Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: 7S3UKJEhoeY0P7/1oN4QruOb4I4efS24FbWtfm5BprA=
Subject key identifier: 27:A2:EC:47:01:F8:68:CD:F3:84:C2:3C:75:D2:60:C5:07:72:4A:D0
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 01975E38CE5042D9A9C0F02C00A8E0A3F70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 07E7
Signing time: Wed 11 Jun 2025 09:01:10 +0000
Manifest this update: Wed 11 Jun 2025 09:01:10 +0000
Manifest next update: Thu 12 Jun 2025 09:01:10 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: p8VF9ZYvhlU1nIfOjjxeGZk/2oSt9QULVEDlp1apP9o=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:ce:50:42:d9:a9:c0:f0:2c:00:a8:e0:a3:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Jun 11 09:01:10 2025 GMT
Not After : Jun 12 09:01:10 2025 GMT
Subject: CN=27a2ec4701f868cdf384c23c75d260c507724ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:15:3a:f3:10:eb:72:db:bf:3d:70:89:f0:
14:54:08:71:5d:74:c1:e1:74:70:31:65:c9:58:dd:
7d:42:50:2e:30:45:45:57:bb:ed:e5:d8:cd:be:6b:
e3:ef:10:71:42:cf:a2:c0:63:70:71:83:d6:71:2c:
cb:aa:22:e6:b9:60:26:c7:2b:33:c1:76:c2:dd:3a:
2a:0d:47:26:66:15:71:7d:46:8b:da:6f:f3:c0:19:
de:22:79:d6:22:19:83:e2:18:9e:1c:e1:0c:5a:71:
c8:eb:e3:02:7c:40:80:11:44:df:19:25:0f:e7:cf:
f6:15:7d:ac:a0:a4:b2:ed:1d:a9:0b:e2:b8:b1:f6:
8e:f1:66:67:30:27:d5:bc:fc:cc:19:c3:d9:6a:87:
63:cb:21:9d:c9:0f:eb:0d:e5:66:e4:0b:ca:7a:5a:
35:28:67:fa:13:ac:30:e7:94:49:ba:63:50:bc:48:
65:5e:8b:e7:f1:0c:e6:3b:1e:0d:b8:6d:37:07:5e:
55:34:a1:2a:22:3c:9f:8b:ea:f7:40:15:db:e8:af:
86:dd:49:5f:20:3b:fc:96:ba:e9:f0:96:13:87:5c:
2f:1e:95:c8:23:65:5d:65:1c:c7:cb:60:ab:3a:20:
25:71:82:c0:82:12:dc:da:9b:a6:9b:a6:45:fe:91:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:EC:47:01:F8:68:CD:F3:84:C2:3C:75:D2:60:C5:07:72:4A:D0
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c0:f3:4a:66:de:53:7e:9b:d3:e4:92:4c:c4:f9:5f:7f:8a:
8e:9e:af:35:6f:14:09:78:86:02:ff:ec:d5:4f:57:9f:c9:6a:
a3:a9:0a:f7:c6:6a:67:ae:67:94:b9:9d:39:6b:96:65:32:59:
b0:9f:81:5d:47:c2:e6:d4:f3:ef:6e:b0:0e:4b:89:f4:2e:28:
11:ba:73:41:54:93:3d:b6:83:a4:bf:3b:f5:a5:06:0a:a6:08:
a7:09:10:4e:35:6b:2f:b0:6a:75:f7:ec:ea:0f:60:32:ca:34:
20:42:65:61:b5:1f:a7:b2:ab:6b:2c:b2:5b:1d:0e:68:62:55:
9e:93:49:7a:84:60:09:41:ec:f1:af:e9:ff:6e:c5:92:a9:1b:
05:ac:a2:41:02:4e:e3:c3:7e:8b:41:87:a2:a8:ad:ac:2e:91:
d0:c9:be:d1:b4:e3:9d:91:5e:0f:e5:c4:86:45:b3:16:c5:97:
7e:3f:ca:dc:e6:02:36:33:83:fe:a8:ae:6c:82:30:a0:eb:bf:
ea:e1:5e:84:cc:71:b2:5f:cd:34:ad:8f:7e:50:24:a4:58:17:
b8:16:f0:9d:84:6e:12:1c:ad:36:cf:bf:cd:2e:da:30:c6:73:
ed:27:12:ee:ee:50:73:c6:3c:78:5c:2f:bc:fd:91:31:6e:9c:
66:5c:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:37:32 2025 by rpki-client