Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: wB0bZnAKhbJqrtWZrCjQaK0WwdXCngUC2Z9vD1zZOWE=
Subject key identifier: E8:06:9C:9C:86:DF:02:49:B5:AA:83:5D:E0:B9:46:CB:9E:44:EE:F4
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 019A552E07540380D8DFC553D14A875AF559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 0970
Signing time: Wed 05 Nov 2025 18:01:11 +0000
Manifest this update: Wed 05 Nov 2025 18:01:11 +0000
Manifest next update: Thu 06 Nov 2025 18:01:11 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: XRfHzdxyWtvCm2xDW7v83tSzzu9YwzYnhobDcNWcdgo=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2e:07:54:03:80:d8:df:c5:53:d1:4a:87:5a:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Nov 5 18:01:11 2025 GMT
Not After : Nov 6 18:01:11 2025 GMT
Subject: CN=e8069c9c86df0249b5aa835de0b946cb9e44eef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:f6:73:66:2d:46:d1:4e:ed:37:4a:af:c2:
11:37:fe:7e:da:11:93:b1:ef:f1:02:3d:b9:01:52:
cf:b6:78:06:75:d4:08:27:0e:a9:d1:e2:08:fd:62:
e2:9b:a9:8a:7f:06:b7:3b:a4:53:bf:80:3d:7e:97:
c3:f6:65:5f:46:79:14:af:46:57:76:b1:eb:b7:20:
b5:d4:f6:ee:66:ac:64:83:fd:b5:9e:7d:bd:58:a5:
f6:9e:9b:45:bb:25:db:92:db:13:03:ae:f0:29:45:
76:44:fd:de:5c:76:db:34:da:20:d0:a6:9b:c9:d7:
76:b4:13:8e:b4:27:b7:c4:71:cc:2d:ee:8b:2f:9d:
c3:0a:f3:46:9a:a9:e8:67:23:4b:49:06:4d:5b:84:
75:f9:92:96:23:ca:65:f9:57:c9:36:46:09:0b:3a:
f1:92:b1:1a:2d:fc:83:84:a3:73:96:6b:64:ab:47:
71:62:2c:0d:87:3b:3d:10:c1:a4:97:48:90:4f:d5:
cf:2e:61:1e:6c:c1:b2:7e:2c:eb:04:f8:60:e8:55:
20:e1:1b:58:09:45:49:88:f8:4d:dc:46:b3:29:49:
2f:5a:e4:34:81:33:2b:54:5f:5a:d4:d4:41:60:6d:
c9:72:a2:7c:44:b9:ef:db:b0:6e:56:28:96:dd:ff:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:06:9C:9C:86:DF:02:49:B5:AA:83:5D:E0:B9:46:CB:9E:44:EE:F4
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5f:84:79:8e:a1:f4:bf:70:14:ed:4e:b5:85:41:f1:e2:46:
13:80:de:71:3f:d6:67:f1:3d:dc:c0:ca:e6:2d:7f:b8:72:a2:
d4:88:15:a1:4a:7f:ca:13:e5:a7:99:90:f0:19:84:0f:1f:95:
60:0a:0b:49:e7:02:b6:b3:e3:80:86:29:f2:71:bd:26:93:f0:
1d:0e:b0:f8:7b:1c:68:a8:00:75:ac:b5:f4:cc:19:a3:2a:e5:
51:37:07:c0:3d:27:9b:57:90:f4:75:7d:04:4f:3f:35:a1:2d:
43:e7:1d:5b:28:f5:1b:74:c3:e4:a1:cf:51:7c:7a:e2:ee:32:
fa:20:ce:ee:54:59:30:63:ee:b2:11:3e:b3:c4:3c:b6:f4:7b:
a9:53:9f:02:38:dd:0c:e4:c6:04:f5:e6:e2:f5:ca:09:31:7d:
4a:4f:45:e9:c7:e3:b2:b8:88:8a:61:a1:58:48:96:0d:2e:4f:
ba:c7:34:8c:49:af:ec:de:aa:07:5d:0a:69:9a:6c:4f:1a:6f:
d7:2b:f9:eb:1f:b3:ce:d0:57:42:c9:a8:21:00:cc:71:b4:d4:
33:27:fc:4f:72:37:a3:9e:9f:7e:fb:1d:ff:01:bd:e3:e7:d2:
6d:59:dc:37:a8:a0:77:8c:1f:c6:f5:5e:e2:59:b9:10:ae:d8:
3d:47:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:46 2025 by rpki-client