Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
File: RHfGmVk64tYbw3QzU7CdIgQp_ko.mft (raw, json)
Hash identifier: RXU6GFMTI9rda19owz/plgo/I7xMX1IN+2bHbBk8lr4=
Subject key identifier: A7:FF:E6:85:04:02:39:4B:0C:9D:52:E7:E6:57:2C:67:4B:FB:8B:D6
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Certificate issuer: /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial: 019923D62E648163C137B172C2C9B115FDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
Manifest number: 14A9
Signing time: Sun 07 Sep 2025 11:01:03 +0000
Manifest this update: Sun 07 Sep 2025 11:01:03 +0000
Manifest next update: Mon 08 Sep 2025 11:01:03 +0000
Files and hashes: 1: RHfGmVk64tYbw3QzU7CdIgQp_ko.crl (hash: q9oxlPco1gzkrQO1KVCyZ1DiLkiGgdUZToat4numBLs=)
2: RzXNOtmaUP9nPuKXSy-NDZwCUis.roa (hash: lsRLZLjePaa5aCRWbKk0v/Dyt/h5ZUduE7MrGHkvD94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:2e:64:81:63:c1:37:b1:72:c2:c9:b1:15:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
Validity
Not Before: Sep 7 11:01:03 2025 GMT
Not After : Sep 8 11:01:03 2025 GMT
Subject: CN=a7ffe6850402394b0c9d52e7e6572c674bfb8bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:37:59:94:1a:1a:8d:4f:c5:75:46:58:d7:
aa:33:50:fd:c1:6c:08:d4:e9:fe:ab:06:ad:bd:ef:
b4:ac:74:7c:d9:e8:5b:51:12:4a:ab:8a:9e:6a:9c:
21:0c:70:e5:b2:6a:91:5b:65:1b:58:fe:7c:40:11:
bd:90:71:a4:68:e4:d9:5a:a2:28:cc:01:ac:c3:b4:
04:27:9b:a9:5f:2e:6f:08:8d:a4:a6:95:66:0c:25:
37:fb:d6:53:3b:27:52:b5:11:95:22:05:cc:3a:d3:
d0:6a:ae:eb:eb:66:1d:b0:ec:62:cd:c0:0c:ea:94:
e4:99:44:f4:64:f3:a0:a5:79:d4:5c:5a:0b:70:0a:
dc:9b:11:60:62:54:c8:f6:8c:b6:75:db:1d:1e:62:
48:1c:e1:c1:f0:6e:ee:94:eb:34:82:f7:73:22:6f:
e3:41:a3:64:c7:a0:4b:4d:77:de:5e:0d:29:64:4d:
2d:aa:5c:e5:c3:c1:13:45:18:45:34:0a:8e:ba:75:
ff:1b:dd:8b:fc:87:31:26:7f:fa:42:e8:1a:fb:ff:
19:ad:aa:89:5c:80:75:a1:cb:ac:32:90:fc:30:3e:
de:47:0b:b5:a1:52:3b:7b:c2:9c:d8:8f:02:58:30:
88:25:f1:8b:e9:32:1c:07:b8:4c:f5:e7:e6:74:1d:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:E6:85:04:02:39:4B:0C:9D:52:E7:E6:57:2C:67:4B:FB:8B:D6
X509v3 Authority Key Identifier:
keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a1:5e:ce:26:73:d5:d5:f4:b9:ff:97:f7:ba:7c:da:0a:ea:
cc:44:1b:92:66:e0:27:6a:06:61:e8:5f:f0:26:87:1d:d1:51:
95:2c:ff:71:a0:ab:21:a0:02:98:06:6c:d9:78:0d:cc:39:bf:
e7:98:ed:5e:a8:f8:b1:eb:45:78:1f:c0:8f:9a:bc:3e:1f:90:
3b:37:6c:a1:cf:ab:17:a7:d1:5e:38:d3:86:fd:c5:4b:ea:cb:
1d:5f:3b:77:2d:8c:21:c5:4c:bf:02:24:a2:89:35:d3:4b:23:
bc:b1:8b:94:c7:d1:f8:b0:5f:5c:d9:b8:66:a1:92:82:9d:04:
12:b8:ad:86:a5:6e:05:a0:58:8c:08:a7:8a:af:76:77:0e:c0:
8d:56:07:b9:a4:1d:19:60:6b:9e:b7:b3:1f:e0:5e:da:b9:cf:
58:44:c6:10:3e:c1:3e:65:4f:34:4d:3f:02:c5:66:a7:ce:b2:
90:4b:c7:21:e1:9a:a7:2a:cb:ff:ee:87:0e:31:6b:d0:dc:82:
35:07:74:99:33:b9:72:3f:8f:14:22:62:e4:d1:91:ed:d2:6e:
14:8b:c8:68:1e:e9:a6:e4:51:87:d7:b7:85:c7:dd:cd:9f:b7:
ff:12:aa:d1:09:77:1f:90:64:29:dc:fd:a1:81:7f:48:69:b6:
e9:00:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:31 2025 by rpki-client