Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: AAjfrfumD6NMS4wX5Y3lsmGDIS+dCAytKjEXjkVEmn4=
Subject key identifier: 60:B6:08:3E:B3:08:CF:0C:DF:E4:20:C6:AD:2C:96:18:80:37:13:94
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 01967266465260028544FA332013C402C25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 121A
Signing time: Sat 26 Apr 2025 14:00:27 +0000
Manifest this update: Sat 26 Apr 2025 14:00:27 +0000
Manifest next update: Sun 27 Apr 2025 14:00:27 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 6TRQtWgXGigDRzS/Zb/BMugrbD0lmWUoIXrNGtsWR1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:46:52:60:02:85:44:fa:33:20:13:c4:02:c2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Apr 26 14:00:27 2025 GMT
Not After : Apr 27 14:00:27 2025 GMT
Subject: CN=60b6083eb308cf0cdfe420c6ad2c961880371394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:22:29:2d:68:d5:5f:b5:c7:11:e1:08:d7:
79:c9:a1:e3:db:fb:89:4f:d7:f4:96:c6:48:51:2f:
33:fb:15:43:47:76:aa:b1:e4:fc:d9:64:55:ec:29:
00:ff:31:1e:2a:9d:61:4c:f0:1a:9e:ef:2d:21:c3:
6d:2c:4b:35:07:53:25:0a:28:e5:a5:21:83:52:05:
35:f4:d1:e6:0b:d8:e6:0c:78:38:ba:41:88:65:f6:
da:51:45:d3:44:96:00:10:a9:35:78:9e:5b:0f:6a:
77:df:ba:ef:16:48:be:e6:58:c1:7a:4d:3a:2a:51:
a7:f8:a5:33:77:6f:dc:27:2b:e8:d0:fe:99:71:a9:
d2:b6:44:9a:0e:ce:b1:9f:dc:e0:3b:08:bb:da:9a:
29:38:74:93:30:a6:a5:81:b0:d2:cb:3a:61:82:3b:
9c:3b:2a:ad:0d:07:4a:52:b3:46:59:b5:d2:c0:53:
fd:fc:d8:d5:ac:f7:b3:58:59:41:01:f1:0e:0f:db:
84:f2:0b:39:cd:32:52:56:5b:ce:8d:c3:db:ec:26:
b1:08:a0:38:23:a0:c7:dc:fc:c4:15:c1:1b:17:dc:
eb:5d:9e:25:3b:26:c9:eb:2c:63:ea:ee:6e:21:4e:
d7:8c:07:df:8f:a9:88:86:40:e4:43:77:f0:9d:91:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B6:08:3E:B3:08:CF:0C:DF:E4:20:C6:AD:2C:96:18:80:37:13:94
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a2:71:26:ae:33:3b:11:87:ae:68:ca:00:65:2d:60:53:14:
a3:98:cc:a2:f7:e5:99:f2:a8:8e:81:91:af:b2:55:db:1e:48:
11:7d:6a:1a:a4:07:56:01:3a:a5:41:2d:3e:8a:a9:b6:04:a6:
1a:97:bf:ea:f5:69:c0:27:b1:25:07:01:e1:84:ef:3d:34:2b:
88:7a:66:ba:69:7c:ed:64:3d:f3:3a:cc:a1:e3:f2:1c:0d:d8:
49:69:a2:97:c1:fd:e6:57:a6:99:e2:5f:cd:e7:dd:25:d2:57:
7a:06:4f:54:2b:78:75:91:41:aa:d0:68:c1:46:36:c7:f5:8b:
04:6c:f8:d8:f8:31:aa:01:97:b5:94:3f:34:19:93:74:37:0b:
41:5f:b0:9e:b9:f8:3f:02:df:34:46:64:8a:32:22:a6:82:91:
07:d8:ff:fc:92:a0:4c:db:5d:dd:ad:5e:5e:76:18:1b:40:7f:
bb:7f:b2:27:a0:fa:11:d0:3d:f2:0c:71:17:80:41:86:27:b2:
c4:fc:24:2b:01:34:57:ef:aa:51:ea:11:f8:af:65:e4:4b:2a:
39:8b:bd:e1:c2:19:ab:fd:e0:04:b9:f8:52:fe:f7:58:bc:6e:
02:fe:74:26:24:e8:e0:1f:ba:c4:4f:67:3c:b3:f3:c2:64:1a:
97:78:49:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyZkZSYAKFRPozIBPEAsJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx
MzExYzUwHhcNMjUwNDI2MTQwMDI3WhcNMjUwNDI3MTQwMDI3WjAzMTEwLwYDVQQD
Eyg2MGI2MDgzZWIzMDhjZjBjZGZlNDIwYzZhZDJjOTYxODgwMzcxMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJgiKS1o1V+1xxHhCNd5yaHj2/uJ
T9f0lsZIUS8z+xVDR3aqseT82WRV7CkA/zEeKp1hTPAanu8tIcNtLEs1B1MlCijl
pSGDUgU19NHmC9jmDHg4ukGIZfbaUUXTRJYAEKk1eJ5bD2p337rvFki+5ljBek06
KlGn+KUzd2/cJyvo0P6ZcanStkSaDs6xn9zgOwi72popOHSTMKalgbDSyzphgjuc
OyqtDQdKUrNGWbXSwFP9/NjVrPezWFlBAfEOD9uE8gs5zTJSVlvOjcPb7CaxCKA4
I6DH3PzEFcEbF9zrXZ4lOybJ6yxj6u5uIU7XjAffj6mIhkDkQ3fwnZG2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC2CD6zCM8M3+Qgxq0slhiANxOUMB8GA1UdIwQY
MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt
NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3
LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaJxJq4z
OxGHrmjKAGUtYFMUo5jMovflmfKojoGRr7JV2x5IEX1qGqQHVgE6pUEtPoqptgSm
Gpe/6vVpwCexJQcB4YTvPTQriHpmuml87WQ98zrMoePyHA3YSWmil8H95lemmeJf
zefdJdJXegZPVCt4dZFBqtBowUY2x/WLBGz42PgxqgGXtZQ/NBmTdDcLQV+wnrn4
PwLfNEZkijIipoKRB9j//JKgTNtd3a1eXnYYG0B/u3+yJ6D6EdA98gxxF4BBhiey
xPwkKwE0V++qUeoR+K9l5EsqOYu94cIZq/3gBLn4Uv73WLxuAv50JiTo4B+6xE9n
PLPzwmQal3hJyQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:12 2025 by rpki-client