Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: nZ4bw0GAhzdzj2JaZ/kE0cjQ9pVjOW3oRB5YFf0Z8E0=
Subject key identifier: 60:87:F9:78:9D:83:41:06:14:81:26:F8:44:D2:39:A1:EB:76:7C:51
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 01976DAB2974A5B407B77A826E51B15A9CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 07EF
Signing time: Sat 14 Jun 2025 09:00:23 +0000
Manifest this update: Sat 14 Jun 2025 09:00:23 +0000
Manifest next update: Sun 15 Jun 2025 09:00:23 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: 7xGEMmw7U2M96se6C7xpnUM6AuGq7qmX1wGAl+XG6aw=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:29:74:a5:b4:07:b7:7a:82:6e:51:b1:5a:9c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Jun 14 09:00:23 2025 GMT
Not After : Jun 15 09:00:23 2025 GMT
Subject: CN=6087f9789d834106148126f844d239a1eb767c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:d7:09:c3:4a:0c:2c:09:d2:11:61:a7:65:
c5:f5:70:a0:9e:2f:81:1a:a7:89:2d:ca:04:8f:75:
91:fb:7d:68:85:27:c9:ef:67:79:0b:14:eb:e6:8b:
25:bf:62:ea:bc:1c:c0:f8:dc:ed:97:cc:11:dd:4d:
88:7a:d1:e3:55:2f:75:de:f7:1e:6d:1a:89:c4:32:
59:c9:47:7a:cd:77:db:a7:a5:38:72:80:29:86:1f:
24:ce:50:4b:6f:b7:ca:5a:57:9a:82:a7:cc:4c:f0:
59:c1:6d:4f:ea:d5:0a:f3:ff:00:41:6c:03:8a:5f:
56:bf:5b:fd:4c:78:f9:c1:83:3c:f7:fe:53:79:d5:
30:b7:7a:58:12:16:c8:a5:7a:26:1d:9a:f7:e9:7b:
39:32:f7:33:19:00:e7:2a:9c:ac:69:1f:5a:f5:e9:
4f:27:9e:c7:32:a4:ea:ff:9e:a5:50:fc:77:2d:76:
f3:1c:ee:3c:c4:91:ca:50:b6:69:64:e1:44:51:2e:
f1:ba:c8:93:9d:32:47:d3:6a:67:81:8a:63:05:68:
9e:73:24:9b:b3:d4:53:ce:41:d5:cd:99:e8:6d:d3:
62:10:d4:38:c3:b2:a4:4e:f5:01:e7:1f:75:c5:46:
5f:6d:88:37:3b:d9:6c:e7:21:00:42:11:09:5b:7d:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:F9:78:9D:83:41:06:14:81:26:F8:44:D2:39:A1:EB:76:7C:51
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:58:d5:01:dc:36:54:0a:5f:0a:62:a4:de:8c:1f:7f:a9:
a8:5c:96:85:ad:b0:ac:8d:26:76:45:42:9a:aa:46:99:96:79:
32:0c:d8:5f:d9:b6:7e:77:ba:0d:9e:08:65:4c:85:55:02:26:
f6:48:19:93:52:4b:dc:f7:c3:16:7e:72:cb:e8:8f:2b:47:b2:
a4:57:4e:ed:e7:da:8f:1b:b9:d7:d0:84:7e:6c:ad:7a:98:2c:
75:d4:07:ae:5f:58:e1:52:b8:e9:e6:48:1e:ad:09:33:24:52:
d4:11:13:e0:c3:3e:6e:b4:9d:cd:90:72:f9:74:85:0e:c6:51:
6b:84:b4:36:53:eb:b9:9b:a1:73:1a:c1:b3:80:1c:b6:70:88:
b7:c2:12:39:f0:02:70:e1:c6:67:b7:5b:78:7c:3a:e6:49:74:
b0:39:21:64:a5:1c:e3:59:39:ba:13:f4:00:75:57:94:89:9a:
5f:96:05:4b:da:79:56:84:78:92:90:e0:9c:a8:ca:85:99:fc:
cc:5c:6e:ea:f4:6d:74:11:29:c1:54:12:d0:ee:7f:ae:ba:9f:
e5:2d:56:04:0a:e2:6e:60:18:5b:4c:13:e8:4f:59:95:78:c8:
f5:5f:70:db:b9:54:3b:18:9b:3f:6f:a9:ac:16:a8:52:4d:7c:
8f:e0:e1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:07:52 2025 by rpki-client