Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: vnJcUPdJdraFXDNNLWI7jslVuHiE7tDrRLEZSmfqH/A=
Subject key identifier: D1:42:E8:4F:43:2A:EA:FD:FF:33:4E:9D:F1:6A:E1:60:0D:95:AB:C5
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 0198D884EDD20610E1A2DCEEB1DCC697D756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 1358
Signing time: Sat 23 Aug 2025 20:00:46 +0000
Manifest this update: Sat 23 Aug 2025 20:00:46 +0000
Manifest next update: Sun 24 Aug 2025 20:00:46 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 1VVaqEHFJV66eCvuMdk9LVCkgkqKwyMkPCQiKh3KjTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:ed:d2:06:10:e1:a2:dc:ee:b1:dc:c6:97:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Aug 23 20:00:46 2025 GMT
Not After : Aug 24 20:00:46 2025 GMT
Subject: CN=d142e84f432aeafdff334e9df16ae1600d95abc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:53:66:f9:b2:31:e9:94:4d:21:b6:50:85:92:
8c:3e:1b:df:02:45:f7:22:ed:72:5e:0d:fe:e6:dc:
a9:d4:6b:e1:c3:03:7b:ba:c1:67:65:6b:9d:7a:81:
df:f5:e5:3f:3f:f7:5a:52:7c:9b:fb:86:cd:49:9f:
37:2c:b7:02:71:9c:d8:67:7c:97:7c:3a:59:29:c1:
ee:ee:93:e4:c5:78:bd:c8:ec:91:b6:44:19:66:8e:
17:fd:4d:f3:a3:4e:12:50:99:f2:50:d6:f5:9f:3c:
42:e7:4d:b2:82:0b:6e:44:ba:ea:17:72:41:4f:86:
ee:e4:5f:9b:e3:fd:d5:13:2b:16:f7:1c:9e:96:16:
20:d1:c7:a7:8a:5f:be:0d:2f:5b:d8:52:21:79:46:
b6:40:4d:37:db:1f:21:61:f3:43:8c:d9:1f:56:de:
3c:f2:7d:a7:dc:25:a0:04:11:ed:73:ba:fc:55:9e:
bc:3f:40:b5:e0:43:d9:b4:7b:52:98:bf:ac:33:07:
4e:6e:3c:b9:d0:90:d1:1b:1b:e5:5e:2a:b1:87:bd:
53:e0:1a:44:a3:45:58:6f:7f:1d:77:4e:5c:4d:35:
aa:1c:8e:ec:e8:05:d0:4a:06:39:14:b7:b4:b7:a9:
2f:ea:51:a0:07:2e:80:d9:c1:a4:01:c7:a6:44:66:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:E8:4F:43:2A:EA:FD:FF:33:4E:9D:F1:6A:E1:60:0D:95:AB:C5
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2a:60:4b:ec:f2:24:b2:51:90:56:c5:e9:50:76:d7:58:47:
37:c8:04:b1:89:8f:20:b4:bc:b6:6b:dd:df:2e:49:1e:26:03:
9f:73:b2:3a:9d:fb:ab:ab:f3:88:29:2b:06:f1:38:bc:77:5e:
18:ff:48:1d:b5:ae:d4:4c:30:77:b6:34:93:69:fb:7b:18:63:
8b:b2:a7:0a:33:d9:f1:81:8e:88:70:12:47:32:53:72:5e:5f:
99:52:3d:36:47:fd:0c:a4:f6:62:01:84:8e:fe:b4:3f:ab:aa:
27:aa:b4:f4:a8:42:f5:92:30:ec:e1:e4:0b:c3:59:f4:f2:75:
37:4d:f3:6f:d3:d7:a1:25:96:01:b8:56:12:7e:ff:d0:94:32:
02:be:9d:b5:27:46:b7:65:2f:a7:91:93:2e:6b:6f:d9:ed:39:
cb:30:d1:46:c2:32:b9:23:3f:17:a0:a8:1a:fc:a1:17:84:4d:
a8:d7:60:be:b5:5e:c3:de:4c:9d:5f:65:4a:e0:0d:75:da:05:
f4:29:37:e6:70:38:e1:df:e8:e8:39:82:4f:78:9f:10:e3:80:
99:f7:13:41:0e:33:82:49:c9:cb:3f:f7:62:ab:e9:76:aa:7c:
4e:b7:ed:1a:67:7c:c1:89:a5:60:09:13:67:84:af:08:8a:9f:
b9:6b:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:55 2025 by rpki-client