Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: Eq8GqipLze+aKKSyGAdJdNkKN5rjGdDfGM0/9oztvhk=
Subject key identifier: EC:19:3A:AB:CA:8B:AF:F6:9E:28:23:ED:2D:2E:A9:45:FE:D5:78:55
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 0197BAEB145E81B0D4A2EDCC6001C554B572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 14AA
Signing time: Sun 29 Jun 2025 09:00:57 +0000
Manifest this update: Sun 29 Jun 2025 09:00:57 +0000
Manifest next update: Mon 30 Jun 2025 09:00:57 +0000
Files and hashes: 1: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (hash: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=)
2: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
3: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: mgdKKzowBpV8eYBACFFJmQPz7IVEFk53Ia7eFp2yolY=)
4: tAGqHWpkQw0giajHMwWi-gQSCPY.roa (hash: dkPgoKFrLMzVm5FMtr3H3ipENsq7fpzYhSx+TXox0zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:14:5e:81:b0:d4:a2:ed:cc:60:01:c5:54:b5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Jun 29 09:00:57 2025 GMT
Not After : Jun 30 09:00:57 2025 GMT
Subject: CN=ec193aabca8baff69e2823ed2d2ea945fed57855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:e5:cc:4a:46:6a:e4:26:7e:fd:74:28:25:
da:b6:75:8a:9e:eb:78:6c:7f:fa:15:b7:3c:97:93:
b1:ee:f1:48:71:cf:42:16:76:36:cf:7a:1b:df:91:
01:a8:5a:32:cc:85:f4:e8:5f:d5:1e:0c:7e:95:49:
84:ce:71:e5:07:3f:16:b1:06:33:33:c4:49:1f:db:
96:8f:32:cb:f4:63:46:8b:32:a6:8d:b4:d6:4c:0e:
a9:c8:4b:32:77:30:2e:c8:bc:f4:89:f7:ba:ad:40:
90:31:70:b0:d3:08:2d:b6:9d:f4:c7:1a:99:f8:89:
1e:ab:e5:d8:fc:f1:7c:9c:d3:8d:96:4f:02:de:33:
96:43:54:76:af:20:9b:34:08:d6:8d:a0:e2:96:4c:
8a:10:79:2b:04:33:69:04:f3:a7:91:2f:f1:7e:bb:
45:66:a6:1c:6c:04:26:2d:0a:ba:54:66:b3:16:08:
86:34:a0:91:81:61:f8:c9:45:06:7f:81:6c:bb:03:
d6:d9:cb:a4:ab:3f:44:96:45:b9:99:71:35:39:e3:
96:5a:8e:55:fb:cb:2e:cb:0f:b8:77:9a:ca:35:ba:
32:21:91:f2:44:16:21:57:55:5e:aa:e4:c3:ed:d2:
e6:16:6f:6f:61:b8:49:e5:0d:cf:e9:f8:47:c1:33:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:3A:AB:CA:8B:AF:F6:9E:28:23:ED:2D:2E:A9:45:FE:D5:78:55
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:ea:bc:99:4c:2a:85:a3:c3:88:8d:71:b8:0f:e3:cd:a6:
01:d9:f3:12:43:7f:6d:53:c2:d7:56:e9:41:e1:dc:c3:ba:6d:
c4:1b:11:3f:b3:59:d6:e0:ea:fe:79:11:7c:0b:98:5c:3a:bd:
45:bd:a5:02:21:6f:a0:3d:7d:a5:ea:05:0d:91:bc:a0:f6:dd:
bd:69:1b:4e:f5:d7:97:b9:fa:de:16:01:e3:b4:11:f0:73:dd:
9f:aa:21:63:fc:ad:a9:7c:6d:59:cd:27:4b:5b:71:4d:9f:76:
45:b8:44:9f:b7:bd:17:b8:41:82:26:29:2b:5c:01:23:25:97:
e3:37:3b:47:6d:a2:0f:fb:48:9c:00:0f:b1:1b:00:5b:3e:37:
e3:d3:48:f6:c2:9a:da:c7:2d:e0:46:10:b7:34:bb:d3:33:23:
e5:d6:9f:7a:07:62:c5:fd:e8:59:8b:d0:14:dc:e1:9e:fb:92:
39:ff:ec:03:4e:d3:e6:32:a6:b5:8a:0b:dc:68:4b:80:f4:41:
e0:8f:77:d8:11:bc:81:cf:97:71:06:b3:1d:5f:84:7a:b4:2f:
ba:fb:0d:51:c4:0d:79:cd:8d:85:40:5b:fa:e2:90:dd:d4:a8:
f8:46:91:b9:71:7a:a1:60:c8:48:5c:98:ba:51:50:f7:98:c7:
9c:d6:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:42:56 2025 by rpki-client