Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: p2rv7m+G/edj4tOgn49OdKQ8imPunglY9ULOCyn007M=
Subject key identifier: 43:80:65:70:A9:3B:31:38:70:FA:AC:F9:21:9D:6E:92:A0:DF:B1:B7
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 01984B8A57E693A20E8E6521DD8667071BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 130F
Signing time: Sun 27 Jul 2025 11:00:14 +0000
Manifest this update: Sun 27 Jul 2025 11:00:14 +0000
Manifest next update: Mon 28 Jul 2025 11:00:14 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: +0DrYg+t/Hk8t3Y/IBi/5E7lRavEVayLBJ390NHoOh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:57:e6:93:a2:0e:8e:65:21:dd:86:67:07:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Jul 27 11:00:14 2025 GMT
Not After : Jul 28 11:00:14 2025 GMT
Subject: CN=43806570a93b313870faacf9219d6e92a0dfb1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:1e:65:c2:64:90:86:26:f6:e1:74:de:17:
bc:d0:6b:06:7e:ee:1f:e1:10:bc:84:53:db:63:15:
3b:fc:53:40:d6:22:e0:9a:15:65:93:e7:ca:79:fa:
27:99:e4:c8:c9:2c:32:76:33:63:d8:84:15:ae:9b:
fb:67:ed:ab:7d:19:b6:13:59:57:f3:46:5d:d4:d7:
9b:42:b5:44:a7:17:65:20:3e:42:cb:37:2e:15:24:
b1:2d:ac:22:85:09:31:19:ce:37:5c:aa:94:66:35:
32:dc:19:17:b7:35:20:a8:a5:44:33:65:4a:d9:85:
8f:20:ff:21:42:3d:9d:b3:58:a5:e7:6e:9f:52:9b:
a7:bd:62:89:43:a2:bf:89:23:4d:e0:95:b4:01:a0:
65:fb:f1:24:a7:80:85:8e:20:53:f4:a3:c7:12:90:
30:a7:66:a5:82:2e:23:e8:53:ab:c3:04:a7:ad:a2:
9c:66:1f:05:0f:c6:c4:89:5c:a5:2e:95:ec:a9:8a:
d0:ec:f5:33:a3:f5:f6:59:a8:c0:7c:eb:4f:bf:02:
0a:4d:bc:32:43:ba:89:bf:05:8a:ca:ad:11:59:d2:
37:c6:96:f1:72:37:5e:7e:d6:76:ed:85:39:57:43:
0d:5f:d3:96:d3:98:5c:1b:45:0b:ee:2d:ef:d0:b7:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:65:70:A9:3B:31:38:70:FA:AC:F9:21:9D:6E:92:A0:DF:B1:B7
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ec:6a:8e:cc:03:be:97:00:dc:8a:90:62:db:dd:dd:ca:47:
f0:83:ef:82:84:21:37:04:27:36:ff:36:f0:27:bc:b6:ed:af:
da:9a:9e:9b:3c:80:4a:84:3e:77:57:85:0c:a1:fa:74:e5:20:
4e:9e:7a:4b:96:94:55:61:b5:b7:48:f7:1e:20:bd:f1:b7:ae:
30:90:49:be:6a:15:96:46:57:4b:c5:b1:f6:e9:6d:2c:bf:48:
ee:44:41:cd:c0:ec:3d:08:66:2a:ae:98:ce:61:cd:46:c1:1b:
0a:f6:fa:1b:15:0e:97:89:c8:95:16:33:dd:bd:5f:97:f2:50:
1e:84:b6:19:91:de:a1:5f:b8:95:26:83:a9:4f:a1:5f:6e:67:
2a:4b:5f:a0:dc:72:08:2a:89:1c:87:e2:4d:d2:61:b1:7e:bf:
58:f6:f0:73:0f:ce:33:18:64:7b:01:f5:07:fd:9c:ca:67:0d:
ae:9b:2b:b2:f2:0c:e2:b6:7c:4a:99:6b:d6:9c:fa:42:50:6b:
ac:20:45:d7:07:84:72:e8:34:23:e5:2e:cf:30:c1:58:1b:ec:
98:5c:33:d7:c2:28:76:01:7f:8a:e3:13:fc:f5:9d:5e:7a:c6:
b7:e5:8b:2a:66:54:df:5b:03:f5:81:cc:53:83:ed:f5:41:41:
9a:d8:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:09:00 2025 by rpki-client