Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: Ku7nC8+F1xESLBhIZhSAljA0HuuSgSEGWPioRqtXVRw=
Subject key identifier: CD:47:98:EC:74:16:CB:FA:48:BC:C2:81:AF:A4:46:32:42:AB:EF:06
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 019893366928EB3394B39384EEE9FB79FD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 151A
Signing time: Sun 10 Aug 2025 09:01:13 +0000
Manifest this update: Sun 10 Aug 2025 09:01:13 +0000
Manifest next update: Mon 11 Aug 2025 09:01:13 +0000
Files and hashes: 1: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (hash: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=)
2: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
3: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: BEseHAdxyXqpfnDuD79ef758mC/VFLoIzKR8YfMLGwY=)
4: tAGqHWpkQw0giajHMwWi-gQSCPY.roa (hash: dkPgoKFrLMzVm5FMtr3H3ipENsq7fpzYhSx+TXox0zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:69:28:eb:33:94:b3:93:84:ee:e9:fb:79:fd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Aug 10 09:01:13 2025 GMT
Not After : Aug 11 09:01:13 2025 GMT
Subject: CN=cd4798ec7416cbfa48bcc281afa4463242abef06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:71:87:de:ca:d7:10:49:c7:17:ba:9d:90:
4e:e7:98:88:30:aa:2c:b5:05:ff:62:1d:2d:a1:29:
3c:4c:8f:68:ac:dd:7a:e0:bb:f9:af:f0:8d:8f:91:
a2:92:e6:78:fa:4e:28:85:54:16:77:1e:60:73:c2:
42:9c:b4:65:e9:29:97:5a:6b:f1:02:9e:41:83:83:
e7:3d:4e:cc:92:90:12:f7:77:8d:aa:e2:96:46:10:
4e:98:40:b3:44:3e:1e:38:86:d1:93:cb:09:4e:69:
d1:00:56:b9:7f:91:9f:d8:87:90:6f:9c:9c:62:0a:
56:ed:bc:a4:20:67:3e:ae:4c:24:6c:43:9f:bf:83:
0e:9f:06:0d:4e:37:05:8f:d2:a9:a7:90:7a:d2:cf:
05:ca:77:72:58:94:c1:97:c8:44:7b:06:06:71:b3:
65:a8:19:34:59:39:94:64:3a:09:cf:e4:8f:43:a4:
d2:db:51:3d:5a:a9:61:a5:5c:05:3d:9e:e9:9d:83:
c0:1b:9a:93:17:61:61:86:ef:40:aa:86:85:d7:f1:
e0:f2:dd:0a:37:a1:77:a8:1b:e9:9a:f3:35:88:76:
3b:71:36:50:e0:65:c5:3e:27:37:20:72:99:42:c3:
e9:3e:8f:ad:18:bc:aa:80:e7:f3:40:31:ec:05:97:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:98:EC:74:16:CB:FA:48:BC:C2:81:AF:A4:46:32:42:AB:EF:06
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:31:0d:0a:a8:37:58:24:e1:44:5c:8a:54:52:1d:44:70:80:
0b:9b:84:6e:59:35:54:85:94:d1:b0:3d:4e:cd:4d:c2:e4:c7:
36:51:ae:92:97:73:9e:56:8d:de:a5:46:96:d0:8b:4e:7b:0f:
56:43:43:ef:8a:81:dd:df:63:5f:66:ff:3a:d2:c6:bd:fe:21:
b1:0a:fd:7b:cc:9b:fc:2e:4c:aa:4c:ce:d4:f0:f2:29:dc:f6:
47:ca:86:b6:01:9c:79:08:f4:2e:66:1e:c8:dc:32:eb:18:5a:
f6:14:be:33:b9:50:94:18:53:f8:cf:5e:5d:b9:f7:50:f0:09:
54:2b:28:e8:d7:13:f6:f3:d1:ea:17:12:fc:fd:a2:c5:aa:13:
32:fc:df:65:fa:dd:a4:09:53:bd:33:de:d8:5e:3e:5e:6c:fe:
a4:03:c4:17:df:71:a7:56:de:3c:91:9c:11:be:d8:dc:20:6b:
25:ae:72:59:58:de:55:6b:96:04:5e:06:c6:1a:84:bd:a2:fa:
50:51:84:61:cb:d2:31:00:f7:90:51:7f:d6:eb:df:67:a9:c1:
41:ea:f7:55:b7:5d:3f:6a:ff:9e:32:1a:7a:ff:af:43:2f:24:
7f:c5:90:0e:2d:fd:f3:89:f4:ab:0b:c0:47:9f:3e:59:c4:9a:
68:82:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:50 2025 by rpki-client