Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: UCAgLv+TM9r1ysCn0360kygCwsKMCNxOxv9jSHOnTxU=
Subject key identifier: C1:B2:60:CE:8C:29:71:E8:DF:A5:A6:10:87:FC:C4:64:E3:D1:D4:FB
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 0197B6A17462BF6DD8634C912A6663FEC3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0A1D
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: 8q/wmgkSQHTYtvQ2byA+zunEsWXLZVzw+RTyXGrBHfA=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:74:62:bf:6d:d8:63:4c:91:2a:66:63:fe:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=c1b260ce8c2971e8dfa5a61087fcc464e3d1d4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:81:af:94:d0:24:f5:2b:2f:bd:43:42:96:
53:5d:f2:a3:9c:9e:2c:fa:13:ae:78:4d:56:d0:80:
ae:c8:23:49:0e:23:4a:03:71:2e:a6:ac:c1:7d:7f:
27:8c:2c:86:04:e4:3b:5e:9d:ad:a8:46:53:2f:d3:
42:ca:5b:4c:1f:f6:e9:2f:87:50:a7:af:9b:5d:85:
c9:63:28:07:24:86:16:ce:73:59:33:44:f7:5c:d8:
eb:9f:6c:bd:44:e2:b4:4c:33:29:1a:b4:d5:59:61:
f1:ac:68:1f:4d:97:eb:b2:c6:18:08:b4:80:ba:9b:
c8:62:84:9e:4c:9c:d9:1b:b2:b1:db:cd:86:0b:a7:
77:25:7e:be:2c:d6:06:18:15:10:ed:11:48:48:a1:
de:c0:df:0b:08:21:3e:ab:6b:ac:f3:5f:1f:8b:30:
37:94:f1:f1:ef:ad:4b:0d:c1:f9:ff:b8:8a:ea:9b:
88:60:da:2f:65:59:56:91:f8:42:98:2e:58:d8:0b:
a1:05:01:e8:c9:9a:8e:7e:f2:7a:fc:ee:12:e6:b3:
6e:13:35:e8:25:6c:b4:8b:fe:cd:6a:e2:dd:16:1c:
df:8b:6f:68:80:da:94:3e:7b:4d:ab:39:f8:ce:99:
de:61:cf:4a:cc:92:cd:69:71:d0:92:82:ee:ff:9b:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B2:60:CE:8C:29:71:E8:DF:A5:A6:10:87:FC:C4:64:E3:D1:D4:FB
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a3:c1:97:a4:48:d6:87:b4:a3:7a:a3:be:85:8c:64:fa:f8:
9f:57:56:91:27:00:32:f2:08:7b:df:ed:95:2f:60:11:8a:e0:
06:92:78:80:8d:ed:9b:05:0f:5f:81:74:8b:40:1e:58:9e:37:
d2:68:68:fb:9d:b2:a0:f3:f7:96:f0:09:39:02:e2:ed:0b:06:
d3:5e:d1:74:9a:a7:55:75:6f:46:7c:e2:e1:37:bb:c7:5f:4a:
fa:07:e8:2c:08:42:9c:ea:a1:7d:67:2c:a2:86:90:cd:a5:e7:
da:e2:cb:8a:b5:f6:85:e4:c5:6c:d5:20:4c:ff:47:e0:40:ca:
b6:9a:41:91:fa:fa:24:06:d2:a9:17:c1:18:71:06:85:2d:0f:
48:44:3b:35:b3:69:50:7b:d9:1d:4d:18:2e:86:ea:5a:fc:77:
fa:b7:b2:4e:8c:3a:3a:b9:12:54:10:6f:e8:b5:8a:8b:0a:67:
77:5c:25:01:2a:1c:1c:23:3f:e0:ab:5b:5d:ca:7a:47:9e:32:
fb:e8:d8:b2:b9:77:a8:5c:91:bf:43:1c:db:85:68:ab:29:43:
5b:56:c3:46:a3:61:41:84:da:8b:21:b5:ed:85:04:34:fa:5d:
6c:9a:4b:db:04:c9:85:9f:36:63:a5:f8:32:1f:7a:a0:0e:09:
44:52:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:43 2025 by rpki-client