Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: xMu5hvaoX4ddGvbNpQaXoEg9IEypWSXgYXJOjaSQW/Y=
Subject key identifier: 9D:23:7B:75:E3:45:68:06:0A:E5:DB:2D:26:1C:F0:A7:9D:80:42:23
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 019A50E2D1A9CC625CA538D260DF7065CF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0B76
Signing time: Tue 04 Nov 2025 22:00:33 +0000
Manifest this update: Tue 04 Nov 2025 22:00:33 +0000
Manifest next update: Wed 05 Nov 2025 22:00:33 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: lg+sNoVmK2NcRUwyhVMYjbZ1YLxIr7MYcndtKVzSCUk=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d1:a9:cc:62:5c:a5:38:d2:60:df:70:65:cf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Nov 4 22:00:33 2025 GMT
Not After : Nov 5 22:00:33 2025 GMT
Subject: CN=9d237b75e34568060ae5db2d261cf0a79d804223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:cf:c9:93:ae:49:4e:e9:28:f8:62:31:aa:
9a:f0:02:6b:a5:bd:01:f9:42:a4:c7:a5:c7:6c:94:
71:73:a5:6c:59:91:af:ff:3b:c7:8e:10:9f:d5:26:
f5:b1:98:13:61:c4:04:42:03:c7:3f:d2:ff:4c:9b:
40:e2:38:a0:d8:92:81:11:8e:5f:8c:81:a8:28:74:
38:1e:0a:52:c4:be:1a:59:6a:34:28:57:9a:c5:f7:
33:2b:e5:15:a0:3e:3d:4e:68:9f:8d:40:88:43:bd:
20:f3:73:9e:97:8b:1b:65:15:de:40:ba:74:5f:74:
1b:10:18:bb:d0:0b:0a:56:49:4b:c5:be:cf:1f:86:
54:18:43:e8:01:ac:1d:17:28:3e:11:2b:1e:be:95:
c5:af:8f:01:86:0a:00:63:f8:fd:ba:95:ee:3e:6b:
8f:61:ce:16:5b:0e:e1:14:5e:97:a6:66:5e:e9:48:
3b:6c:a5:3b:ad:73:82:7c:dc:9b:e8:29:95:97:d3:
0e:4c:7a:48:ff:2a:53:ee:1d:c7:66:14:59:71:21:
7d:6e:74:68:e9:67:dd:bd:1d:ba:c9:30:b2:72:55:
29:f0:79:31:9e:56:b3:8c:6f:e0:98:ce:ae:39:ef:
9e:1c:e9:77:25:f7:d1:55:65:42:2d:41:46:1d:b9:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:7B:75:E3:45:68:06:0A:E5:DB:2D:26:1C:F0:A7:9D:80:42:23
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:23:d6:01:9b:94:95:b0:2f:2f:38:a4:24:74:44:cc:4a:2a:
55:a8:95:4e:75:bc:fd:e9:6e:6c:1e:63:0f:3e:cc:4a:6f:c7:
5e:43:20:65:bd:a4:9e:69:60:b7:81:c1:7a:e3:ce:91:01:92:
fa:79:cb:35:31:98:20:ba:48:72:07:90:2c:c1:de:05:08:7d:
3d:eb:8a:8c:0f:5d:67:87:5a:df:90:98:61:51:1d:2e:27:aa:
5f:4f:ae:0b:ba:07:48:65:8f:f5:47:05:8a:09:1a:d7:19:67:
4c:d9:2b:7e:88:77:eb:3f:81:b0:58:bc:77:1a:85:55:e3:19:
31:db:9b:7d:2c:d3:0d:60:1c:20:35:88:2d:a2:58:6c:e6:a5:
0a:c1:2f:37:e7:55:e5:53:4e:06:f1:72:f1:96:66:34:eb:c4:
de:20:19:51:1f:43:f7:1b:70:59:aa:ee:04:2b:eb:52:e1:b8:
c2:13:8b:71:bc:34:c9:84:35:ce:5e:25:c9:20:bb:27:d4:2d:
e2:06:28:0e:31:d3:78:b1:cc:88:cb:f6:bb:c4:da:b7:f0:84:
73:2d:cc:b2:f9:4e:cf:12:b2:f6:58:2a:ad:c0:ab:55:0e:c6:
08:c5:34:c8:b9:d4:e5:5f:94:69:27:bb:7d:69:95:a7:3e:fd:
84:2f:16:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4tGpzGJcpTjSYN9wZc8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YzkxMzE3MjgzMjc2OTM3ZDQzNmY0YjIxNmRjZGEzZWZi
ZTJhODgwHhcNMjUxMTA0MjIwMDMzWhcNMjUxMTA1MjIwMDMzWjAzMTEwLwYDVQQD
Eyg5ZDIzN2I3NWUzNDU2ODA2MGFlNWRiMmQyNjFjZjBhNzlkODA0MjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KrPyZOuSU7pKPhiMaqa8AJrpb0B
+UKkx6XHbJRxc6VsWZGv/zvHjhCf1Sb1sZgTYcQEQgPHP9L/TJtA4jig2JKBEY5f
jIGoKHQ4HgpSxL4aWWo0KFeaxfczK+UVoD49TmifjUCIQ70g83Oel4sbZRXeQLp0
X3QbEBi70AsKVklLxb7PH4ZUGEPoAawdFyg+ESsevpXFr48BhgoAY/j9upXuPmuP
Yc4WWw7hFF6XpmZe6Ug7bKU7rXOCfNyb6CmVl9MOTHpI/ypT7h3HZhRZcSF9bnRo
6WfdvR26yTCyclUp8HkxnlazjG/gmM6uOe+eHOl3JffRVWVCLUFGHbkYKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0je3XjRWgGCuXbLSYc8KedgEIjMB8GA1UdIwQY
MBaAFNnJExcoMnaTfUNvSyFtzaPvviqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmNrVEZ5Z3lkcE45UTI5TElXM05vLS0tS29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mNjM2YzYtMTBkMi00ZjZmLWI0MTgt
NTBiOWQ1MjM2MWMzLzEvMmNrVEZ5Z3lkcE45UTI5TElXM05vLS0tS29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mNjM2YzYtMTBkMi00ZjZmLWI0MTgtNTBiOWQ1MjM2MWMz
LzEvMmNrVEZ5Z3lkcE45UTI5TElXM05vLS0tS29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSPWAZuU
lbAvLzikJHREzEoqVaiVTnW8/elubB5jDz7MSm/HXkMgZb2knmlgt4HBeuPOkQGS
+nnLNTGYILpIcgeQLMHeBQh9PeuKjA9dZ4da35CYYVEdLieqX0+uC7oHSGWP9UcF
igka1xlnTNkrfoh36z+BsFi8dxqFVeMZMdubfSzTDWAcIDWILaJYbOalCsEvN+dV
5VNOBvFy8ZZmNOvE3iAZUR9D9xtwWaruBCvrUuG4whOLcbw0yYQ1zl4lySC7J9Qt
4gYoDjHTeLHMiMv2u8Tat/CEcy3MsvlOzxKy9lgqrcCrVQ7GCMU0yLnU5V+UaSe7
fWmVpz79hC8WXw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:55 2025 by rpki-client