Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
File: ihz-evMMHHJdI25KL8Kv1wn65kQ.mft (raw, json)
Hash identifier: hQbCXSHBOqWM2z6jyRD7U8fywbbU2rpp+3YhgCfs6ug=
Subject key identifier: A6:52:68:63:D2:6F:BC:07:ED:C8:6C:7A:FA:CE:87:CC:89:E1:F6:B6
Authority key identifier: 8A:1C:FE:7A:F3:0C:1C:72:5D:23:6E:4A:2F:C2:AF:D7:09:FA:E6:44
Certificate issuer: /CN=8a1cfe7af30c1c725d236e4a2fc2afd709fae644
Certificate serial: 0198A04E3A7E7E9DE0BC6B402D03B0C4C153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
Manifest number: 09EC
Signing time: Tue 12 Aug 2025 22:02:17 +0000
Manifest this update: Tue 12 Aug 2025 22:02:17 +0000
Manifest next update: Wed 13 Aug 2025 22:02:17 +0000
Files and hashes: 1: ihz-evMMHHJdI25KL8Kv1wn65kQ.crl (hash: raGsLYqFfh32GFeq0gPcF0fu7TZnEia0CCNmbxXNNdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:3a:7e:7e:9d:e0:bc:6b:40:2d:03:b0:c4:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1cfe7af30c1c725d236e4a2fc2afd709fae644
Validity
Not Before: Aug 12 22:02:17 2025 GMT
Not After : Aug 13 22:02:17 2025 GMT
Subject: CN=a6526863d26fbc07edc86c7aface87cc89e1f6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:8e:3c:fb:07:e5:8b:92:1e:57:93:95:83:
54:33:6f:60:3e:57:46:e0:18:9b:1a:26:b9:f1:b9:
90:29:28:85:a6:32:94:19:73:a4:12:66:68:2b:fc:
74:ce:a5:03:e6:46:fa:26:13:8a:bd:f0:27:4c:7d:
c9:f4:1b:72:7b:24:e3:48:42:87:3e:51:70:3a:e3:
e4:3c:b4:e6:d2:89:59:38:92:33:d6:fe:de:ed:d9:
a0:5e:31:ad:52:70:4d:c1:ba:c9:5b:92:e9:eb:28:
5e:8a:50:12:cc:d2:8c:42:58:e8:68:05:ea:0a:c5:
6e:de:db:85:1e:e9:a1:7e:fa:e2:e2:0b:86:ea:bf:
7d:8f:13:d3:dc:60:8e:21:60:ff:c0:5e:10:57:07:
c0:d7:8c:8f:eb:b9:1e:bf:7c:32:25:a7:e2:52:d5:
5d:09:50:74:5d:6b:19:36:96:68:dd:c9:30:40:64:
9c:34:b7:d6:d1:19:33:a0:6a:e8:98:a7:67:f3:25:
ae:78:68:a3:f3:73:c9:21:97:b4:81:b9:3c:1f:d1:
88:44:01:1d:ca:14:9e:a9:fa:d9:05:4e:6b:5e:ce:
52:b0:14:db:79:98:8e:04:00:31:aa:bc:8b:53:23:
d5:03:f2:5d:a9:09:a6:e8:d0:8b:90:32:32:f2:a2:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:52:68:63:D2:6F:BC:07:ED:C8:6C:7A:FA:CE:87:CC:89:E1:F6:B6
X509v3 Authority Key Identifier:
keyid:8A:1C:FE:7A:F3:0C:1C:72:5D:23:6E:4A:2F:C2:AF:D7:09:FA:E6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bd:68:af:3f:f3:88:63:77:6d:6f:9d:61:a2:f1:14:78:8b:
40:94:d3:1f:16:35:e1:20:0c:bc:1e:d3:01:e8:11:71:9d:bb:
79:7b:d1:84:63:d5:fa:06:69:ca:06:1c:a9:93:b4:c4:dc:12:
94:be:2f:fa:39:4e:9e:26:01:8c:72:a8:de:43:b9:1b:64:15:
10:68:3b:44:30:29:c2:30:e2:62:b8:d4:cb:fe:25:82:41:a0:
5c:73:95:1a:0a:1b:90:ab:8c:fe:4e:a9:ee:96:34:1e:b4:ec:
20:6a:79:ae:e4:4e:30:87:50:8a:a1:ed:94:25:9b:2b:66:e6:
0e:44:b1:11:35:90:72:3d:9e:74:7b:e0:c8:47:03:11:8c:c8:
12:0b:e9:3a:be:24:32:43:1a:63:3a:42:82:e1:90:b4:8d:63:
2c:c7:7e:a9:c6:39:b3:1d:42:43:cd:f8:13:14:49:71:0f:e1:
57:67:ef:03:5a:ec:92:6d:5a:5a:0c:96:b4:5e:ce:d0:0f:83:
18:7e:ef:f8:7b:a4:64:05:28:b9:45:db:e7:da:1b:00:ad:45:
e5:87:ab:d3:ae:fe:9b:74:24:60:ce:14:75:82:2c:87:2a:73:
95:48:d5:17:00:ca:34:29:c6:c8:9b:50:95:65:14:54:f6:06:
3e:d5:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:38 2025 by rpki-client