Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: utzlI+vBs8/zBrbdXSZm2OAVM5cbPspoNlcJW0BbP+o=
Subject key identifier: DF:FA:10:37:4F:B0:AB:6D:E8:01:67:CF:D4:D4:F4:7C:E2:C7:8C:DE
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 01965B70564D8D3DACB4970B4CB499E68F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 1506
Signing time: Tue 22 Apr 2025 03:00:10 +0000
Manifest this update: Tue 22 Apr 2025 03:00:10 +0000
Manifest next update: Wed 23 Apr 2025 03:00:10 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: 3euHo7VvhKrko7Ek/b97+ZRAZs7bDdKqeYqFica4VNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:56:4d:8d:3d:ac:b4:97:0b:4c:b4:99:e6:8f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Apr 22 03:00:10 2025 GMT
Not After : Apr 23 03:00:10 2025 GMT
Subject: CN=dffa10374fb0ab6de80167cfd4d4f47ce2c78cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:78:41:37:f1:90:ca:97:f2:b9:a1:42:8e:
c5:79:0e:87:0a:6c:e4:91:0e:21:b1:38:e8:8c:a0:
d6:c4:48:60:8e:b1:44:ab:7a:f1:92:fc:d5:3c:a9:
0e:58:cb:1f:d5:2d:1b:c6:4b:60:99:ab:e3:11:a1:
73:e1:27:60:93:1f:2f:5b:8a:a3:d3:f2:9c:bf:7e:
a3:79:43:4b:c7:41:5c:d0:94:90:ac:00:55:16:bb:
28:0c:ca:49:fa:0c:af:99:88:28:73:80:1c:6f:6e:
16:53:09:33:c6:7b:ae:dc:83:ca:1b:2d:af:19:71:
9b:b5:b1:c2:1c:8f:80:92:f1:40:44:71:97:9d:e7:
21:be:d4:29:d5:6f:14:08:04:1a:f8:77:08:da:5a:
05:39:e7:5a:bc:03:d3:61:f0:e3:81:46:0a:17:80:
25:71:76:87:31:df:fb:af:51:ce:e2:2f:65:69:0c:
ac:f9:b4:6b:16:c0:b4:8d:7b:0a:c3:91:42:b1:81:
0a:8b:9d:a9:5f:9b:c9:4c:97:86:89:59:7c:51:d2:
78:9e:7d:20:53:b9:c2:11:66:51:a5:fc:bf:b3:5a:
bd:ad:15:8c:e9:42:ea:11:c9:19:bc:88:3a:a1:31:
8f:57:e6:39:f2:87:1d:01:2b:5d:62:0a:3b:6b:e6:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FA:10:37:4F:B0:AB:6D:E8:01:67:CF:D4:D4:F4:7C:E2:C7:8C:DE
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:de:82:cd:e3:b4:ec:a6:b7:78:59:24:84:0d:49:86:61:d5:
be:12:00:5e:57:fb:5b:14:3e:70:39:e0:39:f2:83:66:05:22:
cd:28:e2:00:4e:a8:b9:6f:b6:d7:52:b7:b5:e2:9c:0f:c6:70:
0a:88:73:75:10:0a:03:11:9f:b5:24:62:70:a3:fb:21:c1:75:
3e:e3:47:b0:f5:42:9b:97:1d:78:ea:bd:a2:3c:9d:35:c2:9e:
b2:bd:e9:67:c4:88:f9:d7:29:ed:3f:0b:f8:15:2c:55:12:6c:
d3:57:0b:bc:4b:c0:64:3c:09:99:4b:31:38:b8:58:01:0d:a2:
83:1a:50:4c:5c:5d:af:25:56:ea:92:3a:ed:81:61:ce:34:16:
7d:8a:ff:a9:0d:74:aa:67:4e:bc:71:7f:69:2f:be:4e:f9:f3:
f0:3f:d1:97:4e:88:2d:27:4e:9e:b7:68:79:bc:06:fe:03:6a:
da:c3:86:5d:03:07:a1:b5:86:6c:b7:95:6d:ba:eb:48:57:10:
d0:8f:47:33:f6:11:26:24:81:3f:14:21:e2:3e:7a:80:ff:39:
3f:ac:9c:33:7b:42:21:2e:64:44:b9:00:0c:f4:cd:ac:bb:6f:
04:7a:81:58:e6:23:55:76:29:ab:33:cd:f5:74:51:6c:06:15:
c3:31:f2:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcFZNjT2stJcLTLSZ5o9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1
ZjE2MTYwHhcNMjUwNDIyMDMwMDEwWhcNMjUwNDIzMDMwMDEwWjAzMTEwLwYDVQQD
EyhkZmZhMTAzNzRmYjBhYjZkZTgwMTY3Y2ZkNGQ0ZjQ3Y2UyYzc4Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6l4QTfxkMqX8rmhQo7FeQ6HCmzk
kQ4hsTjojKDWxEhgjrFEq3rxkvzVPKkOWMsf1S0bxktgmavjEaFz4Sdgkx8vW4qj
0/Kcv36jeUNLx0Fc0JSQrABVFrsoDMpJ+gyvmYgoc4Acb24WUwkzxnuu3IPKGy2v
GXGbtbHCHI+AkvFARHGXnechvtQp1W8UCAQa+HcI2loFOedavAPTYfDjgUYKF4Al
cXaHMd/7r1HO4i9laQys+bRrFsC0jXsKw5FCsYEKi52pX5vJTJeGiVl8UdJ4nn0g
U7nCEWZRpfy/s1q9rRWM6ULqEckZvIg6oTGPV+Y58ocdAStdYgo7a+YwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/6EDdPsKtt6AFnz9TU9Hzix4zeMB8GA1UdIwQY
MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt
ZTA4NTA1YzkxMDY2LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2
LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARd6CzeO0
7Ka3eFkkhA1JhmHVvhIAXlf7WxQ+cDngOfKDZgUizSjiAE6ouW+211K3teKcD8Zw
CohzdRAKAxGftSRicKP7IcF1PuNHsPVCm5cdeOq9ojydNcKesr3pZ8SI+dcp7T8L
+BUsVRJs01cLvEvAZDwJmUsxOLhYAQ2igxpQTFxdryVW6pI67YFhzjQWfYr/qQ10
qmdOvHF/aS++Tvnz8D/Rl06ILSdOnrdoebwG/gNq2sOGXQMHobWGbLeVbbrrSFcQ
0I9HM/YRJiSBPxQh4j56gP85P6ycM3tCIS5kRLkADPTNrLtvBHqBWOYjVXYpqzPN
9XRRbAYVwzHyXA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:03 2025 by rpki-client