Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: t3I2wItDa2DuSYW/wLw2h/NYuOG1sZZAjqHBwhiugw8=
Subject key identifier: 24:02:63:2A:9A:C3:3A:26:74:70:DF:3C:75:A3:75:A3:3D:81:16:92
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 0198D4731719BCB992B86233C0545C63E2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0AB1
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: j2buVa5+ywRMD8E4cTxYoIPP9YpRA6cdhDIwwCbBZds=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:17:19:bc:b9:92:b8:62:33:c0:54:5c:63:e2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=2402632a9ac33a267470df3c75a375a33d811692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:a2:70:c6:19:00:8f:d7:47:38:b7:73:cc:
77:32:1e:ce:d5:3a:de:f2:3d:03:90:1f:79:24:d8:
f4:40:bc:44:05:32:28:7f:84:04:ec:e2:25:5c:4f:
07:82:10:1e:c4:85:77:60:f4:ed:62:ca:f5:3c:9e:
f1:53:af:20:50:92:5d:95:b5:cc:84:60:12:da:cf:
c3:5e:75:fa:75:c7:6d:85:c5:35:21:3e:f4:99:43:
ca:90:3f:fe:73:e2:fd:31:e1:25:db:23:a0:27:41:
a1:6f:e0:36:19:cd:22:ce:22:f5:86:c7:10:77:f5:
f5:ed:8f:f9:a4:2f:ff:e0:c0:4c:70:6a:f9:06:63:
3f:0d:93:75:75:2b:a3:71:26:d5:41:6e:a3:27:1f:
5a:1c:df:15:cc:3e:ce:ab:a0:ce:53:b8:c1:2c:60:
be:f4:24:b2:02:f9:a0:d3:99:44:91:30:e5:8e:06:
2a:72:52:07:03:6d:bd:94:d1:b1:7d:83:69:77:15:
6f:b6:b5:ba:ea:2f:b8:21:d7:5c:fe:48:2f:64:c7:
98:da:2d:68:94:1b:55:6a:5b:fc:1b:1a:aa:ae:ea:
d3:62:ff:2e:f5:b6:d1:29:a5:71:b8:fd:84:f7:19:
ae:e1:93:28:16:ce:36:b6:4d:7d:3f:6e:3d:a1:03:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:02:63:2A:9A:C3:3A:26:74:70:DF:3C:75:A3:75:A3:3D:81:16:92
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:ff:cd:5a:62:62:87:ac:62:d8:80:a7:ec:bd:c9:d0:55:
9a:f2:53:32:d2:e8:87:96:36:24:4c:b6:3a:d8:2f:59:49:6b:
99:22:bb:7b:be:d5:1e:d9:d6:b9:36:ff:7f:11:e1:9d:49:fc:
c6:6c:c8:8d:00:90:1e:c0:68:6a:38:70:bb:66:68:5c:a2:0f:
dc:3a:da:65:9c:de:e9:0d:fc:dd:b0:87:34:46:06:49:90:a9:
35:5a:43:42:55:fe:a6:b2:80:79:2c:c1:72:9d:1d:87:77:65:
39:92:36:e1:8f:38:71:b2:5d:9e:fc:1a:f0:51:95:fb:5a:64:
b8:fc:bf:66:ea:02:c0:3b:ee:2a:84:21:9c:3d:99:3b:91:74:
ff:7e:c4:a7:08:7b:b9:57:5a:42:db:2f:ab:a7:17:d1:86:67:
a3:bf:83:92:f9:15:e4:5f:b6:36:e1:46:fa:7c:d5:3b:72:c6:
2f:ac:f7:55:8a:03:1a:75:ed:8f:e6:7c:84:e8:a6:d6:00:10:
44:40:7b:3c:39:f2:db:3d:e9:0d:eb:8a:7c:ac:51:ee:b2:ed:
2c:0d:ab:f0:6a:4d:24:c3:0b:28:d6:51:66:82:2d:4c:db:2d:
b2:69:8b:ac:14:a9:8d:1e:fd:50:ce:20:6b:e8:e3:99:5d:d6:
e8:48:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:55 2025 by rpki-client