Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: b1+/AKUSxHPbqtYUmFclwdnvEGLJTkaHpx6Y+KwFplQ=
Subject key identifier: D4:1F:3E:80:C5:9A:A2:60:B9:6E:C7:E6:66:FB:04:D5:7B:6C:10:47
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 0198D8BCD65364E100C3050559396B85A725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 08AB
Signing time: Sat 23 Aug 2025 21:01:50 +0000
Manifest this update: Sat 23 Aug 2025 21:01:50 +0000
Manifest next update: Sun 24 Aug 2025 21:01:50 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: +tHSC0DXBYlwvyPwLpq+3/7Vepp9GIJbMwO2vHGPr2E=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:d6:53:64:e1:00:c3:05:05:59:39:6b:85:a7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Aug 23 21:01:50 2025 GMT
Not After : Aug 24 21:01:50 2025 GMT
Subject: CN=d41f3e80c59aa260b96ec7e666fb04d57b6c1047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:db:21:2a:3f:ff:1e:ba:65:63:69:be:71:
ea:ac:eb:a4:d0:7c:61:a5:6e:d2:37:4a:2d:be:8e:
40:b4:e2:3d:a2:a8:ac:78:5c:21:5d:63:21:45:e5:
17:d4:e1:f7:22:92:6a:7c:44:6e:e5:ef:69:05:41:
14:a1:7b:a9:95:17:eb:92:c2:d0:26:ce:af:c4:b8:
11:f7:28:85:7e:1c:43:5d:e2:ab:71:bf:f1:e5:b6:
64:39:5e:ae:2c:91:18:e2:aa:76:32:b6:09:19:03:
0c:69:3d:40:e6:60:3d:66:5b:52:d3:73:c5:8f:a3:
0a:a3:50:ea:e2:cb:b1:ce:cf:4b:d8:d5:6f:28:11:
8f:e6:d5:09:74:5c:42:86:7e:c1:8b:e2:a7:b6:ec:
5e:0a:5a:a2:39:c1:b7:19:58:de:b8:62:01:fa:03:
eb:57:85:ce:ec:bc:7a:0d:06:fe:a0:09:f7:bd:77:
f3:2b:37:63:12:5b:d2:f5:f7:d4:45:7f:c5:97:a0:
cb:9e:01:84:ee:69:55:83:21:23:34:a1:ae:0e:8f:
73:d8:a4:2d:cc:9e:f9:55:9f:95:a5:29:52:70:a5:
bc:e3:81:8f:d4:f2:54:16:5c:c4:c5:b3:c2:88:ae:
b1:f9:cc:56:08:fc:41:82:0d:4b:f0:02:ba:b6:5c:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1F:3E:80:C5:9A:A2:60:B9:6E:C7:E6:66:FB:04:D5:7B:6C:10:47
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:02:4a:a3:6e:a9:c2:2a:cf:da:a1:02:4b:6d:88:33:14:73:
ff:3b:3b:dd:b4:f8:02:e1:5d:e3:79:11:b3:5e:5f:f5:7c:67:
34:ae:69:36:f4:58:8c:93:91:08:a9:7e:fb:97:89:91:f2:64:
27:70:6d:0e:1b:b4:28:04:d2:05:02:97:9e:53:e4:11:1f:68:
93:86:c4:9b:db:37:1e:a9:2e:2b:b0:10:b6:01:a0:8c:76:47:
bf:89:c2:23:de:ba:5d:af:00:40:a8:a4:50:36:9f:39:6d:74:
ee:cd:2e:2b:10:31:75:c6:19:43:48:99:d7:70:94:14:8b:7b:
b6:7e:cc:77:87:7d:cc:b9:fe:45:b9:92:68:a4:3c:83:2c:19:
0c:63:88:8d:93:88:90:3a:75:8d:6c:dc:36:81:68:c1:03:37:
6e:4d:f8:13:b2:45:35:6c:20:82:0c:b4:6d:50:a1:4f:cc:21:
61:8c:a8:ad:1d:e4:ca:6f:c3:2d:a9:1a:48:17:cd:5e:8b:cf:
b7:3e:ab:bb:88:ce:ab:75:4b:8c:f1:50:53:d9:26:d8:9f:e1:
db:8f:64:90:16:ff:c0:66:d3:1a:df:fc:12:9e:e9:bf:e5:ec:
e6:62:99:da:0e:d7:30:d2:f3:71:ec:e1:1d:e5:1c:e6:86:80:
d4:a4:b4:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvNZTZOEAwwUFWTlrhaclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZGMxYTliZmZhMmNmMTVhN2Q4MDk5YzhhM2MzMTdjZTA3
ZGI1ZWEwHhcNMjUwODIzMjEwMTUwWhcNMjUwODI0MjEwMTUwWjAzMTEwLwYDVQQD
EyhkNDFmM2U4MGM1OWFhMjYwYjk2ZWM3ZTY2NmZiMDRkNTdiNmMxMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NDbISo//x66ZWNpvnHqrOuk0Hxh
pW7SN0otvo5AtOI9oqiseFwhXWMhReUX1OH3IpJqfERu5e9pBUEUoXuplRfrksLQ
Js6vxLgR9yiFfhxDXeKrcb/x5bZkOV6uLJEY4qp2MrYJGQMMaT1A5mA9ZltS03PF
j6MKo1Dq4suxzs9L2NVvKBGP5tUJdFxChn7Bi+KntuxeClqiOcG3GVjeuGIB+gPr
V4XO7Lx6DQb+oAn3vXfzKzdjElvS9ffURX/Fl6DLngGE7mlVgyEjNKGuDo9z2KQt
zJ75VZ+VpSlScKW844GP1PJUFlzExbPCiK6x+cxWCPxBgg1L8AK6tlzDeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQfPoDFmqJguW7H5mb7BNV7bBBHMB8GA1UdIwQY
MBaAFIfcGpv/os8Vp9gJnIo8MXzgfbXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMt
NDlhZDk2ODRiMjE3LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMtNDlhZDk2ODRiMjE3
LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxAJKo26p
wirP2qECS22IMxRz/zs73bT4AuFd43kRs15f9XxnNK5pNvRYjJORCKl++5eJkfJk
J3BtDhu0KATSBQKXnlPkER9ok4bEm9s3HqkuK7AQtgGgjHZHv4nCI966Xa8AQKik
UDafOW107s0uKxAxdcYZQ0iZ13CUFIt7tn7Md4d9zLn+RbmSaKQ8gywZDGOIjZOI
kDp1jWzcNoFowQM3bk34E7JFNWwgggy0bVChT8whYYyorR3kym/DLakaSBfNXovP
tz6ru4jOq3VLjPFQU9km2J/h249kkBb/wGbTGt/8Ep7pv+Xs5mKZ2g7XMNLzcezh
HeUc5oaA1KS0Ew==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:43:00 2025 by rpki-client