Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: DJV35gyvk4xb3gCkXtRPEMTS6tf3hP3+TaB9B50jaCc=
Subject key identifier: 01:9D:E5:2F:58:CC:83:C1:72:45:EF:13:DB:F3:6A:79:66:D4:B9:AD
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0197CC4D483587BC711EE609A901C5EFA721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 15C5
Signing time: Wed 02 Jul 2025 18:01:46 +0000
Manifest this update: Wed 02 Jul 2025 18:01:46 +0000
Manifest next update: Thu 03 Jul 2025 18:01:46 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: GfHLRH9rOHW98eixR5MnB9jCuPpXz9fX3oWkW+WAinE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4d:48:35:87:bc:71:1e:e6:09:a9:01:c5:ef:a7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jul 2 18:01:46 2025 GMT
Not After : Jul 3 18:01:46 2025 GMT
Subject: CN=019de52f58cc83c17245ef13dbf36a7966d4b9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:4a:79:ed:87:77:75:f7:51:b6:4b:e0:29:
6a:eb:52:af:a7:a8:05:5c:d5:d0:1e:64:b7:9f:95:
90:ca:a4:c0:93:e4:c1:95:67:df:ff:d9:2c:8e:4e:
bc:2c:5f:33:3d:61:5b:cd:a8:67:a2:b2:a5:92:04:
49:04:8e:e7:26:08:4e:83:ee:78:ce:1d:d0:09:84:
14:97:a9:04:63:8b:7c:75:d6:f6:9d:d6:b1:3b:7f:
52:f5:f2:44:95:70:e2:31:6d:c5:f1:be:fe:a6:dd:
9c:87:5e:79:de:be:4e:b7:9c:55:bc:1b:2c:9a:17:
86:5d:81:e8:ea:f1:9b:2e:56:00:6f:57:f5:48:f9:
d8:79:66:ca:0b:23:78:89:01:cf:af:4c:18:66:5a:
da:a6:86:c6:9b:35:c4:0a:66:0b:1a:e5:d8:24:0e:
6e:ba:b6:de:6c:0f:0d:1b:6b:8c:51:d4:ed:1b:cf:
15:98:c2:70:59:a2:f8:93:1b:e3:53:40:76:f1:95:
53:06:37:d6:dd:ce:dc:b8:ab:68:1a:85:b7:e0:48:
79:b5:3f:df:0c:0e:8e:21:93:76:88:2a:0b:27:9f:
40:9a:38:b5:77:af:f2:a9:b4:1e:91:1f:fa:08:fa:
84:34:ca:e7:01:a6:88:5f:cb:9b:3b:3d:ae:b2:c1:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9D:E5:2F:58:CC:83:C1:72:45:EF:13:DB:F3:6A:79:66:D4:B9:AD
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2c:91:5e:44:e7:45:40:25:14:d7:45:a2:d8:ac:be:42:68:
2b:61:8f:c5:53:a1:47:ae:62:58:09:7c:f2:9c:71:71:b3:0c:
8d:bf:6e:14:1c:98:bb:e4:f7:54:93:05:ec:ef:fc:5e:5a:57:
37:9f:a6:f7:6f:40:bf:87:e5:bf:24:81:97:d1:8f:26:fe:09:
25:4c:ed:ed:29:3b:fe:1e:72:de:98:75:aa:bb:eb:94:5c:3b:
01:26:37:74:bd:40:7f:53:3f:2d:e3:67:01:fb:5e:0b:2c:6d:
6b:95:ad:17:6b:aa:4f:49:81:04:cd:6f:8b:95:9f:a7:f7:34:
87:b1:43:ff:fc:94:8d:e4:04:bd:7f:82:b0:7e:59:b8:3c:24:
24:5f:e2:80:16:ac:5c:3d:78:f3:4f:bb:e2:91:54:61:4e:89:
d7:90:a2:96:99:96:8e:f5:77:ab:18:e7:6f:bc:6f:db:b7:e7:
57:a2:a8:44:1c:30:a6:91:a5:6c:22:ae:b0:62:4b:d5:30:94:
d2:25:14:f7:0e:9c:3f:7a:64:95:49:70:7a:39:5f:ad:db:de:
e9:0b:28:aa:39:cc:6c:b6:70:c1:5d:65:28:23:91:5e:3a:6e:
d2:3a:4f:0e:56:d4:73:04:89:7f:c1:95:ae:1b:e6:ca:67:16:
d3:3c:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:36:25 2025 by rpki-client