Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: rYMdeH7/LsQJVyULMEVsjSC2amDtBHyK2Gs53qlDrXw=
Subject key identifier: 8F:85:8A:D4:3D:32:D4:3F:D4:D5:2B:D7:B1:0F:06:63:CF:4A:81:AF
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0199FC590ED1083D2E907BF79FDB34189EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: 743I2G8hw80yPDDl9THnJeB7/E2l1Uw2PutB5bPS4P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0e:d1:08:3d:2e:90:7b:f7:9f:db:34:18:9e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=8f858ad43d32d43fd4d52bd7b10f0663cf4a81af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:b8:98:7c:b5:ea:af:56:5b:5a:e2:9a:7f:
33:7c:ee:bd:59:25:56:86:5c:dd:1f:fa:32:fb:66:
d5:1f:ec:f1:21:a2:2e:81:4c:f7:e3:7e:22:df:8d:
82:a8:f2:3f:f0:5a:b0:5d:46:6a:5f:73:db:b2:15:
07:bc:96:ae:ed:ef:af:f1:bf:4b:0c:a1:00:4b:30:
e7:d8:33:d8:72:1d:4b:d5:2b:77:f1:f4:6d:e1:2e:
bf:c5:35:cd:8c:b2:e1:29:a6:f2:88:d3:75:fc:b6:
b6:cd:49:b8:0a:50:37:64:3b:2a:73:1f:e6:6e:51:
34:06:be:89:3f:97:dd:b7:2f:8a:77:a7:64:8f:75:
9c:d0:7d:b2:95:83:0f:77:f5:eb:d7:95:d5:a1:09:
c4:d5:ae:39:d9:45:e0:84:90:9e:f6:b4:9b:6c:78:
7d:23:34:02:ca:bd:b8:35:17:26:7b:f6:38:5b:b9:
8d:6f:59:96:23:f9:8c:04:cc:66:19:40:f0:9b:8b:
12:74:04:40:6c:bf:4a:c9:c6:80:0d:9f:e5:a9:0b:
88:b8:ff:f4:9a:12:43:ac:08:70:c6:73:59:7c:09:
0b:8d:4c:4b:d3:4d:f6:b1:87:1f:51:00:a4:31:74:
bb:62:79:cf:59:f4:82:f1:4b:56:08:66:cd:d8:6f:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:85:8A:D4:3D:32:D4:3F:D4:D5:2B:D7:B1:0F:06:63:CF:4A:81:AF
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:82:cb:f2:f2:26:b9:3a:1e:8e:ba:11:cf:cf:3a:0a:57:5f:
09:62:b2:b7:05:76:89:b7:dd:1d:90:f8:25:44:58:45:72:bc:
fd:11:8b:80:1f:48:72:0c:3c:ca:06:10:6b:0c:89:28:47:d9:
2a:63:8c:c1:5c:f0:74:15:33:3b:48:ce:11:8e:a1:b7:4a:83:
97:19:c5:06:8b:eb:c2:c7:f5:67:c8:86:ae:12:3b:1c:d3:68:
25:c7:c0:ad:95:4d:d2:24:11:3e:db:7d:13:dc:3d:7e:76:7f:
95:f7:ce:f6:2d:99:af:6b:bb:01:e2:df:75:84:6d:de:35:8a:
a7:a3:d4:a3:4c:8a:82:3c:b0:21:dc:c6:6f:38:2d:e8:71:0f:
4a:f2:36:ea:2c:68:fb:b7:99:5c:4d:34:09:08:1a:c2:3d:62:
7a:7a:04:59:b0:5e:f2:9c:b6:eb:68:d1:42:f0:ef:ad:b8:2a:
5a:68:5d:ad:a4:74:c2:6e:8c:ad:4a:04:05:bb:52:8d:57:6b:
33:05:78:5b:38:78:81:9e:a7:6a:e7:c9:ac:5f:1b:97:d9:97:
c2:50:09:19:d7:6e:20:54:3c:67:75:32:b5:10:59:cc:43:c4:
4b:24:ef:35:d1:46:3e:a2:1a:67:fc:9d:c9:03:c2:11:a7:88:
15:bb:c6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQ7RCD0ukHv3n9s0GJ75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1
ZjE2MTYwHhcNMjUxMDE5MTIwMTU4WhcNMjUxMDIwMTIwMTU4WjAzMTEwLwYDVQQD
Eyg4Zjg1OGFkNDNkMzJkNDNmZDRkNTJiZDdiMTBmMDY2M2NmNGE4MWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ou4mHy16q9WW1rimn8zfO69WSVW
hlzdH/oy+2bVH+zxIaIugUz3434i342CqPI/8FqwXUZqX3PbshUHvJau7e+v8b9L
DKEASzDn2DPYch1L1St38fRt4S6/xTXNjLLhKabyiNN1/La2zUm4ClA3ZDsqcx/m
blE0Br6JP5fdty+Kd6dkj3Wc0H2ylYMPd/Xr15XVoQnE1a452UXghJCe9rSbbHh9
IzQCyr24NRcme/Y4W7mNb1mWI/mMBMxmGUDwm4sSdARAbL9KycaADZ/lqQuIuP/0
mhJDrAhwxnNZfAkLjUxL0032sYcfUQCkMXS7YnnPWfSC8UtWCGbN2G8huwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+FitQ9MtQ/1NUr17EPBmPPSoGvMB8GA1UdIwQY
MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt
ZTA4NTA1YzkxMDY2LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2
LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoLL8vIm
uToejroRz886CldfCWKytwV2ibfdHZD4JURYRXK8/RGLgB9Icgw8ygYQawyJKEfZ
KmOMwVzwdBUzO0jOEY6ht0qDlxnFBovrwsf1Z8iGrhI7HNNoJcfArZVN0iQRPtt9
E9w9fnZ/lffO9i2Zr2u7AeLfdYRt3jWKp6PUo0yKgjywIdzGbzgt6HEPSvI26ixo
+7eZXE00CQgawj1ienoEWbBe8py262jRQvDvrbgqWmhdraR0wm6MrUoEBbtSjVdr
MwV4Wzh4gZ6naufJrF8bl9mXwlAJGdduIFQ8Z3UytRBZzEPESyTvNdFGPqIaZ/yd
yQPCEaeIFbvGfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:16 2025 by rpki-client