Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: U36SV5HyyrEEUZ6T74cTVxLLgc9sVLpf33OvaIunQ+k=
Subject key identifier: DB:53:84:F7:47:9E:C0:AD:FB:9A:26:A9:FA:D5:14:9B:A4:13:F5:A1
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 019754904A0C27768120B75D6D887BD5F3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 1587
Signing time: Mon 09 Jun 2025 12:00:31 +0000
Manifest this update: Mon 09 Jun 2025 12:00:31 +0000
Manifest next update: Tue 10 Jun 2025 12:00:31 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: wP/hCvtk7CBYKG2QrMZDdEnUCDx8q2tKn4qQyxd2YMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:4a:0c:27:76:81:20:b7:5d:6d:88:7b:d5:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jun 9 12:00:31 2025 GMT
Not After : Jun 10 12:00:31 2025 GMT
Subject: CN=db5384f7479ec0adfb9a26a9fad5149ba413f5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:3a:a6:6a:a4:de:e5:8c:66:ab:91:96:e6:
60:b9:08:81:ed:a2:84:70:18:74:1e:80:49:b9:5a:
75:90:04:f5:27:f0:37:d4:b3:08:3f:0a:07:98:b0:
44:16:5c:df:fe:9b:68:10:d9:34:ce:ea:4c:06:38:
1f:09:67:40:a8:29:8a:9e:20:8e:21:ac:ec:7a:d1:
b2:c1:25:3f:51:3d:d9:5f:2b:0d:8d:f1:7e:f4:2e:
11:29:e4:93:47:19:d2:95:d8:7e:8a:33:48:95:99:
bb:9c:3f:64:c3:7a:2e:b4:c0:2b:3f:1b:11:b3:a0:
d0:53:b0:48:f7:1e:f2:00:b2:ac:cb:80:a1:ca:fd:
d1:37:48:cd:9f:0f:71:18:45:7b:5e:ca:34:73:7c:
0c:a9:5e:17:3b:37:8c:7c:cb:71:47:d8:b3:26:a8:
a3:70:8b:46:2a:4a:41:50:b7:e5:35:16:b6:4b:29:
ca:64:e8:4a:1f:93:5a:45:d3:fd:70:71:64:0a:0f:
0d:9c:61:e1:86:63:cb:f4:8f:24:2e:36:a4:f5:9c:
c5:af:12:e2:3e:53:eb:ea:f7:b8:26:99:af:e9:16:
83:39:b7:c0:4c:2c:66:ba:97:74:9e:2e:74:d0:73:
ca:c2:99:41:5b:a0:c4:08:95:79:7f:47:31:e4:70:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:53:84:F7:47:9E:C0:AD:FB:9A:26:A9:FA:D5:14:9B:A4:13:F5:A1
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:7c:5a:3c:cd:5e:38:57:2a:70:3a:c9:c2:79:7e:76:35:
76:79:39:38:b5:29:b5:17:2e:73:ea:f1:87:ba:e3:56:8f:04:
2a:31:4f:4d:f9:90:06:fb:e7:40:6d:07:8a:a5:59:17:a1:97:
a8:d3:a8:dd:9b:ec:db:2d:c0:1e:cf:e1:99:23:1a:db:b3:39:
a1:3c:54:f5:10:f0:68:63:c4:90:a2:bd:a0:4b:d9:1d:d8:29:
9c:a6:a8:a7:6a:d8:5f:c8:2b:4f:43:cc:6b:80:76:09:f5:24:
0c:b7:06:df:99:4c:c4:96:46:ed:dc:c5:75:63:59:ad:14:a9:
81:91:4a:f6:bf:81:9c:5e:0f:ef:3e:bd:ee:a4:6d:7a:b7:f2:
45:15:a4:a0:7e:44:d1:ce:1f:83:7f:85:58:ea:c8:1a:fc:2e:
b7:c9:ec:98:b2:6c:26:da:48:e1:a4:99:10:db:b6:44:f2:f4:
f1:4d:2c:82:8f:ed:6b:fb:4c:85:34:d2:ef:c7:d0:a1:44:4a:
44:71:23:e9:17:de:a2:f7:26:e8:27:a5:de:5f:39:72:f8:4d:
c9:2f:f8:16:64:be:0c:72:b0:a1:4b:8f:1b:92:fc:6d:53:7b:
ce:db:b5:4f:8e:12:2f:e4:8a:b4:8f:eb:a2:e3:1b:a0:14:30:
47:ab:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:39:36 2025 by rpki-client