Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: yn/rtJkRadmyY1tsFRykjA8MSQgEpEQwKk9ubBLMs/8=
Subject key identifier: C2:BC:BC:4E:59:F8:3D:C4:61:D2:7A:A4:48:B0:E0:75:AC:82:DB:9F
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 019873E37D19F5F01F00FDBF56FB0D5750ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0A7F
Signing time: Mon 04 Aug 2025 07:02:25 +0000
Manifest this update: Mon 04 Aug 2025 07:02:25 +0000
Manifest next update: Tue 05 Aug 2025 07:02:25 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: dtpt+vPhOM/KITSimUUrTNal6jxHSP5mf6oeP01yWrA=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:7d:19:f5:f0:1f:00:fd:bf:56:fb:0d:57:50:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Aug 4 07:02:25 2025 GMT
Not After : Aug 5 07:02:25 2025 GMT
Subject: CN=c2bcbc4e59f83dc461d27aa448b0e075ac82db9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:17:70:b3:de:a8:6a:09:e6:9f:0b:2a:d0:
07:f0:e1:b4:6b:0d:82:62:06:34:13:9f:6c:4a:94:
7c:dd:0a:dc:62:64:6b:80:0e:55:98:cc:9e:0b:77:
6c:69:3f:df:19:a5:46:32:69:0a:fd:6c:10:9d:16:
dc:f0:ac:c8:b5:a3:16:83:f2:20:66:d8:78:73:97:
ab:4c:c8:df:e3:23:d7:01:5c:0c:2a:6f:04:04:ae:
c2:9d:d0:4a:f9:6d:bc:c6:2d:bf:05:96:c9:e0:dc:
41:23:d5:72:86:36:92:ae:ca:98:39:10:1f:ac:11:
dc:af:d8:86:8b:da:35:5d:28:e5:35:d5:a3:25:ce:
34:33:ae:0d:1e:76:bb:06:c5:34:69:01:0e:0e:ef:
35:0a:f1:00:f6:9d:d7:1d:7b:1c:58:94:d4:37:7b:
9c:f7:fd:90:77:54:10:08:3f:0b:b3:a8:28:54:2d:
d0:d5:dc:94:53:b5:04:91:eb:65:03:58:8b:ba:53:
52:e2:fb:91:c3:7e:3f:95:ca:b3:b3:c9:78:78:db:
de:b6:84:b0:0e:af:4e:0a:c3:b7:49:78:ef:fa:ae:
fc:85:f9:d9:0d:bc:df:42:f9:71:c7:08:44:68:7a:
4f:80:d8:3a:a5:14:e1:20:48:68:9b:8c:69:40:40:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:BC:4E:59:F8:3D:C4:61:D2:7A:A4:48:B0:E0:75:AC:82:DB:9F
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:0c:c1:d3:2d:58:61:eb:12:71:82:f3:3f:02:d2:04:85:
d8:2d:a6:21:78:2a:e1:05:fa:e9:a3:38:d1:52:ff:f0:fd:c4:
6d:01:87:a0:c0:f9:5c:4c:d2:1b:37:02:c4:7c:00:00:2f:6c:
8e:fb:55:5c:28:1d:3d:e1:93:92:3e:a0:94:19:71:87:b4:c5:
15:32:36:ae:c5:fa:70:e0:48:b6:da:1f:7a:59:a8:8d:95:6d:
3c:c2:df:4e:fd:61:db:f0:30:3b:65:b2:59:0a:f2:0d:48:45:
b6:3e:4a:18:1f:77:f6:42:0c:59:dd:c3:dd:71:ae:c1:0e:42:
ed:a6:69:04:78:c2:34:60:bc:c0:12:30:1e:e9:78:36:cb:9f:
b1:f2:02:9a:47:49:e4:29:c8:05:fc:2a:80:08:45:74:c3:6e:
a1:3f:84:34:a8:78:c1:81:d2:a7:bb:62:48:6a:68:c0:8c:01:
1e:6f:ac:7d:22:0e:00:c8:90:c2:08:ea:89:99:69:3f:97:00:
5c:7d:86:c4:0e:cc:92:36:5d:fb:9b:b9:66:d2:a2:ef:19:72:
46:25:ee:53:7f:0e:3e:89:d9:a0:60:9b:a7:24:0d:69:81:7b:
31:5a:b8:7b:8e:e6:2f:3c:66:ae:84:2b:ef:61:e4:64:ea:61:
16:27:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:09 2025 by rpki-client