Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: uwSXuRvJHqvOw+IyTZm8DWLTpFp6x7EL1X9+R0Y17wQ=
Subject key identifier: 14:6E:CE:AE:3C:73:3C:81:26:2D:6C:88:97:9A:1B:18:30:C5:2D:10
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 0199FBEBAB9521EBFBDC0A7C76270FD8CF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 15D5
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (hash: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=)
2: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
3: AEk4t1mqQHdHzuvnZ8F04P17d44.roa (hash: 7D43zZS2UD0q0VGySwNpiUk+9PmD8nPWUlHBvAE5epk=)
4: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: FIv4rc/Ga+EfE4deXGCs/bclyy9JuKGDJKKZVUf9tuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ab:95:21:eb:fb:dc:0a:7c:76:27:0f:d8:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=146eceae3c733c81262d6c88979a1b1830c52d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:b3:99:4a:49:89:01:46:d1:5d:9d:58:08:
88:d6:8d:f2:39:c3:09:f8:12:2c:31:f0:23:bd:a8:
7a:dd:b6:b2:33:b8:12:f6:13:35:06:07:f5:16:10:
23:9d:24:aa:c0:ff:fa:79:6d:df:4f:70:0c:96:b7:
d9:53:35:63:f0:2a:8b:65:21:d9:69:b7:ae:ab:0c:
a9:cf:c8:2c:4d:f9:3e:e9:90:1a:f8:91:df:6a:d5:
ce:58:83:86:02:b4:63:13:db:e1:2d:00:9a:0a:33:
e4:d4:20:07:dc:de:0a:a1:65:b0:76:6d:24:1f:ab:
8a:00:1d:e3:67:40:9a:ea:a5:fb:eb:b0:49:c3:92:
ea:93:eb:e9:7b:a4:50:2b:62:dc:cb:7e:43:7b:55:
8d:e3:93:ad:5a:45:99:51:46:08:e5:41:b9:5a:a1:
83:3f:4f:f0:a9:c2:60:d5:be:b3:f3:bb:d6:8a:08:
1d:5f:3b:62:be:a9:b7:1d:d3:1e:18:d2:0f:0c:08:
80:75:eb:91:7a:2e:4d:43:1a:16:e7:ca:b5:3f:ec:
9b:13:11:0d:29:66:f2:82:32:23:f3:ae:75:5b:8a:
81:46:64:c7:5d:c4:9c:85:0b:4e:4e:25:db:cf:24:
a4:ae:dc:37:c7:a5:d0:ff:df:95:8a:e4:08:f5:21:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:CE:AE:3C:73:3C:81:26:2D:6C:88:97:9A:1B:18:30:C5:2D:10
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:82:39:cb:1e:52:e5:e2:09:2b:46:06:4a:09:87:53:5a:df:
2c:0f:ad:87:69:08:63:0d:43:3b:ed:41:1d:11:fc:b1:ff:d6:
5b:71:ce:5b:64:16:f0:48:51:43:8f:f1:68:0d:4c:9f:f4:1b:
fc:b3:1a:21:77:72:cd:84:c4:c2:2e:39:25:b9:77:8c:e6:d2:
df:37:bf:01:8b:6d:1b:52:9a:bd:e1:95:87:dc:fd:18:1b:f5:
9f:79:a2:ae:d8:4c:f3:5c:f7:5d:22:4d:1f:04:57:3b:ca:58:
72:cf:a3:b0:be:48:fb:e3:38:ca:d3:14:c1:27:9f:aa:23:30:
e9:14:dd:b7:96:a7:e9:53:d3:b4:96:08:e6:30:6f:bc:c6:4e:
a0:cf:33:89:c5:b2:45:37:02:53:63:a1:a4:12:a0:5d:0c:26:
73:91:97:e4:27:83:c3:ad:31:3c:11:4a:ea:e8:1a:14:57:de:
3e:94:cd:39:73:7a:e2:fa:10:93:47:ee:08:38:a3:ba:19:8c:
dc:b9:0c:bb:d2:50:e0:b8:6f:eb:43:6c:85:dc:98:31:7f:7f:
37:5c:8b:73:32:b1:99:e4:41:c1:d0:23:c9:e6:c0:99:ef:a3:
2a:b3:23:16:10:ea:09:36:95:00:e8:0d:80:b5:f0:a0:9e:e4:
ec:07:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:35 2025 by rpki-client