Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: Uy4yKLHYFfgRHGkz9do0lVlR5tOxeMCyPkRVHSrDH5I=
Subject key identifier: F8:21:58:67:49:D3:07:C5:FE:26:1E:99:F8:35:9F:19:28:BD:D1:D4
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 0197CC4CEBA4FE61570309E78F8320612D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 0820
Signing time: Wed 02 Jul 2025 18:01:22 +0000
Manifest this update: Wed 02 Jul 2025 18:01:22 +0000
Manifest next update: Thu 03 Jul 2025 18:01:22 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: 70wM0lY/4gxyEgCF9HkgMenel79GdFTD4gQKxTKveI4=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:eb:a4:fe:61:57:03:09:e7:8f:83:20:61:2d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Jul 2 18:01:22 2025 GMT
Not After : Jul 3 18:01:22 2025 GMT
Subject: CN=f821586749d307c5fe261e99f8359f1928bdd1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:87:fd:97:2b:71:ba:28:97:db:79:53:88:
06:21:12:61:09:b6:91:79:ca:ca:fa:18:04:ca:d9:
e5:3a:be:18:32:17:36:7b:0d:d1:f7:69:1a:62:d0:
e3:d1:cc:67:98:53:d1:af:e0:02:f6:e1:89:80:50:
44:7c:f1:15:b0:d2:84:99:9d:3b:c3:6a:d6:8d:d3:
4c:d3:31:6a:d3:6e:3d:a1:ae:87:af:c0:ec:5e:98:
c7:e3:76:01:40:2e:53:26:7e:c3:d9:1b:14:bb:69:
1c:d9:c5:85:0c:13:de:e2:eb:ca:32:b2:5b:15:d6:
75:43:03:6c:a3:1f:81:8a:b5:8a:2a:ff:fe:11:d4:
34:2c:25:e7:f9:d1:d4:ab:16:7d:3c:59:51:de:e6:
c4:84:98:06:c9:5e:d6:48:62:18:a2:0d:16:f0:8e:
c7:b4:68:bb:0c:4d:be:8f:7c:6e:73:dd:08:76:86:
80:d0:29:5d:0a:0e:a7:d2:44:bb:3b:9e:6d:9f:69:
9f:15:7c:2d:93:2e:9f:c1:f3:5a:c6:1c:41:81:4d:
d9:7b:d9:22:dd:dd:23:88:d5:67:c3:63:80:e3:7d:
be:85:a5:49:14:fd:17:9e:fa:7d:b5:74:cf:aa:31:
99:cf:b0:6e:b0:e6:8f:8d:6e:14:36:a6:4d:95:63:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:58:67:49:D3:07:C5:FE:26:1E:99:F8:35:9F:19:28:BD:D1:D4
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bd:fa:ef:80:1a:93:09:09:da:ce:c7:b2:95:9e:7b:61:8f:
54:14:96:20:51:16:23:65:fb:bc:29:6c:14:e5:ac:c1:8f:cc:
89:7a:ec:c3:f6:ee:2e:17:ab:c7:ae:77:33:d3:d9:0d:7a:26:
0c:5e:1a:8b:e4:9d:de:89:7b:f5:7f:84:b4:19:14:3d:47:16:
2a:89:60:9a:c4:cb:d5:0f:60:00:26:e0:58:44:d5:31:a8:bb:
aa:51:14:fe:c5:d6:95:86:dc:bc:e8:64:3c:bb:87:dd:8c:32:
45:66:3a:8c:2b:ae:59:6d:78:42:5f:af:4f:4a:a0:3e:26:df:
db:54:d2:f0:59:b6:6b:a2:be:a2:8d:1d:ce:2f:cf:29:36:5d:
34:86:f3:46:7c:a6:12:f9:89:d7:91:95:9f:0f:9f:31:aa:75:
29:de:26:46:50:2d:76:06:7e:f2:d7:5e:c1:0a:77:00:3a:f3:
f3:d9:72:a2:aa:2c:97:04:74:3c:c0:93:db:90:97:de:4f:a1:
d5:a9:44:1e:c9:93:72:f4:78:82:56:12:c3:61:df:65:9f:a8:
2d:0c:ba:82:ec:aa:25:3f:1a:61:db:96:e0:20:9f:9c:89:74:
57:a0:4e:46:aa:79:92:c9:f0:57:d0:a2:65:f7:42:b6:5b:dd:
ca:b6:07:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMTOuk/mFXAwnnj4MgYS1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZGMxYTliZmZhMmNmMTVhN2Q4MDk5YzhhM2MzMTdjZTA3
ZGI1ZWEwHhcNMjUwNzAyMTgwMTIyWhcNMjUwNzAzMTgwMTIyWjAzMTEwLwYDVQQD
EyhmODIxNTg2NzQ5ZDMwN2M1ZmUyNjFlOTlmODM1OWYxOTI4YmRkMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyaH/Zcrcbool9t5U4gGIRJhCbaR
ecrK+hgEytnlOr4YMhc2ew3R92kaYtDj0cxnmFPRr+AC9uGJgFBEfPEVsNKEmZ07
w2rWjdNM0zFq0249oa6Hr8DsXpjH43YBQC5TJn7D2RsUu2kc2cWFDBPe4uvKMrJb
FdZ1QwNsox+BirWKKv/+EdQ0LCXn+dHUqxZ9PFlR3ubEhJgGyV7WSGIYog0W8I7H
tGi7DE2+j3xuc90IdoaA0CldCg6n0kS7O55tn2mfFXwtky6fwfNaxhxBgU3Ze9ki
3d0jiNVnw2OA432+haVJFP0Xnvp9tXTPqjGZz7BusOaPjW4UNqZNlWMXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPghWGdJ0wfF/iYemfg1nxkovdHUMB8GA1UdIwQY
MBaAFIfcGpv/os8Vp9gJnIo8MXzgfbXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMt
NDlhZDk2ODRiMjE3LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMtNDlhZDk2ODRiMjE3
LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJL3674Aa
kwkJ2s7HspWee2GPVBSWIFEWI2X7vClsFOWswY/MiXrsw/buLherx653M9PZDXom
DF4ai+Sd3ol79X+EtBkUPUcWKolgmsTL1Q9gACbgWETVMai7qlEU/sXWlYbcvOhk
PLuH3YwyRWY6jCuuWW14Ql+vT0qgPibf21TS8Fm2a6K+oo0dzi/PKTZdNIbzRnym
EvmJ15GVnw+fMap1Kd4mRlAtdgZ+8tdewQp3ADrz89lyoqoslwR0PMCT25CX3k+h
1alEHsmTcvR4glYSw2HfZZ+oLQy6guyqJT8aYduW4CCfnIl0V6BORqp5ksnwV9Ci
ZfdCtlvdyrYHdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:15:18 2025 by rpki-client