Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: cSlfvUJYld/gaNB/jltyiadsLc2EXdKVedvUp0rqBaE=
Subject key identifier: 98:CE:F3:99:8B:70:B4:F4:7F:E5:D8:07:80:C5:B6:76:24:5B:B8:7F
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 019A72263CE1223564ACCFC1284DBC25A6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: 83aEXKDqAzoOgQM+8xlUN31InjqXp0wg5NwYPxzj1W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3c:e1:22:35:64:ac:cf:c1:28:4d:bc:25:a6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=98cef3998b70b4f47fe5d80780c5b676245bb87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:91:81:fc:24:63:84:fc:49:4c:82:22:c9:
d7:19:18:ab:00:df:cc:60:6f:f5:2f:b9:e8:bb:d0:
97:b7:c8:3c:8a:ae:72:5f:d6:ee:33:68:01:3b:7e:
4a:f8:f9:f2:77:c4:d7:19:08:a2:b6:ab:17:a6:37:
3c:17:9e:1e:04:a2:50:0e:5f:bf:87:bf:cf:44:00:
12:b6:53:d1:2d:2c:35:21:bd:93:6a:cb:48:31:e6:
58:25:cd:ea:a0:32:2c:bf:c4:3f:a4:58:e6:6b:96:
81:ef:c0:62:48:d7:18:e2:83:29:bf:d0:77:19:15:
02:64:c8:d5:76:97:d2:52:55:40:e2:fd:c7:ce:98:
1e:bc:7e:e6:ef:f7:b3:7b:87:e4:b2:9d:fc:68:31:
96:10:0c:1e:d9:0a:2e:28:d0:94:db:c3:7f:3f:af:
19:5b:51:e6:65:46:49:9c:e8:39:53:eb:b4:97:00:
ad:c8:69:d2:95:3e:dc:50:44:1e:c5:39:00:21:69:
26:f5:fd:ea:43:c4:39:03:48:33:b3:c9:15:a5:48:
25:c4:c4:e8:8e:e2:58:25:61:f1:52:35:19:c0:94:
32:a3:18:7a:49:6c:b1:6e:60:db:e8:a9:0d:4d:d5:
90:2b:13:7a:e0:fc:12:43:3d:14:48:50:df:09:d9:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:F3:99:8B:70:B4:F4:7F:E5:D8:07:80:C5:B6:76:24:5B:B8:7F
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3a:b3:e0:af:05:dc:9b:eb:02:c5:bf:9b:27:78:29:92:5f:
2c:61:a9:33:c0:f0:60:bb:b2:d0:13:93:a4:68:be:ae:2e:8c:
2e:b7:f9:66:11:d4:04:d7:91:12:26:10:07:27:e2:a5:8e:72:
44:f3:70:75:9f:97:e8:bc:2b:52:8b:0b:22:67:39:4b:7e:df:
c4:0e:3e:d9:d4:ca:09:6d:f3:c0:a4:9a:a2:6f:d5:6c:08:0b:
17:8d:1e:58:22:63:77:71:c1:bf:24:44:3b:14:18:79:b7:8c:
6b:be:4e:d3:34:7f:4a:4d:30:1d:82:9d:5f:d9:35:15:80:34:
d9:7d:a3:1f:20:84:0f:03:a1:b2:e6:fd:20:4b:05:01:d7:a5:
5c:6a:88:d7:63:df:fa:ff:67:fd:d8:14:da:eb:e3:fc:ac:4c:
0d:4a:67:59:78:87:23:00:45:bd:6e:11:26:a1:d3:95:27:0e:
48:5c:29:c7:51:e4:6d:1e:9d:c5:5f:a3:db:d0:88:2e:71:bc:
ba:f9:de:1e:5b:51:be:42:bc:38:f6:5d:bf:f0:c1:bc:e1:d3:
50:f9:52:f5:74:46:92:d5:a3:fb:93:44:b9:70:8e:16:e4:d6:
be:5f:20:c4:c7:7e:a3:55:e3:65:8a:8c:2e:37:4a:cb:6c:3a:
31:73:82:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJjzhIjVkrM/BKE28JabeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1
ZjE2MTYwHhcNMjUxMTExMDkwMTM5WhcNMjUxMTEyMDkwMTM5WjAzMTEwLwYDVQQD
Eyg5OGNlZjM5OThiNzBiNGY0N2ZlNWQ4MDc4MGM1YjY3NjI0NWJiODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAWRgfwkY4T8SUyCIsnXGRirAN/M
YG/1L7nou9CXt8g8iq5yX9buM2gBO35K+Pnyd8TXGQiitqsXpjc8F54eBKJQDl+/
h7/PRAAStlPRLSw1Ib2TastIMeZYJc3qoDIsv8Q/pFjma5aB78BiSNcY4oMpv9B3
GRUCZMjVdpfSUlVA4v3HzpgevH7m7/eze4fksp38aDGWEAwe2QouKNCU28N/P68Z
W1HmZUZJnOg5U+u0lwCtyGnSlT7cUEQexTkAIWkm9f3qQ8Q5A0gzs8kVpUglxMTo
juJYJWHxUjUZwJQyoxh6SWyxbmDb6KkNTdWQKxN64PwSQz0USFDfCdlWZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjO85mLcLT0f+XYB4DFtnYkW7h/MB8GA1UdIwQY
MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt
ZTA4NTA1YzkxMDY2LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2
LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTqz4K8F
3JvrAsW/myd4KZJfLGGpM8DwYLuy0BOTpGi+ri6MLrf5ZhHUBNeREiYQByfipY5y
RPNwdZ+X6LwrUosLImc5S37fxA4+2dTKCW3zwKSaom/VbAgLF40eWCJjd3HBvyRE
OxQYebeMa75O0zR/Sk0wHYKdX9k1FYA02X2jHyCEDwOhsub9IEsFAdelXGqI12Pf
+v9n/dgU2uvj/KxMDUpnWXiHIwBFvW4RJqHTlScOSFwpx1HkbR6dxV+j29CILnG8
uvneHltRvkK8OPZdv/DBvOHTUPlS9XRGktWj+5NEuXCOFuTWvl8gxMd+o1XjZYqM
LjdKy2w6MXOC9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:26 2025 by rpki-client