Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: NASvyWmaHVqhDpwQpqumZDBXj5IRrj10d5DNzAfrwHM=
Subject key identifier: D9:F8:8F:D2:B2:D1:DA:A6:23:57:F6:24:A7:91:B5:43:31:C0:18:48
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 0196AC1FE7B57512204C818B9EE257814AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0993
Signing time: Wed 07 May 2025 19:01:34 +0000
Manifest this update: Wed 07 May 2025 19:01:34 +0000
Manifest next update: Thu 08 May 2025 19:01:34 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: bRKX7VXsr+MRHvoWtmzqwSdVhG5Xn23SexJjbOxtXz4=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:e7:b5:75:12:20:4c:81:8b:9e:e2:57:81:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: May 7 19:01:34 2025 GMT
Not After : May 8 19:01:34 2025 GMT
Subject: CN=d9f88fd2b2d1daa62357f624a791b54331c01848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:5d:d6:29:e8:28:a2:a0:28:56:6b:da:03:
d2:06:cc:26:7f:b3:30:97:af:99:50:20:e2:f4:7e:
70:65:4b:c1:e6:c5:6e:48:3e:2d:ca:66:d8:a6:0c:
8e:1e:73:d7:69:ce:25:ee:fc:e3:d1:5e:2f:2a:54:
1c:ab:9c:16:07:74:e8:3c:12:69:a1:ef:18:b1:80:
b6:49:b3:04:c6:f9:b3:9c:46:07:48:7c:6c:d1:63:
38:9d:ff:3a:35:26:8c:b0:41:a1:f1:28:10:33:0f:
0a:16:bc:b7:12:9a:c9:b6:b0:65:85:e9:8d:2b:df:
6c:ae:1b:72:92:d7:21:c9:f0:80:58:07:e8:17:0b:
6c:80:16:55:ed:5d:ed:c5:70:6f:4f:77:c1:b4:8c:
89:df:f6:16:5c:bc:6c:dd:b8:03:bb:f7:77:30:ba:
6a:2a:63:84:bd:df:a1:37:88:7a:75:8a:53:df:ca:
97:b4:ee:a4:14:91:b4:95:c3:e9:0b:40:68:fe:b6:
b7:3a:27:51:16:f4:46:1e:60:0e:a1:0a:4e:bc:f5:
34:ec:89:bf:86:6d:46:39:c1:f8:f4:7e:18:f3:7b:
04:8a:05:b4:18:80:7f:79:55:bd:d8:d1:d5:58:26:
2e:34:a6:5d:28:97:15:d2:ea:b8:2b:c5:35:53:49:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:8F:D2:B2:D1:DA:A6:23:57:F6:24:A7:91:B5:43:31:C0:18:48
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e8:95:dd:5f:a0:ea:f7:b0:4d:a7:c6:65:7b:13:9e:af:45:
38:ac:46:72:66:ff:6e:d7:d8:d2:de:ae:9c:83:74:b5:94:7b:
e0:ea:52:57:1c:68:8c:08:5c:5f:fb:a2:d1:b0:5e:0d:0e:d7:
68:c5:28:56:81:df:8f:3f:1e:5d:d0:a0:ab:8c:41:b2:6c:48:
c7:7c:5e:90:4d:fc:c2:09:a4:25:1e:8a:7a:cd:2c:65:d0:59:
14:85:6b:6b:e7:fb:d5:a4:dd:96:49:7a:20:9a:4c:e3:74:e9:
01:22:29:01:2c:3d:a3:41:23:6c:4c:f7:d4:99:bd:51:f4:e2:
ab:8c:84:ed:07:29:5a:9b:0c:25:54:c1:ea:68:eb:34:6c:bb:
17:f0:e4:af:d9:5c:ca:13:99:08:d1:e9:07:dc:26:16:69:85:
20:45:14:73:0a:a3:93:6c:11:c4:76:52:58:97:d2:72:77:85:
40:f9:8c:c0:77:72:97:af:92:1c:f2:cb:87:b0:4d:b8:f4:98:
7e:54:03:10:a4:01:d1:41:40:69:4a:7d:e6:cb:08:a4:1e:c1:
05:c6:43:4c:20:0c:08:b6:27:91:d8:64:1d:77:6f:d4:0b:b9:
e3:2b:9b:dc:ec:d4:32:25:3f:d7:92:75:9d:c6:97:bf:14:14:
d3:02:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:42:48 2025 by rpki-client