Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: /fJge3dfP3x/np5JFt+thmXd1hUpy3LRVsf+f46qGEg=
Subject key identifier: 1D:93:51:07:91:E2:42:19:59:AE:4B:5A:4E:42:DA:B3:4A:E3:8F:94
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 019A722612006FDA5FC7F9B958DF220C4C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 097F
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: uiam5Bt0P666wMlZrvkFu2Q4vMIGypmTFUFXXS+qPHE=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:12:00:6f:da:5f:c7:f9:b9:58:df:22:0c:4c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=1d93510791e2421959ae4b5a4e42dab34ae38f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c0:aa:b7:41:14:7f:ed:2e:b9:eb:70:52:2c:
4e:90:85:80:de:90:c8:d5:fa:28:fe:38:90:2b:86:
39:d7:d1:4b:bf:d2:88:e4:af:47:8f:a9:da:93:57:
09:9d:94:5a:c9:c7:12:bb:90:c3:39:c6:78:a1:47:
ae:15:9b:b9:31:a5:b2:9e:fe:ea:2e:5d:1f:2c:ac:
fc:77:44:33:03:98:42:58:34:47:44:b8:c8:74:72:
ec:74:62:2c:31:d5:49:22:24:9e:1e:37:51:f3:8e:
b2:71:86:65:f9:ec:ab:37:81:1c:d5:63:96:7d:8a:
e2:2a:56:89:6a:97:d3:38:3e:1e:78:12:84:33:d1:
ea:15:16:dc:6a:8a:66:89:ab:83:52:13:57:c4:b5:
05:b0:e2:47:01:dd:bf:ed:5a:99:dd:16:06:1f:1d:
4d:af:c7:4a:cf:21:12:b8:de:95:4d:09:47:5c:58:
2a:69:a2:79:1a:f6:f7:7c:c0:33:e2:cf:e7:f0:6e:
9e:e6:5b:0a:f3:39:2e:c3:64:49:95:19:09:9a:86:
32:73:24:e4:e6:7b:48:a4:aa:f9:98:fa:64:2d:28:
2b:cf:2f:3b:91:59:72:44:62:80:7b:66:ad:76:3d:
37:15:89:2f:42:0c:7d:47:30:03:9f:2c:3c:40:67:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:93:51:07:91:E2:42:19:59:AE:4B:5A:4E:42:DA:B3:4A:E3:8F:94
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a1:ea:52:b3:68:f0:26:5c:ec:fd:b2:ef:a1:ce:23:2e:61:
07:46:c8:c3:83:d4:68:12:6e:bd:78:55:7f:6d:65:33:84:fb:
d1:dc:3c:f5:8e:09:db:e7:b0:db:85:81:b9:9f:ae:82:22:e3:
37:cf:e0:7c:cd:81:56:6e:0e:52:86:b3:ce:b7:6e:eb:ce:84:
e8:3e:6b:a1:f9:20:03:5e:fa:a2:36:cd:f3:f7:3e:16:b4:d4:
9c:fe:82:21:5c:d8:12:fe:13:59:26:50:e1:a1:d0:58:98:8c:
da:4c:b1:1a:6a:7e:4c:1e:96:a3:40:85:59:4b:8b:86:52:86:
03:a3:3b:82:be:a9:53:16:31:39:89:63:73:10:14:b3:ca:ae:
eb:59:e4:fd:34:66:7b:c1:dd:6b:98:1f:bf:5f:16:64:53:98:
24:e1:94:0d:d5:5a:7a:0f:b2:38:56:ef:41:d1:c8:1f:d4:84:
9a:d7:73:76:fb:e3:1c:bb:bf:12:67:3a:31:68:18:23:0f:ad:
2a:dc:aa:a7:0a:23:23:85:d5:6e:04:36:9c:4a:af:d2:2b:89:
26:78:f0:ce:27:6b:38:b4:6e:1b:38:3c:0d:cc:46:0f:2e:25:
a6:0f:dd:c3:59:25:5d:c0:21:37:d9:10:c1:4a:40:6a:56:fc:
84:12:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:13:58 2025 by rpki-client