Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: dZd4In46PyfQSRQtNtX/Kyy5sF8Om1bJIRRc0ZENtJI=
Subject key identifier: D5:6F:49:13:A0:87:53:87:47:CA:C7:01:D7:1C:D7:7C:B3:20:AD:CA
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 019A4F2B04D5B8EA5D3AD1D38703D4248E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 141A
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 7Y6pcxjz+rNi436D/2Ransx5hmV8gxcKmE1FH+XkN3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:04:d5:b8:ea:5d:3a:d1:d3:87:03:d4:24:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=d56f4913a087538747cac701d71cd77cb320adca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:8a:e6:83:1e:f4:f1:b1:e0:7d:b8:38:98:
d8:52:6f:b3:43:3b:23:83:7a:21:8e:19:d3:b5:93:
67:32:b9:e5:55:93:f5:27:19:71:da:d9:85:7b:77:
b1:b8:de:cb:5e:0e:29:59:00:d0:f9:9b:b5:7d:19:
aa:1e:83:63:dd:c1:dc:e0:38:2a:83:3e:3e:77:61:
d6:dd:b5:16:58:9a:c1:8a:0a:4f:ec:f0:c3:08:ef:
7b:df:3f:bd:48:a4:32:a7:33:7f:88:46:90:e9:b7:
3d:96:64:18:72:59:30:b9:7c:e2:00:d7:0d:3a:03:
d4:58:20:1e:84:07:ac:2d:5b:43:0a:31:a4:be:3d:
8b:9c:d8:df:39:4c:0f:8d:54:92:9d:1c:77:3d:a4:
00:cf:c2:d5:62:de:35:ef:ca:8b:c2:1c:eb:10:d4:
0e:9e:91:7a:f3:6f:7c:78:ee:f8:50:e2:94:0d:16:
b5:b5:c0:22:22:e2:bf:56:ea:d3:f9:0c:64:b4:18:
28:cd:57:0b:13:96:94:3f:3d:53:dc:cf:83:db:2d:
2e:03:2a:cd:15:0b:39:eb:9f:f5:81:57:61:fd:dd:
10:bf:1e:74:64:d8:70:d9:7d:3e:6d:06:94:9b:4e:
78:c8:e3:1f:e1:0e:c2:48:a0:20:df:63:ef:e0:90:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:49:13:A0:87:53:87:47:CA:C7:01:D7:1C:D7:7C:B3:20:AD:CA
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f1:82:f6:51:9a:b8:88:85:aa:27:02:d3:6e:b9:5a:95:ba:
1c:ca:8a:df:50:3a:54:8d:1e:9e:8b:79:37:49:e4:00:b5:33:
a7:f9:dd:17:2c:21:d4:1a:c4:fb:b9:5b:6e:d8:4a:c6:1d:29:
95:48:24:d8:af:c8:57:41:48:44:5f:c2:77:8f:88:4c:9d:87:
1e:9c:bd:92:77:4d:10:26:ce:45:27:75:c4:2d:be:5b:63:35:
05:e8:c9:17:4d:84:f0:66:41:ee:12:f9:f5:3d:51:4a:d9:50:
cc:dd:6a:e8:a9:49:8a:af:50:09:48:dc:b9:a5:1e:ef:c3:11:
c5:ce:c4:4d:66:ca:18:03:47:d4:fb:98:c4:47:eb:4e:a1:5a:
99:07:8b:3f:71:fc:ed:36:f4:3f:c8:76:72:83:40:f2:c3:7e:
b3:63:d7:2c:2b:a6:a5:63:5f:f9:1c:c4:0e:9e:00:2c:c6:49:
2f:35:9d:7b:28:9e:57:9c:2b:61:37:14:56:f2:6d:c5:d9:32:
7d:99:0f:e0:a4:b4:1e:f4:87:44:88:ab:a8:2d:1b:2d:92:07:
ba:ae:ce:5b:55:67:6d:35:d8:56:a5:32:eb:42:56:1a:05:4f:
ce:c0:a9:b7:6b:5b:53:79:d5:52:80:e8:cd:3a:c4:9b:92:fe:
47:5f:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:50 2025 by rpki-client