Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: nJwbY9hvlnBMVxEfpJkaL1L2WZSi5+HNCkD5rHkuGDY=
Subject key identifier: CF:45:DD:CA:F5:AA:F4:14:D6:D9:CF:AE:19:09:F0:2F:90:21:A5:66
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 01976D74B732B7347AA7C68584949E5AD533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 129C
Signing time: Sat 14 Jun 2025 08:00:54 +0000
Manifest this update: Sat 14 Jun 2025 08:00:54 +0000
Manifest next update: Sun 15 Jun 2025 08:00:54 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: wmmPoV+DBwl64tcGjb8YJDnNlybpY/u9F3WdY5N3nVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:b7:32:b7:34:7a:a7:c6:85:84:94:9e:5a:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Jun 14 08:00:54 2025 GMT
Not After : Jun 15 08:00:54 2025 GMT
Subject: CN=cf45ddcaf5aaf414d6d9cfae1909f02f9021a566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:de:94:ef:2d:11:39:63:a5:1d:f0:eb:16:76:
c6:3c:d4:a5:3c:ac:04:37:62:47:99:57:10:2c:78:
76:34:6c:6c:dc:bf:b6:88:d4:66:c7:6e:a5:d4:98:
de:34:68:db:b6:9a:b8:38:77:4e:9d:9a:09:d8:7b:
f1:f1:df:53:bd:b3:e1:dc:32:c3:2d:61:89:05:49:
7d:0c:0d:84:32:ca:6f:e2:5c:73:b7:e9:97:a6:9b:
54:c7:fc:db:29:53:1f:d0:b4:e9:a5:1a:a3:19:2b:
fb:76:a3:41:fe:a0:f4:26:47:b3:6d:cd:c3:d2:4a:
7a:2f:04:f8:a0:fb:ea:83:5d:27:aa:52:fb:b7:09:
91:77:ab:62:1b:bb:a6:21:88:53:3c:26:8f:da:88:
43:12:ca:1e:3b:a7:6e:b2:7e:2c:1c:d9:b5:00:de:
e4:e1:79:6f:62:3d:4d:d3:d3:3e:6f:cb:e3:8b:8c:
7a:c3:86:e2:9b:ce:78:f6:8a:95:e6:40:d6:6a:dd:
0a:37:f4:b0:94:00:aa:8e:d8:78:30:6d:b6:19:12:
d5:08:fd:d6:60:43:95:00:9e:d3:e9:21:69:8c:95:
5f:57:8a:ef:c4:aa:f5:ff:89:a4:f9:a5:9b:8d:a1:
54:21:8f:c2:cd:d4:e6:47:0d:52:77:88:34:56:0e:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:45:DD:CA:F5:AA:F4:14:D6:D9:CF:AE:19:09:F0:2F:90:21:A5:66
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:58:e0:1e:00:25:dd:7d:58:4f:db:a1:e4:3c:7b:20:a9:e3:
86:3a:d9:24:9a:a2:01:8d:d8:cc:2b:9e:69:0b:17:f4:91:0b:
06:07:74:dc:15:50:9d:96:0d:b4:3d:55:51:ec:79:cc:06:b0:
07:97:6c:f9:62:7e:63:21:7d:c3:a4:17:d3:ed:ad:ba:a9:49:
11:0c:61:10:26:43:d7:50:88:6c:51:1b:41:7c:cf:89:d7:b2:
fd:b8:87:03:c4:57:e5:de:38:b0:23:83:e4:25:ab:56:9d:a1:
9e:77:6e:02:ba:89:0f:76:8d:0c:d6:0e:26:9d:19:b7:7e:1e:
3a:a3:e3:44:23:2a:c1:7c:1d:04:fb:83:73:77:24:c0:bd:d7:
c2:dd:ec:3a:b0:f8:fa:ee:37:54:3c:f0:99:02:2f:89:d3:9f:
f5:46:7a:ac:81:42:03:5a:cc:4d:21:38:e5:41:ad:90:f1:d6:
00:23:d1:69:1b:70:a0:c8:12:c9:3d:08:08:8b:c8:8d:ed:9e:
7b:df:fe:22:ba:91:b2:7e:40:3c:47:c4:35:64:67:d7:fb:92:
42:08:ae:b0:64:0d:e4:b1:da:dd:50:75:72:a7:4a:6a:2c:2a:
e0:16:54:0b:63:ed:2e:58:d8:14:d1:38:60:d0:7d:39:7e:05:
46:d6:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:44:17 2025 by rpki-client