Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: z258zPLjkJK0SUVQf5qBkSc0Nai8e0Vfl4kYK78AbUk=
Subject key identifier: 5B:8D:03:55:F8:35:9A:53:73:77:81:E5:9C:B9:57:30:04:E5:9B:15
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 019767E09CDBD656E4BCD1978E851D92FE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 06:01:02 +0000
Manifest this update: Fri 13 Jun 2025 06:01:02 +0000
Manifest next update: Sat 14 Jun 2025 06:01:02 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: ZTS10hX5k+AJx6ND5i/eLUOgZBDwNwAM8quwhLho2Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:9c:db:d6:56:e4:bc:d1:97:8e:85:1d:92:fe:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jun 13 06:01:02 2025 GMT
Not After : Jun 14 06:01:02 2025 GMT
Subject: CN=5b8d0355f8359a53737781e59cb9573004e59b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f2:7f:7c:c9:ed:0f:ad:3e:98:f6:80:81:4a:
b3:d6:b9:d5:f7:53:15:13:49:30:3f:f0:b2:42:31:
a8:f6:ea:7c:20:4c:bc:91:96:c6:33:28:0c:2b:41:
06:fd:ab:ab:fa:0e:61:4b:f0:b8:df:b5:81:cf:e0:
e7:c9:cb:6c:8a:17:37:1e:62:e3:ff:80:1a:7a:8d:
0b:c2:6d:20:49:e8:59:03:b6:a4:10:d7:26:1e:2a:
41:20:3f:a4:5c:bd:d2:2e:93:2e:0a:3a:df:70:eb:
2e:24:2d:4f:57:2b:d8:61:21:2f:28:c2:4e:99:63:
60:6b:79:f6:58:1d:58:27:3f:04:a8:e4:f4:2e:af:
3c:ef:24:1d:2e:ec:1a:28:98:72:63:8f:97:c0:ff:
91:a6:02:ed:ab:fd:4a:3a:11:94:9d:1d:1a:0d:88:
f4:03:60:d7:f1:81:92:36:62:f0:8c:95:b4:d4:1b:
75:a4:0b:80:ad:39:fe:4b:20:5e:bf:60:29:85:3e:
75:85:ae:c1:c8:04:bd:53:17:a6:1a:58:bb:83:a7:
d7:8d:7f:62:ec:33:58:51:9f:a4:4e:89:b6:96:2b:
84:b0:64:99:49:02:08:44:6e:3b:28:c1:8a:93:30:
42:bb:4b:6c:63:94:28:d6:58:51:9c:64:5c:9d:e4:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:03:55:F8:35:9A:53:73:77:81:E5:9C:B9:57:30:04:E5:9B:15
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:74:b3:bd:11:22:48:3d:52:0c:ff:30:63:5f:c7:84:3f:46:
ff:0a:d6:bd:24:75:f0:8d:31:0a:5e:dc:35:86:3e:52:06:f2:
2d:64:0f:56:16:07:11:90:e7:0a:e9:ea:af:67:d0:84:42:c8:
c3:a6:cc:05:a6:ef:84:eb:9d:ba:93:cc:b7:6b:bb:8a:be:13:
65:96:72:23:7d:9d:aa:d6:23:eb:1c:17:79:00:2e:19:9b:05:
6f:b3:95:62:6d:c0:94:fa:f4:a0:5b:e4:64:f5:51:05:a8:eb:
1e:7b:e2:ae:90:a2:d8:58:92:65:27:a7:e3:e5:d2:e3:de:74:
a3:f4:ab:f0:b1:6b:3c:3a:62:5a:98:22:5c:98:08:a1:92:c7:
93:38:09:10:52:4f:4c:0c:04:07:73:de:e8:b3:2a:dd:13:2e:
f5:11:4e:cc:fe:1b:26:49:d6:2a:82:c2:b4:6e:5a:fa:b6:5d:
a8:b2:09:e6:b1:59:c4:af:4c:78:d0:d9:8e:16:ba:4b:68:74:
7e:76:1e:f3:ba:4d:12:6e:d6:54:37:cf:cc:71:a8:a9:87:d0:
55:ec:d8:d8:4a:b0:69:d1:25:b1:a5:fe:05:27:28:59:27:52:
3c:83:7e:ff:2d:cf:ad:29:74:aa:30:a9:11:ca:a8:f8:14:9c:
5e:cb:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:41:59 2025 by rpki-client