Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: r8OAPALdEZHsGMwTMiz1M8o3ChjWerV8a8M4dVBVaYw=
Subject key identifier: 36:3D:1A:87:4D:6F:8D:AD:70:DF:D4:DA:F9:7A:0A:86:5F:9E:DA:87
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 0196BBC8CD2462F9FBCF273FF86FFD7FE181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 1240
Signing time: Sat 10 May 2025 20:00:21 +0000
Manifest this update: Sat 10 May 2025 20:00:21 +0000
Manifest next update: Sun 11 May 2025 20:00:21 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 6sxDXbrnSTTW9ApseqAZA96S8wzwZYOCIF2bJeNS4I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:cd:24:62:f9:fb:cf:27:3f:f8:6f:fd:7f:e1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: May 10 20:00:21 2025 GMT
Not After : May 11 20:00:21 2025 GMT
Subject: CN=363d1a874d6f8dad70dfd4daf97a0a865f9eda87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:69:4b:6d:16:dc:b8:72:19:69:ef:57:e8:21:
72:d9:8e:70:bd:fe:d8:c3:fe:96:1e:26:08:64:89:
d9:8c:93:ac:4a:8c:ef:f8:e5:3a:dc:33:83:e8:07:
9a:a8:b3:fd:f8:3f:0c:d2:8c:d4:3d:82:a6:16:04:
d1:43:ee:6a:32:1a:8b:3d:24:e3:04:b9:ff:8e:c1:
d2:43:23:fe:c1:45:cc:0b:c7:bc:ba:8d:16:1e:e6:
f7:47:59:35:8e:88:04:d4:05:7a:d1:cc:49:94:63:
c9:8f:2f:67:a5:82:65:7d:ff:9a:62:41:4f:66:91:
8c:7f:5b:fd:f7:13:2c:4c:c3:57:57:4f:23:75:20:
16:b2:c4:8f:69:16:bd:06:a1:fd:fb:94:63:68:73:
7c:88:01:48:54:d7:a6:75:5a:66:ec:23:90:78:b3:
ef:ff:7c:c3:a9:c1:a9:58:86:22:45:20:56:88:45:
ff:17:96:2a:01:b3:f8:49:01:ec:d6:1b:b9:39:2a:
16:69:70:c1:20:22:db:c3:14:40:df:cc:19:85:f2:
2f:fc:38:e4:63:f5:6b:fa:ac:75:99:cc:75:d6:78:
7d:ee:44:e1:5d:90:1e:0c:dc:3b:06:bc:b1:06:5d:
0d:2f:1c:86:f6:cd:dc:17:d0:fd:ec:5e:22:e4:7f:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:1A:87:4D:6F:8D:AD:70:DF:D4:DA:F9:7A:0A:86:5F:9E:DA:87
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b1:ad:e5:4f:a0:40:d4:cc:28:d9:5c:2f:07:c5:a4:ff:ea:
8c:e6:d5:6f:25:51:48:6c:e2:0c:7b:00:f2:36:20:af:83:29:
63:6e:b1:75:11:63:fc:3f:fa:f0:a5:20:63:48:8a:08:02:25:
6b:63:e5:cd:ba:c5:64:98:83:c3:ee:75:29:b4:8b:8d:b9:50:
0a:74:bc:f9:98:0c:2f:eb:62:89:c5:98:0d:94:36:5e:38:e9:
c3:da:b8:11:ee:06:e1:02:fe:a0:3e:87:ba:f1:9c:b9:10:ec:
8a:24:7c:1b:86:71:a3:80:a9:e8:b0:bd:d3:eb:d5:3c:f4:d9:
05:2e:8d:58:67:ec:38:09:b2:34:b9:25:c2:70:ca:a3:89:70:
47:03:98:6d:47:ef:6f:c3:e2:b8:25:ca:e1:31:8d:21:ba:20:
22:f8:24:62:9b:6d:09:83:1c:34:ad:bf:db:25:2c:0c:23:3e:
24:e2:52:f4:eb:2c:e3:5f:20:ec:7f:69:82:8a:88:e9:6e:6a:
35:50:87:45:2c:21:82:be:a5:28:89:6b:ab:b5:b5:8e:c0:76:
8e:19:6b:f9:c8:c2:38:19:2b:a7:2d:a1:58:14:7f:90:be:0f:
96:8a:fd:aa:a6:56:fa:f1:3d:52:b5:74:b0:82:cb:7d:2a:04:
79:c7:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:09:47 2025 by rpki-client