Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: LvSL7nCUzVs3G/utfRA+9o4pQGCCMY93s/Sw6xOCF7w=
Subject key identifier: 8B:1A:F5:AB:9A:5A:BD:1B:27:F7:FA:D7:3D:BF:D7:06:78:1E:59:80
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0196C5A85A925573F04E7E196585734692F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 18:01:06 +0000
Manifest this update: Mon 12 May 2025 18:01:06 +0000
Manifest next update: Tue 13 May 2025 18:01:06 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: NWBmQw5qpvszJXYO69E3AYorLmeD2Zf6XlBjgfOY6RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:5a:92:55:73:f0:4e:7e:19:65:85:73:46:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: May 12 18:01:06 2025 GMT
Not After : May 13 18:01:06 2025 GMT
Subject: CN=8b1af5ab9a5abd1b27f7fad73dbfd706781e5980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:f0:b7:9d:68:95:dd:2e:5c:61:02:dc:b2:
10:42:0d:c5:5e:93:6e:e3:6f:66:18:34:19:63:46:
03:66:9f:74:07:33:70:63:6c:2b:c9:23:38:ce:55:
ea:bb:0a:90:ff:97:d5:5d:00:2f:d6:b4:7a:61:21:
76:46:1d:ce:bf:06:4b:58:4f:bb:a8:6b:a5:95:ba:
41:5f:fc:d0:f3:e5:9e:b1:bf:67:50:fd:50:b5:fb:
f0:7e:ff:1c:67:fa:73:26:bb:bf:92:45:88:72:58:
1f:8d:38:45:70:30:a8:ea:34:29:68:fb:08:4f:ed:
b4:6e:56:d3:32:92:61:d9:83:a2:a0:a9:bd:b9:5c:
7c:7f:3e:e8:a5:8d:4d:33:49:90:8c:fc:c0:02:89:
2a:da:9c:24:4a:57:f2:71:c4:97:76:8c:74:1e:89:
c6:08:be:7d:9d:9a:7b:a8:bf:2f:c8:6d:c7:af:4c:
f3:78:cc:bf:8a:e4:42:39:95:8f:1c:8e:49:80:cd:
b3:25:3f:50:b3:bb:4e:48:cf:5d:0a:c9:5f:b5:3f:
c0:43:bc:e2:57:af:fe:88:15:83:5e:bd:c8:c2:64:
37:26:e5:4f:db:91:a8:d4:cb:02:56:5b:9a:30:71:
57:6d:85:d7:ab:7d:cb:fd:de:9e:35:19:8e:d9:0d:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:F5:AB:9A:5A:BD:1B:27:F7:FA:D7:3D:BF:D7:06:78:1E:59:80
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8c:6e:25:9c:70:46:fb:51:11:6f:ab:19:6a:8c:d3:94:43:
b2:d3:62:cf:c4:8d:2f:33:49:47:29:62:6d:65:9c:b0:4f:30:
aa:73:3e:98:e5:34:a4:d4:4b:88:e9:ca:a3:11:21:06:71:e0:
11:49:80:8c:9e:d0:02:5f:eb:ad:5c:62:c6:98:6e:43:13:48:
39:8c:bf:e3:4a:38:ec:0b:6a:22:6a:2d:ae:cc:e5:4f:80:9b:
3f:00:c4:1a:6f:a2:b9:69:e1:ec:62:a8:53:0b:1c:62:76:01:
f4:ce:f3:f2:4f:4d:0f:9c:6a:3b:b8:50:80:e9:3c:8d:6c:04:
d7:17:0b:1f:29:17:59:d1:03:82:0e:4a:c5:80:24:b7:0c:df:
5d:63:ec:db:90:e0:87:6d:a8:dd:f9:89:78:0a:d0:0a:c4:5d:
36:78:9c:de:1d:28:be:6d:32:1a:a2:0c:ef:4c:61:55:27:cb:
7b:42:26:31:69:1a:35:74:13:a7:43:ae:c6:cb:3e:1b:4d:8f:
bc:09:66:1c:ec:3e:9d:33:f6:c1:11:50:ac:ec:ea:d8:08:67:
d9:af:a1:d4:31:3b:dc:c6:49:7d:05:d6:24:82:82:62:a0:9a:
43:02:a0:23:d3:5d:24:88:04:0a:e2:a4:88:9e:7f:3d:b9:b9:
ea:1e:4e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqFqSVXPwTn4ZZYVzRpLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1
ZjE2MTYwHhcNMjUwNTEyMTgwMTA2WhcNMjUwNTEzMTgwMTA2WjAzMTEwLwYDVQQD
Eyg4YjFhZjVhYjlhNWFiZDFiMjdmN2ZhZDczZGJmZDcwNjc4MWU1OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpTwt51old0uXGEC3LIQQg3FXpNu
429mGDQZY0YDZp90BzNwY2wrySM4zlXquwqQ/5fVXQAv1rR6YSF2Rh3OvwZLWE+7
qGullbpBX/zQ8+Wesb9nUP1Qtfvwfv8cZ/pzJru/kkWIclgfjThFcDCo6jQpaPsI
T+20blbTMpJh2YOioKm9uVx8fz7opY1NM0mQjPzAAokq2pwkSlfyccSXdox0HonG
CL59nZp7qL8vyG3Hr0zzeMy/iuRCOZWPHI5JgM2zJT9Qs7tOSM9dCslftT/AQ7zi
V6/+iBWDXr3IwmQ3JuVP25Go1MsCVluaMHFXbYXXq33L/d6eNRmO2Q26AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsa9auaWr0bJ/f61z2/1wZ4HlmAMB8GA1UdIwQY
MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt
ZTA4NTA1YzkxMDY2LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2
LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYxuJZxw
RvtREW+rGWqM05RDstNiz8SNLzNJRylibWWcsE8wqnM+mOU0pNRLiOnKoxEhBnHg
EUmAjJ7QAl/rrVxixphuQxNIOYy/40o47AtqImotrszlT4CbPwDEGm+iuWnh7GKo
UwscYnYB9M7z8k9ND5xqO7hQgOk8jWwE1xcLHykXWdEDgg5KxYAktwzfXWPs25Dg
h22o3fmJeArQCsRdNnic3h0ovm0yGqIM70xhVSfLe0ImMWkaNXQTp0Ouxss+G02P
vAlmHOw+nTP2wRFQrOzq2Ahn2a+h1DE73MZJfQXWJIKCYqCaQwKgI9NdJIgECuKk
iJ5/Pbm56h5ONw==
-----END CERTIFICATE-----
Generated at Tue May 13 01:44:33 2025 by rpki-client