Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: iQZzflGvFvO211HOU7I+W1DYHbLn0vSJuUICahZ5glU=
Subject key identifier: EA:A6:75:A5:BA:84:BF:1F:CD:B8:6D:1C:27:B0:E3:95:DB:6A:71:08
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0196A2E4BCBF9D4080539AA4E5B96F4DE59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 152B
Signing time: Tue 06 May 2025 00:00:21 +0000
Manifest this update: Tue 06 May 2025 00:00:21 +0000
Manifest next update: Wed 07 May 2025 00:00:21 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: K2DY7rVOpJG4sssZLblPNRsbNHCjKh2iFi7EhKramm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:bc:bf:9d:40:80:53:9a:a4:e5:b9:6f:4d:e5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: May 6 00:00:21 2025 GMT
Not After : May 7 00:00:21 2025 GMT
Subject: CN=eaa675a5ba84bf1fcdb86d1c27b0e395db6a7108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:3e:ff:07:15:37:db:8c:59:f4:85:da:c6:
94:c8:71:c1:1b:4b:d8:f6:f8:fe:d4:dd:f3:a4:6e:
2a:b8:47:a8:4d:63:84:c9:b9:f2:ba:f8:98:d6:f4:
7d:a0:4d:b3:b4:35:ed:d2:81:d9:6e:54:17:5a:79:
03:e6:c4:1a:55:e8:35:62:99:f3:36:99:1b:5d:f6:
f4:dd:e6:79:35:63:c1:7a:db:d8:91:0d:1d:19:68:
a8:e7:b5:6c:53:65:52:d9:ff:ed:79:a8:b9:52:97:
4a:67:58:7b:72:ee:c3:74:b7:95:10:12:df:5d:6c:
a9:8d:aa:20:c5:58:ca:09:37:f7:7f:04:19:4c:45:
00:1e:81:58:d6:1c:55:8f:ab:6e:7a:10:69:3c:4f:
5e:c8:89:08:d0:63:ef:1f:fc:5f:de:3a:bd:a4:40:
b7:60:0b:d3:be:ae:33:f8:c0:aa:c9:97:e1:be:7e:
89:b2:4c:a8:d6:64:73:23:5f:5e:fc:d6:22:a6:9a:
6c:14:d7:e7:1f:12:69:eb:d4:c8:3c:bb:5e:cb:77:
d4:d6:6b:4e:13:23:09:42:80:0c:51:3c:58:62:4d:
08:c0:ed:d6:90:05:46:21:a0:5c:fd:15:51:58:84:
8a:5c:17:d1:a4:bc:11:99:d2:aa:3f:4d:62:62:e5:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A6:75:A5:BA:84:BF:1F:CD:B8:6D:1C:27:B0:E3:95:DB:6A:71:08
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:13:cd:99:be:20:c6:3c:49:ee:6a:18:66:95:72:1f:a1:0a:
c6:19:ca:c1:80:5d:4c:56:fa:c8:f4:d1:d0:27:6d:7d:19:43:
80:90:6b:cd:fb:5c:6b:47:b8:c1:3f:1c:df:6b:51:34:e9:66:
92:8f:a9:68:70:b5:a0:2a:ac:7d:02:2c:68:4d:88:ff:25:f0:
23:99:4d:a1:69:08:4c:39:55:b2:bc:6a:86:49:eb:4c:49:80:
1b:ac:73:5c:13:79:3c:8d:76:f9:74:c6:a1:ab:de:31:5e:27:
d7:0c:c9:0e:05:48:d4:ff:35:a6:e0:ee:47:40:75:15:0d:4b:
76:2d:e8:30:91:04:f2:d6:78:34:c8:9f:fe:96:27:0d:95:8a:
dc:51:33:fb:22:c8:cc:fd:76:78:50:99:fe:1a:3c:08:a5:06:
62:8e:b8:b8:59:58:44:e7:95:d4:7f:c2:d9:aa:be:6f:03:5c:
3a:48:d7:2e:df:d5:81:67:72:13:cd:58:9a:d9:1b:3c:ad:1f:
e0:95:0c:4e:7c:20:af:07:19:2c:9c:df:42:5b:8f:6d:d4:d8:
f2:ed:16:a3:64:30:66:af:b8:36:65:b1:31:ce:ac:05:18:0a:
e6:9e:d2:f0:8a:3b:5f:16:cf:c0:fe:91:88:ad:29:10:e7:1f:
0b:a6:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:12:28 2025 by rpki-client