Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: lp89cKgs/OCORgxPkbD4iboI/+ttgP+wE734IwBHXrQ=
Subject key identifier: 40:CB:E5:D7:AB:B8:D3:97:52:E3:D6:B9:F9:2C:85:4E:E9:21:D1:74
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 01976215548E3A489ADCD64A56CE8CCABF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 07E9
Signing time: Thu 12 Jun 2025 03:00:54 +0000
Manifest this update: Thu 12 Jun 2025 03:00:54 +0000
Manifest next update: Fri 13 Jun 2025 03:00:54 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: k/BiqknGhd79eKtG8PoyGXgbX5RxKF8O+U7YK/b13MQ=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:54:8e:3a:48:9a:dc:d6:4a:56:ce:8c:ca:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Jun 12 03:00:54 2025 GMT
Not After : Jun 13 03:00:54 2025 GMT
Subject: CN=40cbe5d7abb8d39752e3d6b9f92c854ee921d174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:1b:e3:7f:67:15:7a:f1:81:f1:30:9a:83:
cb:23:ee:8c:2d:68:d9:56:10:37:eb:d0:e5:36:5d:
b0:84:83:1d:25:c3:c4:38:1a:c1:5e:65:c3:e7:31:
b3:df:ab:16:cf:d3:6c:00:8d:70:bb:54:24:4e:b9:
5c:81:36:5e:8a:18:9f:09:f0:c7:53:70:e9:96:21:
cb:29:84:8f:32:51:dd:63:39:cc:ad:38:7c:96:69:
92:18:ea:78:6c:f3:34:3c:8a:af:06:8e:ca:c6:57:
d1:4b:91:fb:0c:84:e0:a6:f2:67:ff:f7:55:ba:14:
59:23:5c:59:ad:e4:b0:df:c2:f2:13:43:51:95:db:
fc:b1:ea:80:fc:f9:8d:3c:23:42:fc:df:bf:0f:7b:
6a:d2:23:fd:fe:46:91:e4:17:31:ac:d4:27:36:54:
d3:6f:90:38:74:5c:c3:ea:9f:46:cd:a8:ad:c6:6d:
fc:6a:36:bf:38:54:26:af:98:42:e0:1a:75:e5:b7:
36:54:9a:3e:10:80:fd:f9:c4:76:be:b4:d7:6c:49:
7c:be:60:ac:20:64:a3:40:78:d1:3f:dc:24:74:95:
59:81:07:ac:72:d3:f5:04:99:44:f0:e0:5b:28:43:
62:be:4a:d4:36:00:21:89:83:79:34:95:00:56:52:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:E5:D7:AB:B8:D3:97:52:E3:D6:B9:F9:2C:85:4E:E9:21:D1:74
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:22:e6:9f:2d:b0:40:63:26:a5:28:3c:ef:10:b9:0f:f4:74:
a1:f3:23:40:a6:d2:f2:04:b5:6b:bd:70:93:12:61:c8:bc:a2:
b2:9a:23:cb:cf:b7:ad:23:44:e0:7f:a0:87:1b:33:27:2c:7d:
e3:2a:ba:7c:71:37:b5:0d:7f:13:ae:65:74:5d:dc:e5:38:e5:
52:94:da:87:e7:46:c0:c2:25:58:7a:68:a8:9b:3e:80:f0:3d:
bc:cf:3d:c6:dc:f6:96:26:9d:ae:52:b4:a1:17:41:06:46:e5:
9d:f5:35:a1:4c:5f:64:21:d2:f9:25:e8:f7:eb:30:ae:4e:e3:
b5:89:ef:07:9c:0b:7e:e6:30:03:de:cb:43:13:dd:b0:bb:d4:
1d:31:fb:25:74:46:6c:59:f6:46:1a:a1:37:e6:87:9b:90:5f:
97:c9:53:73:73:2e:58:cf:15:3a:c6:7c:59:6a:47:28:4c:17:
ea:c1:8a:18:68:c0:cf:a8:7d:26:43:f5:11:1f:62:7b:56:8a:
37:2c:6b:3f:9c:86:c4:e7:e6:af:68:52:15:3d:e0:dc:1d:b3:
51:f3:c1:0c:27:f6:7d:67:60:20:c4:7b:a3:be:38:eb:22:c6:
20:d0:fa:c0:2c:1e:65:04:e9:e3:4f:0f:df:4c:8d:01:51:00:
8c:48:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:50:25 2025 by rpki-client