Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: UHSmOYpaY2a5cGEv8fEvyNfBAJK70S4dqZ4xb8zDxio=
Subject key identifier: EF:F8:DE:02:38:F9:9E:6B:36:0D:FC:E7:88:0D:E5:13:45:39:B5:73
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 01964A0F8A1FAA6021563B9886BB7B081FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 0758
Signing time: Fri 18 Apr 2025 18:00:54 +0000
Manifest this update: Fri 18 Apr 2025 18:00:54 +0000
Manifest next update: Sat 19 Apr 2025 18:00:54 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: UEaaNxf6kUD+ntHM0X5Kb62B9/gXp6XnDAonEOgT1GQ=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:8a:1f:aa:60:21:56:3b:98:86:bb:7b:08:1f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Apr 18 18:00:54 2025 GMT
Not After : Apr 19 18:00:54 2025 GMT
Subject: CN=eff8de0238f99e6b360dfce7880de5134539b573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:da:e9:83:47:e7:5d:f0:54:12:79:24:21:
11:db:5b:68:f9:a3:03:43:ef:85:d7:94:aa:66:20:
11:08:ea:cf:d2:bb:ff:33:d7:52:9e:c6:64:cc:f9:
18:1c:ff:9d:99:d2:c9:49:76:e5:09:53:a8:0d:83:
91:5a:94:4f:12:ff:1c:92:f8:5d:39:55:25:5a:38:
0d:65:77:83:9b:2f:55:29:41:64:e4:95:b6:b3:5e:
e0:cc:cf:46:5e:8f:ab:d4:91:a0:20:ef:b0:81:d5:
a3:b3:b3:a1:09:12:db:e2:a6:80:5e:0f:27:ce:22:
07:9c:ee:1a:e5:1f:61:d2:af:72:9c:22:6b:57:04:
4a:5d:90:3b:46:dc:b5:0a:4c:01:b8:90:35:53:cd:
08:ce:7d:4b:c7:2e:83:0e:36:a5:08:5a:18:65:cc:
a1:73:c3:3c:f1:0b:40:6b:35:f6:31:ed:43:67:ec:
74:a0:da:45:0c:8c:1a:ac:ee:2c:10:36:3d:22:e2:
39:79:13:0b:e7:49:e3:ff:2e:4f:7f:b9:cb:8f:d6:
22:0f:90:77:83:ed:0e:20:31:5a:c2:a9:42:f2:c0:
b7:64:6d:09:00:4b:50:33:ea:ef:1d:1d:20:93:2c:
6c:54:97:e4:be:0f:2e:9b:d0:10:1f:44:19:b9:6a:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:DE:02:38:F9:9E:6B:36:0D:FC:E7:88:0D:E5:13:45:39:B5:73
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:35:c3:9a:d5:eb:61:81:25:f9:26:0d:8c:0c:13:c3:ff:ac:
66:89:fa:b0:5a:fd:7d:d9:db:14:e7:24:46:14:0f:35:29:20:
9f:62:f7:3f:3d:6b:0f:29:88:48:9f:c1:6e:42:d1:c8:11:fc:
48:a0:f0:6f:86:1b:e9:e8:99:59:00:04:b8:62:64:34:19:d6:
95:a8:c3:e4:a2:bc:4b:bc:ff:6e:0d:f3:22:09:ae:d5:8a:8f:
b3:e6:54:e0:5f:c0:66:74:83:6b:f4:92:2f:85:f6:8d:a6:d3:
a8:ee:24:f4:f6:b6:c1:4f:17:8f:cc:5a:d5:2e:c9:63:fa:12:
6e:cd:13:73:5b:12:8c:bf:49:67:28:cc:86:41:79:53:fa:3d:
53:a2:80:9b:b3:15:86:ec:f6:ea:32:ef:17:11:6b:51:17:8b:
7d:32:50:31:84:ec:5f:04:f3:73:26:7a:d1:70:10:c6:9f:3a:
ec:e2:fa:dd:d2:a8:61:d0:ca:bf:a3:aa:f7:4d:2a:91:67:61:
41:2a:c3:93:12:06:fe:db:93:e2:f4:0d:8b:63:52:d0:8c:fa:
87:c8:41:17:03:73:f0:d8:8c:71:a6:4f:9f:9d:f6:7c:88:87:
71:32:e3:74:dc:55:b3:1e:83:fb:aa:2f:a4:25:76:1c:fd:5b:
ec:f3:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:24:08 2025 by rpki-client