Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: fd5X7anpl+SCi5KktLLDpMSXGAlLB7ihl9l9SnhxKOM=
Subject key identifier: 0B:3B:77:78:37:F7:E6:8A:D1:C2:1F:74:C6:C5:B4:AC:FD:92:29:92
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 019845F636C7DDE86DB52D1B6B23256A3BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 14F2
Signing time: Sat 26 Jul 2025 09:00:20 +0000
Manifest this update: Sat 26 Jul 2025 09:00:20 +0000
Manifest next update: Sun 27 Jul 2025 09:00:20 +0000
Files and hashes: 1: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (hash: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=)
2: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
3: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: maDCZ1ySlmYtfOg7J5oee0fJJRTSltIabTzC55KB5cU=)
4: tAGqHWpkQw0giajHMwWi-gQSCPY.roa (hash: dkPgoKFrLMzVm5FMtr3H3ipENsq7fpzYhSx+TXox0zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:36:c7:dd:e8:6d:b5:2d:1b:6b:23:25:6a:3b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Jul 26 09:00:20 2025 GMT
Not After : Jul 27 09:00:20 2025 GMT
Subject: CN=0b3b777837f7e68ad1c21f74c6c5b4acfd922992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:0f:b7:67:07:8e:72:85:3b:e2:93:e3:8d:
39:68:8f:5d:dd:ae:4d:2a:e1:d3:bb:21:5f:f8:04:
b1:ba:be:82:40:45:43:85:3a:da:1d:b0:61:6a:4f:
d1:de:52:4d:e1:05:6d:08:18:48:39:15:22:76:db:
e9:8d:3f:fa:28:e7:2b:f0:36:45:fa:9e:7a:c9:fd:
84:43:99:7d:cd:c6:bc:23:38:a1:a2:be:ae:ec:2d:
28:c2:30:b0:a9:a8:43:b5:db:e2:05:8f:71:41:7a:
cc:bc:e0:42:e8:0e:7b:21:9d:e4:62:e7:e8:b7:2f:
8e:d2:df:58:c0:1f:ea:9f:49:28:dc:fe:9f:b8:31:
60:78:10:6b:70:a8:4d:75:ba:85:d1:5c:b7:89:97:
e9:9f:0b:a3:d0:cd:13:a2:ff:45:15:e0:9a:ea:ed:
93:42:37:d7:5a:9f:ba:4c:3e:c9:03:6b:c5:72:71:
07:f8:2d:8d:ed:1b:c7:51:74:7d:4b:19:3c:3f:fe:
e1:b7:fb:b0:cb:7e:71:40:bd:29:c7:41:42:25:e7:
3d:65:bf:09:ce:0d:43:d3:a3:45:d0:ea:aa:59:80:
29:5b:c3:d1:65:5d:c8:72:01:d3:c2:99:d8:89:5e:
76:51:7d:d2:18:b1:07:d1:d3:6f:10:ca:65:9c:d9:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3B:77:78:37:F7:E6:8A:D1:C2:1F:74:C6:C5:B4:AC:FD:92:29:92
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:09:2c:35:06:5f:ea:17:5c:e7:fa:3e:c3:c3:da:66:9c:07:
ff:78:26:65:b9:f1:ed:7f:0b:1b:85:b5:e9:1a:18:91:e6:7a:
21:bf:af:c3:ff:7d:2b:1d:81:c8:ab:0d:0d:80:d0:70:47:52:
a1:c7:07:b9:86:f6:9b:e9:36:0e:5f:f5:37:13:89:ed:ab:ca:
7b:12:10:55:3d:09:92:02:d1:e1:90:1c:58:47:0b:81:3d:35:
39:28:01:69:a6:eb:38:74:bb:68:6c:8e:af:5e:53:8e:cb:e5:
15:0e:4f:f4:12:a8:c1:ff:b2:bf:73:6a:04:28:eb:03:a4:f2:
bc:36:c7:3d:db:cd:96:ee:e6:d1:72:24:a2:d5:74:c6:7e:6b:
bf:8e:62:d2:3f:c3:93:74:bd:47:63:6d:a1:4c:c7:f5:e0:a2:
cc:7a:34:e0:8c:76:b3:53:f3:d2:09:81:30:12:09:84:ff:03:
fa:d3:7e:93:c6:7c:10:fb:48:6f:27:84:67:89:06:f6:ee:72:
a7:03:e0:55:0c:23:75:3e:41:d1:e0:2f:30:89:5a:54:82:48:
7a:b9:18:de:ce:8e:c5:41:8d:ce:63:fd:c2:64:1e:3b:71:5f:
e2:10:9f:4c:05:7f:30:57:ff:ab:01:8a:29:42:95:a4:31:76:
6c:01:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:50:34 2025 by rpki-client