Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: iPm1eksiC/RgqOD92HhCqU64GL8gRi4f8vujHVrJ2Dg=
Subject key identifier: A9:DB:09:8F:7B:B5:B8:C1:B6:2A:67:51:43:8E:5D:EC:EF:AF:68:82
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 019A0B940D8DEAB4CDA9EAFB102C8969CDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 13F7
Signing time: Wed 22 Oct 2025 11:00:43 +0000
Manifest this update: Wed 22 Oct 2025 11:00:43 +0000
Manifest next update: Thu 23 Oct 2025 11:00:43 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: eRXXO0Vnw74S0f8gBktQwV6gQlAWsDxCOzFJ6Q5jAcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:94:0d:8d:ea:b4:cd:a9:ea:fb:10:2c:89:69:cd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Oct 22 11:00:43 2025 GMT
Not After : Oct 23 11:00:43 2025 GMT
Subject: CN=a9db098f7bb5b8c1b62a6751438e5decefaf6882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:88:91:c5:4b:12:55:ac:7c:de:19:1a:f8:
c6:c3:56:da:9b:49:e5:10:eb:a7:88:48:fc:e0:61:
16:01:b6:96:80:29:53:6d:dc:cb:85:7e:cc:63:d2:
95:8a:66:4b:59:76:05:e4:e6:e8:56:8f:c6:73:3c:
28:d4:f0:98:7b:81:4a:66:9c:f7:22:2c:38:3e:c8:
5d:a4:c6:81:94:f2:5b:ec:3c:9d:93:00:7d:dd:ff:
6c:45:a8:23:01:57:12:46:31:7e:9f:8f:29:fd:5d:
b0:a6:14:e9:02:b4:a3:63:c3:00:58:2b:cf:7c:58:
6e:de:cd:6b:fc:fe:2a:e1:6f:9a:c8:3a:aa:17:cf:
33:e0:89:ec:d5:29:f6:1d:fb:11:f8:07:4f:2f:b4:
ae:1f:b7:7e:71:1d:77:a2:99:2c:2e:06:7d:9e:a2:
fd:96:2d:b0:bd:ea:28:da:48:54:1d:2e:6c:66:1f:
64:a0:0f:0a:22:8b:ae:a1:4f:39:08:d9:b2:4e:85:
ec:a6:fe:42:6e:89:33:f7:6c:f0:54:72:97:01:e0:
de:4a:85:7e:63:e6:5e:70:dd:7f:c9:81:10:7d:04:
40:9d:5a:96:58:e9:86:c2:5e:34:59:54:8c:4e:7b:
71:f9:97:18:13:be:ca:cf:91:9d:b0:0e:f6:ff:e2:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:09:8F:7B:B5:B8:C1:B6:2A:67:51:43:8E:5D:EC:EF:AF:68:82
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d4:3b:53:e6:6e:58:b0:04:b7:95:e2:e4:a3:61:fa:1e:9c:
a3:c6:69:42:36:12:ff:64:e7:ec:98:67:7b:5f:bd:6c:87:30:
ff:04:7a:42:4f:43:62:a5:3d:7f:07:58:4e:fe:8a:71:64:fd:
5f:b3:af:6b:95:fe:89:2c:e4:d1:8a:ed:dc:ff:8f:37:5c:ed:
b6:07:3b:7e:4f:e6:9f:b7:80:ed:35:51:2a:b4:fb:b2:2d:87:
9e:a0:ef:cf:00:2d:9a:a5:93:bf:1f:66:16:fa:ec:17:7b:1c:
f1:20:68:ae:f1:e0:02:ee:f0:61:72:ed:7a:3c:8e:38:f6:3e:
fb:94:28:36:7f:2e:c3:51:58:58:bc:43:df:64:ae:1a:bd:d8:
21:1b:24:32:f6:6b:d1:2b:62:d7:5a:93:f4:af:5d:09:85:ca:
18:45:7c:27:a9:65:46:ac:88:a7:17:87:56:44:63:ac:53:ab:
5e:85:70:a5:04:7b:75:6a:49:0b:c1:1c:ba:10:1c:91:8f:75:
b4:be:f7:ab:26:23:33:82:e4:7b:a1:db:ef:9a:12:85:d2:f4:
2a:16:8b:6f:4d:58:04:bd:16:bf:9b:1a:aa:22:61:a4:58:94:
ae:ab:62:89:30:30:39:58:f6:f6:70:00:b5:67:ff:27:43:1e:
a7:ba:73:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLlA2N6rTNqer7ECyJac3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx
MzExYzUwHhcNMjUxMDIyMTEwMDQzWhcNMjUxMDIzMTEwMDQzWjAzMTEwLwYDVQQD
EyhhOWRiMDk4ZjdiYjViOGMxYjYyYTY3NTE0MzhlNWRlY2VmYWY2ODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGOIkcVLElWsfN4ZGvjGw1bam0nl
EOuniEj84GEWAbaWgClTbdzLhX7MY9KVimZLWXYF5OboVo/Gczwo1PCYe4FKZpz3
Iiw4PshdpMaBlPJb7DydkwB93f9sRagjAVcSRjF+n48p/V2wphTpArSjY8MAWCvP
fFhu3s1r/P4q4W+ayDqqF88z4Ins1Sn2HfsR+AdPL7SuH7d+cR13opksLgZ9nqL9
li2wveoo2khUHS5sZh9koA8KIouuoU85CNmyToXspv5Cbokz92zwVHKXAeDeSoV+
Y+ZecN1/yYEQfQRAnVqWWOmGwl40WVSMTntx+ZcYE77Kz5GdsA72/+IrQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnbCY97tbjBtipnUUOOXezvr2iCMB8GA1UdIwQY
MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt
NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3
LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxNQ7U+Zu
WLAEt5Xi5KNh+h6co8ZpQjYS/2Tn7Jhne1+9bIcw/wR6Qk9DYqU9fwdYTv6KcWT9
X7Ova5X+iSzk0Yrt3P+PN1zttgc7fk/mn7eA7TVRKrT7si2HnqDvzwAtmqWTvx9m
FvrsF3sc8SBorvHgAu7wYXLtejyOOPY++5QoNn8uw1FYWLxD32SuGr3YIRskMvZr
0Sti11qT9K9dCYXKGEV8J6llRqyIpxeHVkRjrFOrXoVwpQR7dWpJC8EcuhAckY91
tL73qyYjM4Lke6Hb75oShdL0KhaLb01YBL0Wv5saqiJhpFiUrqtiiTAwOVj29nAA
tWf/J0Mep7pzfw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 15:01:18 2025 by rpki-client