f5:79:0a:da:d8:58:a6:86:10:10:5e:f0:d1:1c:2e:da:5a:
62:bb:b9:02:d2:0c:c4:3b:c0:10:dd:6b:9a:e9:de:a1:b9:d7:
94:e3:89:cf:b1:e1:55:49:3c:2c:c6:ca:94:2a:52:ba:5e:f9:
09:3b:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:55:31 2025 by rpki-client