Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: C8Jgt1q2JbjfJnoO8MtkJ0zPgueWzhKDMXZzwyTjUBw=
Subject key identifier: B0:CF:45:65:32:E5:AB:71:9C:D8:F8:DA:90:C7:46:E7:BA:06:61:EB
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0199221E83C6BC6DC19999A65160F7E88422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 03:00:49 +0000
Manifest this update: Sun 07 Sep 2025 03:00:49 +0000
Manifest next update: Mon 08 Sep 2025 03:00:49 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: +PEcjgWEb3aSS4OGAGSbbP/HzmzqOOD459H3WLiI+pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:83:c6:bc:6d:c1:99:99:a6:51:60:f7:e8:84:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Sep 7 03:00:49 2025 GMT
Not After : Sep 8 03:00:49 2025 GMT
Subject: CN=b0cf456532e5ab719cd8f8da90c746e7ba0661eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:65:87:a4:5a:fb:20:aa:b8:a1:d1:cb:51:
7f:6b:8a:21:38:da:5b:de:da:1e:ae:75:d6:5a:ca:
0c:6e:78:59:35:5c:dc:96:3d:3d:ab:e7:d8:ac:67:
2c:d1:9f:15:50:0f:7a:a5:0f:4d:98:39:2f:78:4a:
97:08:44:34:83:03:e6:0b:56:69:2c:10:f1:fa:b5:
70:74:c2:5b:99:7f:1e:e2:2f:01:4c:ae:a6:7d:8c:
f1:11:c2:3c:09:4b:9b:ab:9b:99:6c:fa:16:67:fd:
ad:6c:04:b5:b3:8e:2a:9e:08:9a:ba:76:51:4f:77:
bd:13:9e:5a:1d:c2:39:96:90:a3:6c:03:83:c7:71:
23:75:f5:1f:68:ca:51:d3:ee:c9:48:cc:1e:96:a3:
60:1f:04:ff:84:17:a8:db:6e:1a:5b:f0:ab:eb:22:
bd:bf:75:e0:e5:42:8b:f4:59:d4:4d:41:00:15:e8:
87:d2:16:2a:08:ea:76:94:b2:9e:65:5d:84:1a:b1:
f1:66:dc:e8:11:3b:8d:1e:83:a0:04:c6:fa:a4:e8:
aa:e9:7b:73:2b:00:e0:bb:7c:c2:81:64:db:bf:bd:
e7:5e:5d:bf:91:bb:42:63:c3:4a:3d:b0:e9:81:ad:
d5:d1:62:2c:55:ad:b1:60:7c:28:1a:cd:55:01:bf:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:45:65:32:E5:AB:71:9C:D8:F8:DA:90:C7:46:E7:BA:06:61:EB
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4b:d3:9c:d5:e4:3b:1b:d6:81:50:74:33:48:f9:d1:61:56:
fd:d7:27:af:14:fb:f8:00:44:9a:ea:56:89:6f:6b:a4:ae:a6:
c3:69:59:ec:98:2d:26:80:5d:99:5d:41:e2:68:47:51:04:c5:
a5:c1:bd:d8:c9:3b:20:96:98:a5:1f:49:ca:0d:6c:22:f7:fd:
0e:ae:53:a3:42:c3:cd:67:ea:07:78:da:0e:b9:a4:a2:8e:ed:
80:16:74:4e:31:27:74:bd:6a:28:ae:d5:d5:70:5c:7d:4b:96:
a2:ca:e6:3f:fb:3d:5e:f9:aa:6a:a4:7d:1f:98:b4:f6:3d:01:
6a:b6:9c:ff:d6:14:e4:e6:c3:a4:54:9d:05:ec:0c:96:4c:10:
93:54:c2:82:8a:68:7f:07:e4:13:14:b7:19:55:f9:1c:fe:c5:
cf:bf:30:97:ca:89:cf:8c:93:63:e1:f9:08:c6:fc:1e:cc:a4:
3f:be:c1:98:3f:b3:9d:dd:6e:f7:64:a0:ee:f0:e1:d5:c6:0d:
99:51:8f:b9:18:9e:26:8c:50:f7:65:82:04:2b:a9:e1:a6:cb:
34:13:ef:4b:45:56:31:40:8c:72:8a:10:cf:fb:df:1e:8e:72:
ae:78:46:d1:0c:45:54:f3:f3:33:b5:e9:47:42:77:b1:39:25:
ea:ee:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:07 2025 by rpki-client