Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: VQHr33fJJWObABCBuVc6ne835eacwoYAkxx5MkuaNz4=
Subject key identifier: 30:61:A5:43:C8:8E:4B:8F:8D:CF:79:35:14:F3:7D:AA:34:4F:04:F3
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 01987418FE1B4B413EE48C0848AD44117F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 1324
Signing time: Mon 04 Aug 2025 08:00:51 +0000
Manifest this update: Mon 04 Aug 2025 08:00:51 +0000
Manifest next update: Tue 05 Aug 2025 08:00:51 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: WMPiw757U+pnGhXIRX5SX7YabgpeyU9yu221x1aKO1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:fe:1b:4b:41:3e:e4:8c:08:48:ad:44:11:7f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Aug 4 08:00:51 2025 GMT
Not After : Aug 5 08:00:51 2025 GMT
Subject: CN=3061a543c88e4b8f8dcf793514f37daa344f04f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:90:28:f3:4f:6a:23:ad:66:84:be:0e:18:
d0:4d:f9:bf:46:88:9b:15:ef:f4:13:d1:c2:59:75:
19:00:29:55:ce:bb:a7:9d:c2:f7:3f:b1:b8:d5:59:
a9:22:6c:f8:8a:b5:9f:6d:7e:56:16:74:db:23:a9:
79:f7:52:7f:29:b7:25:f4:bf:50:8e:a1:27:98:3b:
e6:85:8b:1b:5e:90:50:70:b0:09:ef:84:9d:c9:9e:
16:b2:65:be:6f:18:6f:29:08:3a:8b:54:ac:46:36:
8a:a5:de:4e:5a:a2:e3:2e:b2:98:b3:20:01:bc:37:
b5:47:0b:7e:77:d0:6c:da:3d:bb:ed:29:3c:db:62:
35:9c:80:94:37:95:3f:6f:f2:84:a9:a7:6f:2f:2c:
d0:25:43:2a:9a:16:83:b6:5b:f1:4a:d7:b8:dc:b8:
56:4d:e7:1e:13:91:03:19:af:be:65:be:a1:04:92:
d6:47:ee:3a:36:8b:23:ea:e3:93:1f:08:63:79:1e:
f9:37:4e:a0:db:55:01:fd:d3:71:44:25:e4:9a:74:
17:4e:7b:93:f3:d3:a5:99:f1:1a:57:be:2d:a1:99:
f7:ba:f2:d4:3a:c8:30:ba:f1:68:4b:b0:0f:7b:66:
4b:e6:97:25:b0:b8:09:16:d6:59:c5:db:df:f1:88:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:A5:43:C8:8E:4B:8F:8D:CF:79:35:14:F3:7D:AA:34:4F:04:F3
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ed:75:98:ea:9a:3f:05:ad:c0:e1:88:c3:98:54:d8:7c:5b:
a6:9f:9c:32:81:81:da:7f:49:4a:1b:de:1a:ec:c8:47:41:a0:
76:a8:b1:7b:cf:79:51:88:2e:ba:ef:c9:9d:d0:94:25:b7:28:
8c:cc:23:63:f2:15:3f:bc:71:dc:76:5b:1d:6b:ef:78:e8:65:
8b:ed:cb:d4:23:a3:83:a8:16:4f:24:8e:32:d7:0d:0d:5b:4e:
3d:76:31:fc:ae:5d:13:8b:39:43:4b:9e:c1:6e:52:19:cd:cf:
3e:2a:f3:39:52:32:ad:1b:7d:fe:18:3e:62:64:26:c3:f7:a9:
99:af:25:a9:a8:4f:39:6e:06:0e:c0:58:04:52:04:b2:77:b6:
1f:22:a4:b0:f6:21:91:90:1e:57:f3:3d:4a:34:0a:fa:2d:92:
83:88:16:c7:79:ec:a5:d9:f3:82:47:7c:cc:2d:f8:90:c5:6f:
61:02:f5:9b:f8:aa:e9:9a:fd:d4:78:30:97:45:af:19:81:50:
0c:74:33:b9:f0:6a:99:c9:9e:64:37:73:15:73:af:25:73:de:
8d:16:48:d5:66:a2:d6:cb:47:9a:0a:9a:a8:2b:c9:94:fa:b7:
64:36:73:0e:41:17:0b:c7:a4:f3:07:f6:5d:e9:0d:b6:e4:67:
1b:ae:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:06:15 2025 by rpki-client