Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: 61gjYWij7SNx4H6NOdnq37H2y8Dx+rxlkvTaNeXlbO0=
Subject key identifier: 68:41:65:09:F0:27:36:F4:50:59:15:E3:10:22:09:B7:1E:39:4B:DD
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 019897132C904D8951DBB68276DAD8E90894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 162E
Signing time: Mon 11 Aug 2025 03:01:12 +0000
Manifest this update: Mon 11 Aug 2025 03:01:12 +0000
Manifest next update: Tue 12 Aug 2025 03:01:12 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: HxNjPC1Djcmvr/Qs+xwJO1A25ZB2HFeR1Psds6ay98Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:2c:90:4d:89:51:db:b6:82:76:da:d8:e9:08:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Aug 11 03:01:12 2025 GMT
Not After : Aug 12 03:01:12 2025 GMT
Subject: CN=68416509f02736f4505915e3102209b71e394bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ad:22:41:1c:ec:4c:79:92:83:20:97:8f:81:
4e:98:0b:7d:1a:36:65:8f:dd:85:0a:82:54:89:d1:
45:c7:9a:7f:95:8b:9b:54:91:54:27:b2:24:50:2b:
2b:ad:1d:91:a2:71:0a:d9:47:97:3c:9b:eb:43:34:
d9:36:28:e1:54:c6:e7:9a:df:7b:5d:35:f4:e0:2d:
b9:cd:30:96:03:3f:b3:c8:f1:8a:d0:73:29:83:2a:
ca:22:0b:c7:fe:65:28:ed:28:4f:6b:b5:07:32:cb:
42:86:63:25:57:33:1b:a7:02:44:32:7e:51:2d:0e:
a1:a3:09:84:ca:23:2a:b8:31:18:4f:2e:57:d6:3d:
d1:62:82:e7:28:ae:61:da:00:17:50:e3:be:87:be:
a1:61:43:28:96:84:d8:9d:5d:15:c4:9d:5c:1b:07:
c0:e5:4e:22:44:5f:b7:0f:71:69:cc:87:c2:c6:46:
2a:08:f1:59:e1:b4:ec:77:05:75:5d:75:70:55:25:
ee:84:58:57:f1:87:8e:e5:b7:2c:b5:63:02:b0:02:
0c:fc:73:03:41:85:c6:c6:5a:57:88:3c:bd:ac:4d:
82:36:40:69:ef:bf:92:2a:f2:aa:dd:dc:77:3c:e5:
91:aa:64:ce:e9:03:0a:14:06:d0:75:38:a4:f7:2a:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:65:09:F0:27:36:F4:50:59:15:E3:10:22:09:B7:1E:39:4B:DD
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b9:88:c9:12:be:15:2e:15:56:70:ee:8f:dd:3e:3a:55:a3:
8d:e9:e0:2f:e9:3a:94:cb:b5:1a:20:34:c1:77:29:69:67:1a:
96:b5:02:61:f3:9d:fe:5c:7b:db:31:9e:59:06:4c:a8:d4:9a:
7c:86:a2:54:b3:6a:0c:39:9c:be:27:e9:e7:de:c6:d1:1e:80:
34:7e:c3:7c:f3:54:a4:ed:49:c6:41:59:58:08:77:ba:5a:f2:
fa:99:e5:0d:20:a3:00:aa:65:ac:e1:fd:0d:03:a0:ef:f5:46:
be:5c:7d:e0:e8:5f:d8:4d:b4:30:91:14:e0:22:3e:28:5f:47:
fa:96:08:78:eb:99:78:9e:a4:2e:7a:c0:4a:b1:e8:6d:a9:8b:
21:99:69:c6:87:fa:94:a8:0a:73:d2:79:24:83:8b:5c:01:c1:
46:45:e8:a4:f7:9c:b6:db:76:4d:56:b1:fb:7d:62:a5:b4:99:
23:a2:1c:e4:9f:9d:ef:be:fe:e4:79:5d:ce:92:60:54:ec:0d:
f5:f5:18:2a:af:63:e7:59:32:ab:d6:18:a1:88:d1:c0:80:10:
10:e3:1f:c8:70:4d:00:b9:7e:5d:08:4e:81:b6:35:20:f3:22:
3f:e2:11:4b:b8:1f:32:52:f8:dc:46:9d:2b:3a:ac:00:95:4e:
22:a4:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:16 2025 by rpki-client