Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: gf3+1T/DHCbNTfCwQNiX5vlMTg2CQn2po66dWTxYxbc=
Subject key identifier: 6A:42:23:11:E2:D5:44:44:20:DD:7A:9C:9C:FD:CD:5A:B8:54:A7:36
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 0199FC58D13DDDF833AE2183BB26A51E884D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: TeVIATGJV0cGp6k6TQsUW0j34MutI1CWnHk3R2imt4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d1:3d:dd:f8:33:ae:21:83:bb:26:a5:1e:88:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=6a422311e2d5444420dd7a9c9cfdcd5ab854a736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:a1:fe:88:2a:11:26:33:e0:7a:13:90:f0:
02:b6:7f:04:24:21:66:0a:78:0c:86:10:81:7c:98:
5a:b7:f4:fe:0c:e6:a1:96:ff:40:f0:94:e5:6a:43:
e8:ba:15:c6:9a:7b:24:89:ab:e0:cc:df:c0:fa:84:
db:fb:f2:b6:d8:ce:45:67:0f:c7:42:49:ff:64:39:
f2:6a:1d:69:db:c7:ea:d3:8e:75:23:b2:9c:57:1f:
f3:04:9c:31:95:94:44:4e:36:d7:4b:d3:36:a3:70:
96:f1:4a:4f:ad:ad:7b:ca:a5:05:4a:1f:5a:38:10:
70:e6:4b:9a:8c:50:f8:7d:c3:80:73:71:90:6d:3c:
17:b4:17:5c:41:64:9e:1b:ea:70:33:af:5a:48:a1:
8a:77:0b:33:23:ad:77:00:d0:14:17:59:6b:d9:f6:
74:36:68:62:43:e2:72:7e:2f:e9:71:39:72:55:76:
eb:5f:8c:6f:c5:d8:f7:85:92:f3:cd:02:c8:a6:75:
e5:2c:0b:08:68:f1:d9:f9:0b:b4:96:5b:ed:99:f0:
3a:34:1b:88:17:dd:cc:30:0c:5f:39:f2:a1:db:b5:
e7:b3:66:2b:81:f3:ed:ce:b1:6e:79:74:7f:fa:af:
08:7c:a9:56:0d:23:d6:3a:fe:63:12:22:f0:04:7e:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:23:11:E2:D5:44:44:20:DD:7A:9C:9C:FD:CD:5A:B8:54:A7:36
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6d:52:70:2d:53:a5:8a:01:0c:b0:f6:fb:99:92:69:43:de:
5f:67:54:ca:ae:2d:ba:dd:50:03:a6:fd:36:5f:9f:4e:e8:0b:
61:69:27:cc:85:f2:ae:5d:cc:18:dd:a1:e3:88:e0:56:59:d2:
a9:09:b3:cf:62:51:f9:c0:90:16:93:94:07:30:98:67:8a:73:
f6:e4:83:9b:e1:49:fd:ca:61:57:f4:28:3f:57:6e:5f:71:f3:
a0:58:e4:9e:47:56:39:b5:27:16:6d:4f:c9:1b:cf:6c:28:03:
1e:ea:8c:42:17:9d:01:22:08:04:5c:be:ce:4e:67:29:20:db:
34:ce:ee:4a:d0:51:bf:be:59:f8:6b:cf:94:fe:2f:7f:3b:e3:
f3:ee:ae:1b:8b:b9:f2:71:13:ba:40:92:85:65:d0:ad:48:fb:
da:77:ca:d7:6f:a3:02:4c:60:24:d0:7f:6b:36:93:92:4d:23:
1b:1f:11:02:ac:71:be:72:85:2a:3a:a5:18:81:e1:98:0a:b3:
2c:b1:5c:f8:1e:fd:f5:f6:61:06:0f:a1:03:a3:65:34:8f:b6:
f3:69:d1:a2:df:cf:23:13:8f:a8:a6:18:b9:1d:a5:f6:66:27:
db:8e:a0:45:60:7f:fc:fc:29:74:2a:4b:91:92:9e:57:20:f4:
68:8a:3c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNE93fgzriGDuyalHohNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj
YTBkMGEwHhcNMjUxMDE5MTIwMTQzWhcNMjUxMDIwMTIwMTQzWjAzMTEwLwYDVQQD
Eyg2YTQyMjMxMWUyZDU0NDQ0MjBkZDdhOWM5Y2ZkY2Q1YWI4NTRhNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu72h/ogqESYz4HoTkPACtn8EJCFm
CngMhhCBfJhat/T+DOahlv9A8JTlakPouhXGmnskiavgzN/A+oTb+/K22M5FZw/H
Qkn/ZDnyah1p28fq0451I7KcVx/zBJwxlZRETjbXS9M2o3CW8UpPra17yqUFSh9a
OBBw5kuajFD4fcOAc3GQbTwXtBdcQWSeG+pwM69aSKGKdwszI613ANAUF1lr2fZ0
NmhiQ+Jyfi/pcTlyVXbrX4xvxdj3hZLzzQLIpnXlLAsIaPHZ+Qu0llvtmfA6NBuI
F93MMAxfOfKh27Xns2YrgfPtzrFueXR/+q8IfKlWDSPWOv5jEiLwBH5WLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpCIxHi1UREIN16nJz9zVq4VKc2MB8GA1UdIwQY
MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt
MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3
LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArm1ScC1T
pYoBDLD2+5mSaUPeX2dUyq4tut1QA6b9Nl+fTugLYWknzIXyrl3MGN2h44jgVlnS
qQmzz2JR+cCQFpOUBzCYZ4pz9uSDm+FJ/cphV/QoP1duX3HzoFjknkdWObUnFm1P
yRvPbCgDHuqMQhedASIIBFy+zk5nKSDbNM7uStBRv75Z+GvPlP4vfzvj8+6uG4u5
8nETukCShWXQrUj72nfK12+jAkxgJNB/azaTkk0jGx8RAqxxvnKFKjqlGIHhmAqz
LLFc+B799fZhBg+hA6NlNI+282nRot/PIxOPqKYYuR2l9mYn246gRWB//PwpdCpL
kZKeVyD0aIo8kg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:50 2025 by rpki-client