Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: Vm602OPG+yuUhK+4Lp3/Q4DN59dKFvhm+7UKGQ1BoRI=
Subject key identifier: B7:9C:5C:03:83:DA:FF:B3:17:02:D5:16:84:67:12:24:F7:D7:09:9C
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 0199FC582801B0FE3E7D004DD9AD73AD65C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 0942
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: AWEGcqNnPRcQ/zqFkcVUEA/6b4974BL5wiaVqhUoBFI=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:28:01:b0:fe:3e:7d:00:4d:d9:ad:73:ad:65:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=b79c5c0383daffb31702d51684671224f7d7099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:67:01:7e:d8:49:9e:d8:59:f3:39:2b:88:
c6:70:f5:07:4c:c5:20:f2:60:9a:b1:5b:bc:07:6f:
40:6f:61:a3:8e:ca:e7:8e:df:58:f4:60:73:e3:0c:
fe:d0:bb:9a:b4:3f:23:3f:fd:56:c8:95:6b:22:1a:
cc:97:58:49:15:18:e5:1d:e0:c2:27:92:24:03:69:
25:aa:b9:95:b3:cb:60:1b:11:9e:81:ac:0f:c1:53:
c0:c4:42:f1:25:1a:0a:06:9e:1e:93:49:c0:3b:bf:
18:ec:ab:0a:57:d6:94:20:a1:b6:60:ed:af:6d:4e:
f6:20:3a:aa:2a:c6:3a:48:16:dc:0a:59:a9:d5:48:
bc:a3:ad:e6:d2:b2:3d:e0:cf:a3:ee:dd:cf:19:51:
4c:c4:fc:ab:c7:20:54:c5:4a:54:08:27:82:f6:20:
ad:41:37:ae:ef:6b:7d:e8:3c:37:89:59:75:15:e8:
61:6d:94:e0:cd:fc:7a:f2:91:b4:2b:b2:ae:6a:67:
ff:50:d1:0b:9e:6d:46:e4:b2:a7:d8:35:14:c4:c8:
1a:9b:06:5c:67:45:dd:3e:4e:7e:b4:e5:e6:a8:65:
b9:0e:99:37:e4:2b:0a:3b:ff:68:da:f7:ec:d0:87:
d7:f2:8f:f3:2f:46:e6:4f:09:cb:0b:82:ea:21:6b:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9C:5C:03:83:DA:FF:B3:17:02:D5:16:84:67:12:24:F7:D7:09:9C
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:17:8d:aa:a8:26:b6:e0:86:2a:33:78:f0:8e:41:ab:ee:a1:
fe:48:a0:7f:19:68:f0:6c:50:d5:f8:9f:2e:97:34:1d:d0:5d:
9e:49:12:b8:78:10:c7:43:31:f1:9a:f4:a6:5c:27:f9:5a:8f:
47:82:f2:3d:74:35:fe:e5:c6:be:73:d8:ec:da:67:ba:69:94:
dd:bd:83:59:2c:04:07:d0:b1:10:63:73:09:16:0c:91:72:38:
56:1e:6f:b4:3c:a2:4e:db:ef:1e:45:50:73:1e:67:aa:70:13:
aa:48:e0:06:f7:f5:ad:8c:04:e8:19:e5:61:ae:fb:ee:c0:da:
83:d4:27:d6:af:53:5f:07:c6:d1:2d:ec:b5:fc:b1:4e:a8:25:
31:c5:2d:e5:d4:f5:59:15:02:f7:85:d0:6b:dc:aa:4d:c0:54:
29:68:84:8e:59:d4:d5:99:ad:92:d4:60:67:8b:62:0a:fc:d5:
0e:03:bf:60:11:d4:77:ed:ee:0e:3e:d1:1b:da:fb:d0:15:cf:
34:d2:6e:a2:72:65:e0:ed:fc:e9:54:f6:8f:24:2a:04:57:30:
fd:2c:9c:8c:f8:51:f2:e4:2c:9a:8f:f9:2f:93:70:9f:11:46:
86:df:48:03:31:f1:37:88:16:1f:dd:c4:df:33:8d:61:54:8e:
de:3d:6f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WCgBsP4+fQBN2a1zrWXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZGMxYTliZmZhMmNmMTVhN2Q4MDk5YzhhM2MzMTdjZTA3
ZGI1ZWEwHhcNMjUxMDE5MTIwMDU5WhcNMjUxMDIwMTIwMDU5WjAzMTEwLwYDVQQD
EyhiNzljNWMwMzgzZGFmZmIzMTcwMmQ1MTY4NDY3MTIyNGY3ZDcwOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHZnAX7YSZ7YWfM5K4jGcPUHTMUg
8mCasVu8B29Ab2Gjjsrnjt9Y9GBz4wz+0LuatD8jP/1WyJVrIhrMl1hJFRjlHeDC
J5IkA2klqrmVs8tgGxGegawPwVPAxELxJRoKBp4ek0nAO78Y7KsKV9aUIKG2YO2v
bU72IDqqKsY6SBbcClmp1Ui8o63m0rI94M+j7t3PGVFMxPyrxyBUxUpUCCeC9iCt
QTeu72t96Dw3iVl1FehhbZTgzfx68pG0K7Kuamf/UNELnm1G5LKn2DUUxMgamwZc
Z0XdPk5+tOXmqGW5Dpk35CsKO/9o2vfs0IfX8o/zL0bmTwnLC4LqIWtfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLecXAOD2v+zFwLVFoRnEiT31wmcMB8GA1UdIwQY
MBaAFIfcGpv/os8Vp9gJnIo8MXzgfbXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMt
NDlhZDk2ODRiMjE3LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMtNDlhZDk2ODRiMjE3
LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxeNqqgm
tuCGKjN48I5Bq+6h/kigfxlo8GxQ1fifLpc0HdBdnkkSuHgQx0Mx8Zr0plwn+VqP
R4LyPXQ1/uXGvnPY7NpnummU3b2DWSwEB9CxEGNzCRYMkXI4Vh5vtDyiTtvvHkVQ
cx5nqnATqkjgBvf1rYwE6BnlYa777sDag9Qn1q9TXwfG0S3stfyxTqglMcUt5dT1
WRUC94XQa9yqTcBUKWiEjlnU1ZmtktRgZ4tiCvzVDgO/YBHUd+3uDj7RG9r70BXP
NNJuonJl4O386VT2jyQqBFcw/SycjPhR8uQsmo/5L5NwnxFGht9IAzHxN4gWH93E
3zONYVSO3j1vAA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:21 2025 by rpki-client