Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: brUeR/Eh5H9JZJR+nNViwU3nZq3AdilHpbVrgowfa7o=
Subject key identifier: 01:B9:DB:72:ED:E2:FA:40:BE:B1:42:7A:1F:54:60:1A:F1:89:67:62
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 0196C9851BCEB3060D759C42B2F7668771AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 079A
Signing time: Tue 13 May 2025 12:01:05 +0000
Manifest this update: Tue 13 May 2025 12:01:05 +0000
Manifest next update: Wed 14 May 2025 12:01:05 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: XAv5rTdujFBNJP5VUTlLcHZ9tzYFdxG9NFT4t6sCXXY=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:85:1b:ce:b3:06:0d:75:9c:42:b2:f7:66:87:71:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: May 13 12:01:05 2025 GMT
Not After : May 14 12:01:05 2025 GMT
Subject: CN=01b9db72ede2fa40beb1427a1f54601af1896762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:1f:f0:71:29:3d:75:f5:3f:63:af:12:c0:
1a:1d:4e:d4:b4:35:ee:fa:53:54:e7:d0:94:62:7f:
33:87:c5:73:6e:ed:8f:54:11:bb:90:4f:dc:91:15:
fd:2c:a1:35:2b:34:fa:c6:17:f3:a3:d2:16:c3:ab:
65:16:18:aa:a2:45:f2:36:41:0c:8c:ef:52:b8:28:
82:ba:06:45:0a:34:f2:18:00:c1:30:bb:1d:7e:5b:
65:f4:a7:e7:f1:cb:59:fa:62:c1:11:ee:8a:bb:1e:
ac:d9:63:9b:34:cd:f2:58:a3:a6:25:87:4c:5f:b6:
2f:d7:02:e6:39:74:5a:f8:af:66:7b:28:11:ac:e3:
ee:2a:5b:ae:d7:e9:98:4b:7a:e7:28:fc:2b:4c:77:
66:6c:56:23:44:ab:89:55:c7:e0:c9:d5:7d:65:23:
d7:34:ca:0a:7d:ef:cc:ae:3e:de:81:63:21:13:60:
94:ca:30:35:4f:de:cd:b3:49:73:8f:6c:13:a5:d8:
47:52:d6:96:91:0d:55:69:4e:15:8c:79:44:c0:e6:
8e:ef:47:d6:1f:4e:b9:dd:c0:cb:0f:54:c4:9a:d6:
d9:2b:39:f6:fd:91:89:58:be:eb:a2:31:6c:49:9d:
bb:2f:93:b4:0e:84:f9:92:5c:5b:35:6c:39:d8:6e:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B9:DB:72:ED:E2:FA:40:BE:B1:42:7A:1F:54:60:1A:F1:89:67:62
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:26:75:6a:c0:58:9e:dd:cd:1f:39:b5:4b:ba:0f:8f:99:60:
e7:57:8f:90:6a:e7:24:f7:14:21:0b:a0:3f:89:86:a5:a1:f2:
ec:08:0c:06:9f:f6:c4:3e:bd:dd:d3:19:d6:aa:91:9c:57:1c:
21:77:5a:eb:92:20:c5:53:e1:ec:b0:48:f1:70:a6:e5:3a:e2:
4b:81:d2:92:37:67:c4:34:6c:f3:5c:80:0c:8e:f1:c3:c6:f7:
b0:e7:e2:c7:6b:1c:23:88:73:d2:bd:f9:e2:74:a9:1e:4d:de:
fa:82:16:60:d8:81:16:11:dd:7f:d2:ec:fa:3a:54:c3:50:f6:
c0:62:06:af:6a:2e:df:32:8e:cf:b9:70:b8:91:c3:be:5f:2f:
49:80:a5:98:20:ea:7f:2f:f3:f6:8a:1a:bf:c6:95:ab:71:14:
c3:eb:60:0b:5b:36:f6:58:a3:7f:a4:64:2c:dc:b2:c0:bb:91:
73:fc:3c:f4:81:01:89:32:52:4e:c9:cc:40:54:40:3c:56:5d:
c4:d2:33:b8:be:a0:1e:51:2c:26:5b:89:4d:40:99:e9:6c:eb:
45:e9:14:1a:b0:d1:e6:ab:56:1a:f6:2e:9e:fa:c6:fc:43:fe:
10:c8:77:2e:24:6a:d8:32:27:39:85:bd:90:0c:d5:64:d3:84:
60:d3:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:12:50 2025 by rpki-client