Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: t7J3Tvf1XrSDjRHmrwHXLaU84Q8Q2ZSeSlUwF33oEK8=
Subject key identifier: 77:DD:CB:B4:FA:18:55:EC:F1:E3:A9:72:ED:DC:61:46:DC:27:84:1B
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0197640367740CE32DDC72D40303B3AD7534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 158F
Signing time: Thu 12 Jun 2025 12:00:33 +0000
Manifest this update: Thu 12 Jun 2025 12:00:33 +0000
Manifest next update: Fri 13 Jun 2025 12:00:33 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: sjG331WNOwSr+7i91+I3JCHnuJfWzvdG+s/Vgvglw1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:67:74:0c:e3:2d:dc:72:d4:03:03:b3:ad:75:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jun 12 12:00:33 2025 GMT
Not After : Jun 13 12:00:33 2025 GMT
Subject: CN=77ddcbb4fa1855ecf1e3a972eddc6146dc27841b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:d4:08:31:93:05:d6:91:53:65:54:79:74:
a9:c6:b8:09:62:53:06:d4:bd:95:e0:0d:3d:47:a4:
a3:98:f2:13:f4:77:9e:3a:05:b8:91:7a:3f:bd:58:
95:6c:73:88:e7:96:00:ee:55:db:8d:08:69:3a:b3:
64:55:e2:c9:c0:81:e0:62:49:48:1f:7f:36:30:e3:
fa:b1:59:43:5c:e4:db:3a:cb:cd:95:83:5d:94:af:
b7:b3:ec:ef:b8:09:f4:48:3a:19:eb:d2:d2:44:0d:
80:e0:25:34:7d:c7:d3:fe:6f:96:2e:d3:f5:42:78:
13:1d:6f:c3:b5:bd:5c:b7:61:a7:82:df:6f:04:64:
8a:df:fa:b3:65:bb:23:f0:95:11:7c:33:71:40:59:
01:c9:77:fe:e0:2b:76:75:cc:7b:34:1e:73:c0:fd:
13:1e:10:97:1f:29:95:eb:b8:74:ac:22:e5:b3:2e:
83:ff:5a:05:a9:3d:2b:7b:0f:b2:fe:7f:06:f8:6e:
c9:26:0d:9a:46:04:76:5e:9b:9e:e5:fa:65:47:eb:
15:d8:83:4e:2a:70:6b:55:64:6b:c5:9d:d8:d6:fe:
6b:1e:21:95:87:d0:7c:d1:d2:9a:00:67:7f:cd:dc:
ba:f6:4b:5c:eb:ed:49:1c:86:e6:b6:d7:dc:95:25:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DD:CB:B4:FA:18:55:EC:F1:E3:A9:72:ED:DC:61:46:DC:27:84:1B
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ab:52:e8:6e:11:b6:37:94:75:de:bf:b5:c0:81:41:b6:22:
73:d3:a9:1e:c2:29:36:11:b2:fd:b9:a8:96:26:4e:ab:d5:68:
3a:cd:db:8b:d0:64:17:2c:56:92:87:c9:d9:04:da:8d:4d:06:
2a:58:16:d6:e9:ba:2a:91:45:66:54:b7:61:0f:6f:e5:26:c1:
ec:fd:65:3d:8f:a4:53:46:0d:76:20:76:a8:d0:ac:6f:ec:c4:
af:a2:c0:68:c5:6e:7a:d3:15:b5:74:25:41:5d:55:62:03:d8:
72:fd:c3:2d:d0:2d:fd:c3:8e:2d:06:dc:82:26:68:b4:bd:6a:
9e:58:88:c7:c0:c2:9f:fe:8a:fe:32:a6:1b:a2:9a:0d:d9:56:
66:45:ca:ee:ee:50:3d:9d:fa:c8:85:5a:53:0a:41:31:af:73:
f0:8d:f2:cd:f3:ca:04:0c:4f:8a:1f:f0:81:5e:0f:d0:1a:1f:
f9:2b:41:ea:d1:3a:0e:3b:4f:32:46:82:12:c2:d9:a3:8f:91:
e9:01:b6:a4:53:ac:ca:37:ba:83:6c:c0:a1:6e:cb:25:fb:2f:
97:e1:2d:a2:ba:6d:3c:11:99:62:1d:25:64:05:26:00:ea:e2:
ba:ef:01:06:41:7c:ed:e0:e5:c0:49:75:8f:c8:eb:d2:e2:6d:
3d:e4:a7:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkA2d0DOMt3HLUAwOzrXU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1
ZjE2MTYwHhcNMjUwNjEyMTIwMDMzWhcNMjUwNjEzMTIwMDMzWjAzMTEwLwYDVQQD
Eyg3N2RkY2JiNGZhMTg1NWVjZjFlM2E5NzJlZGRjNjE0NmRjMjc4NDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnULUCDGTBdaRU2VUeXSpxrgJYlMG
1L2V4A09R6SjmPIT9HeeOgW4kXo/vViVbHOI55YA7lXbjQhpOrNkVeLJwIHgYklI
H382MOP6sVlDXOTbOsvNlYNdlK+3s+zvuAn0SDoZ69LSRA2A4CU0fcfT/m+WLtP1
QngTHW/Dtb1ct2Gngt9vBGSK3/qzZbsj8JURfDNxQFkByXf+4Ct2dcx7NB5zwP0T
HhCXHymV67h0rCLlsy6D/1oFqT0rew+y/n8G+G7JJg2aRgR2Xpue5fplR+sV2INO
KnBrVWRrxZ3Y1v5rHiGVh9B80dKaAGd/zdy69ktc6+1JHIbmttfclSUDowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfdy7T6GFXs8eOpcu3cYUbcJ4QbMB8GA1UdIwQY
MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt
ZTA4NTA1YzkxMDY2LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2
LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKtS6G4R
tjeUdd6/tcCBQbYic9OpHsIpNhGy/bmoliZOq9VoOs3bi9BkFyxWkofJ2QTajU0G
KlgW1um6KpFFZlS3YQ9v5SbB7P1lPY+kU0YNdiB2qNCsb+zEr6LAaMVuetMVtXQl
QV1VYgPYcv3DLdAt/cOOLQbcgiZotL1qnliIx8DCn/6K/jKmG6KaDdlWZkXK7u5Q
PZ36yIVaUwpBMa9z8I3yzfPKBAxPih/wgV4P0Bof+StB6tE6DjtPMkaCEsLZo4+R
6QG2pFOsyje6g2zAoW7LJfsvl+EtorptPBGZYh0lZAUmAOriuu8BBkF87eDlwEl1
j8jr0uJtPeSnGg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:12:36 2025 by rpki-client