Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: e/jAFijSnTESgic71OKPDbhxuTVRcb1+EB8QqW/OUe4=
Subject key identifier: B2:F1:AE:48:83:06:12:E4:DC:A6:06:3D:DB:2D:6B:1B:B2:D7:61:E5
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0198D6CCF280EBFD7022C7544E21D437B5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 12:00:12 +0000
Manifest this update: Sat 23 Aug 2025 12:00:12 +0000
Manifest next update: Sun 24 Aug 2025 12:00:12 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: z7Q8BcFA2qnRuXyHHw+I93TF52DliX6mf+UyMduPSsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f2:80:eb:fd:70:22:c7:54:4e:21:d4:37:b5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Aug 23 12:00:12 2025 GMT
Not After : Aug 24 12:00:12 2025 GMT
Subject: CN=b2f1ae48830612e4dca6063ddb2d6b1bb2d761e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:65:c8:87:45:8e:c9:51:73:75:59:db:42:
35:06:0d:77:64:06:31:75:e2:35:04:9a:ea:db:db:
25:8e:31:fe:4f:ed:db:39:d8:75:70:7d:51:f2:11:
30:41:43:16:b9:ce:3a:fc:49:6b:b0:0c:50:c4:af:
cb:c0:c2:42:87:0d:e1:bd:f4:0a:2d:7d:ec:1f:4d:
9a:89:b1:90:6b:a6:65:ad:22:ed:0d:b7:f8:28:f7:
fc:95:ab:6c:93:c4:a9:d8:6c:6b:5c:ae:93:d8:71:
60:57:ee:9c:cd:5b:d8:d1:28:cc:e3:e0:1d:8c:3c:
e9:15:d9:ee:3d:2e:69:68:b1:1f:cb:43:c7:9f:84:
2a:60:ef:b7:38:28:d0:cb:92:ad:ff:4f:3b:22:8f:
ac:cd:68:08:46:0b:bc:67:a1:5f:98:dc:5a:5d:f4:
04:16:7e:bb:c1:82:9d:ad:c1:84:17:f1:d8:0e:52:
4f:52:4e:ca:15:28:7c:80:26:01:20:b6:00:72:2a:
72:df:20:f9:19:9b:73:dc:d6:40:45:60:e2:38:f4:
35:90:51:b2:90:b5:5d:de:1f:ac:35:a4:57:d1:91:
f1:65:b5:53:8d:ec:2b:a2:41:56:94:85:7a:f3:75:
58:b8:86:f1:54:97:82:70:ea:74:0e:0b:5e:be:0b:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F1:AE:48:83:06:12:E4:DC:A6:06:3D:DB:2D:6B:1B:B2:D7:61:E5
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:08:f4:80:bc:1f:2e:4b:ee:ec:8c:80:18:80:25:ed:1f:6a:
af:3b:4a:6a:e8:d9:bb:1d:75:ee:87:38:99:02:c5:03:00:d3:
b9:3b:e1:89:19:e3:58:bb:03:1a:ee:2a:9c:62:50:01:41:d9:
7b:7f:98:d5:bf:d9:3d:2f:62:93:04:26:b7:56:1c:d0:a6:2d:
16:79:55:2c:96:7c:cd:ee:31:ac:fb:c3:79:8c:a5:89:cb:ac:
e8:97:cf:f1:e1:16:50:64:c5:05:bb:18:0f:a7:47:5e:6c:7e:
d3:f6:2d:c8:8c:40:3e:e8:52:48:b2:18:bd:30:83:cc:9c:e6:
a8:e6:5f:cf:9b:45:7b:51:3c:2b:2d:25:4a:9a:3c:95:86:20:
2d:0b:69:06:df:dc:5c:09:60:67:09:c1:05:8e:c3:5c:81:af:
86:1f:4c:87:18:cf:bc:73:b3:86:ce:1b:53:25:e1:8b:3c:e9:
1e:53:cf:84:01:ef:e9:20:d2:04:6c:f8:bc:90:6b:82:d4:f5:
ae:55:27:cb:db:43:99:c9:08:96:f7:2c:d1:ba:0f:9c:6e:f1:
50:02:ed:44:ef:39:91:f4:7e:65:52:93:22:d4:35:5d:74:c0:
d5:48:b6:1f:fc:3d:43:44:b4:f4:a7:2e:01:fa:f1:86:d8:a3:
03:aa:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:29 2025 by rpki-client