Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: kt7eoknt+eWsiu6848nWXOM4I+OCuw42wVMx8pLPte8=
Subject key identifier: B8:E9:E7:D6:F5:C3:49:D7:59:EB:0D:2E:E0:20:36:00:F4:EF:DD:FF
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 0199FC2147DFCCF681E42F1C63CF790B0E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 13EF
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: oaspj7n6bbpby6QTtozal//3d/OwkZZTWNx0j8sz5HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:47:df:cc:f6:81:e4:2f:1c:63:cf:79:0b:0e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=b8e9e7d6f5c349d759eb0d2ee0203600f4efddff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:97:0f:e8:6f:39:a6:1d:b3:ed:72:33:5f:
a8:b2:93:62:b6:43:86:a4:2c:23:ee:86:19:9a:16:
0f:ad:84:5b:04:60:25:86:5f:c9:f7:33:2e:6a:22:
aa:d9:e0:a6:38:b8:43:91:59:f0:96:3d:06:d1:6c:
c0:25:4b:d6:45:65:dc:c7:52:b7:ed:07:80:77:78:
1b:03:20:bc:09:1e:c7:4e:f7:cb:5a:eb:94:e9:6d:
b5:f5:1e:dd:fd:75:cf:29:2c:e2:d3:46:d5:a2:3b:
0a:04:fb:94:6d:d8:4a:27:fc:0c:7b:76:a8:8b:8f:
47:c5:80:a5:be:2b:93:14:ae:d4:23:26:5f:66:71:
c3:4f:4d:fc:08:fc:bc:0b:e6:ad:67:63:6b:85:26:
cf:92:69:2c:ad:b6:9b:28:d1:0b:4e:76:7f:17:80:
18:92:6e:f5:46:43:53:9c:69:13:99:d2:8d:09:51:
4a:88:9d:99:7d:a0:bd:6d:83:5f:0c:13:2c:92:ae:
d3:62:3b:fb:e4:7e:b3:76:ce:5a:13:47:36:b8:3a:
27:ed:10:67:65:9b:c6:37:6f:9e:76:a0:0f:91:73:
01:6e:86:4d:9e:35:a0:01:b3:30:b5:84:db:7b:f7:
68:51:9a:ab:5e:27:17:43:bb:a9:52:85:e6:88:2a:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E9:E7:D6:F5:C3:49:D7:59:EB:0D:2E:E0:20:36:00:F4:EF:DD:FF
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7a:14:16:bc:cf:86:72:b4:b5:29:71:cb:6e:c6:24:4d:c8:
b9:4a:a3:2f:1e:10:80:a3:78:ea:51:de:05:01:76:51:3c:e9:
3d:84:e3:27:dd:53:f7:03:0a:fe:96:d4:ea:e5:12:d2:ca:39:
6c:ae:70:75:72:5a:33:c0:33:ac:cd:c4:9b:35:c2:0d:63:bb:
1b:4b:01:92:b9:2c:ec:bd:12:da:ea:58:24:aa:d5:5c:97:ca:
b6:84:69:ae:b4:5b:be:1e:e8:16:d5:c5:a3:89:3f:fe:ec:13:
6d:4f:58:7d:fb:1c:bc:28:87:3d:4c:a8:88:51:77:3b:63:30:
26:00:46:12:61:2f:cb:80:6d:b2:c7:10:a2:6d:6e:10:a1:e5:
39:69:43:85:e5:e4:12:aa:4e:22:d8:48:32:fd:6d:0a:93:6e:
7d:74:d0:f9:2c:1e:95:94:da:e7:aa:e0:31:1c:95:2f:0e:08:
60:fc:0f:10:f6:66:22:06:6a:c4:50:66:3d:33:c1:31:97:b2:
36:a8:2d:04:47:5f:90:d9:c8:8d:ba:1e:7e:77:70:2b:e4:50:
f5:79:d9:8c:85:ce:88:5f:4c:85:fd:ec:ed:c1:38:d7:8c:53:
69:51:11:d2:bf:07:a2:d3:ba:71:88:f7:25:e9:28:85:db:f9:
aa:f3:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:15 2025 by rpki-client