Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: BfC0MgQ+j9LqGYd0Np4repYHDuj4IeB4mcVGomxiYbE=
Subject key identifier: A6:0D:CA:A3:EB:1A:84:EC:B6:6C:BE:28:2E:E3:ED:5D:04:5E:EB:37
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 01976DAB3932EC4624A4FF70FE46803C7BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 09:00:27 +0000
Manifest this update: Sat 14 Jun 2025 09:00:27 +0000
Manifest next update: Sun 15 Jun 2025 09:00:27 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: kR3jQS8I4TCcj7Zw0aChzZxqri1w4arw8Z8zCY46ecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:39:32:ec:46:24:a4:ff:70:fe:46:80:3c:7b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Jun 14 09:00:27 2025 GMT
Not After : Jun 15 09:00:27 2025 GMT
Subject: CN=a60dcaa3eb1a84ecb66cbe282ee3ed5d045eeb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:3b:51:50:b3:c5:a0:90:9f:df:e2:5f:32:
01:a5:b7:c5:14:f1:fb:33:ba:91:be:21:40:de:00:
3c:d1:ff:f7:4d:12:62:74:d5:cb:aa:95:55:fb:8c:
b0:38:70:a0:88:89:22:cb:8f:ae:66:6c:87:39:32:
4d:63:a1:f7:e5:58:76:42:27:98:ea:02:6c:18:17:
98:7e:7b:c1:07:02:f9:bc:37:f4:72:87:d2:cf:70:
33:b7:10:f1:4f:87:d3:44:45:d7:53:98:af:af:89:
62:83:9f:f6:d7:32:bc:8f:32:31:58:0d:92:fb:d0:
66:7c:db:70:a5:d2:05:cf:ac:0e:12:39:f3:d2:f5:
45:69:7c:69:b7:ee:da:23:08:2e:73:02:c8:e2:07:
b8:1d:7e:95:97:f5:2f:a5:a3:39:a1:33:8a:98:cd:
c6:a6:b9:d6:9f:d0:4c:b2:21:07:29:47:55:5a:82:
d1:20:fc:df:67:84:5c:f8:5f:c0:92:ca:5c:4a:c3:
44:da:85:01:7f:95:6f:dc:e4:45:41:b8:31:df:8d:
f2:e6:88:33:d5:02:a6:71:e1:5f:b4:45:32:6a:98:
ec:e6:bb:47:db:0c:c9:cd:c2:7c:f5:35:14:0f:a1:
d9:63:c5:bc:61:5e:87:97:d5:4d:58:b0:51:6f:e2:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0D:CA:A3:EB:1A:84:EC:B6:6C:BE:28:2E:E3:ED:5D:04:5E:EB:37
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:30:69:1d:08:26:9e:87:6f:c2:9e:71:07:c3:c1:d3:bc:50:
fc:d2:58:ca:2b:d9:3c:99:b7:96:3d:c8:40:0f:07:22:f0:18:
b0:ef:87:9f:e7:9f:36:da:eb:b1:87:28:77:fc:d1:c6:15:4a:
ff:04:e5:f9:5e:91:72:84:ab:59:88:b6:09:e8:b0:e2:e0:7f:
1f:2c:74:47:fb:b9:58:2f:3d:30:37:fa:96:79:b4:ae:5b:dc:
2d:dd:0f:95:b1:39:1e:99:30:f6:af:1c:0b:4d:f3:25:97:0d:
81:ed:9b:b8:4e:81:de:95:2e:c3:ea:6f:b6:a5:5d:08:bd:27:
e6:26:ee:f9:2e:24:1c:4a:74:df:5a:f1:0a:8f:4b:99:7c:f3:
df:cd:89:6d:5b:10:5d:88:25:e0:ad:4a:a7:be:73:68:70:3e:
dd:a6:9d:55:fd:0e:97:ce:e0:b6:9f:48:85:0d:8b:a8:f0:1c:
c5:5f:1e:9d:65:7f:1c:f3:ce:f1:55:b8:b7:c3:b1:fd:10:2c:
e1:c2:35:18:16:28:93:01:9f:02:3d:de:f5:59:2f:db:ba:0b:
f4:b0:b7:0b:0e:e3:8c:e1:7c:f3:35:37:39:3d:d5:6c:06:4a:
ce:c1:0b:41:9a:d9:e8:cf:ec:88:44:1f:42:40:6d:c3:cd:63:
61:9d:81:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqzky7EYkpP9w/kaAPHu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj
YTBkMGEwHhcNMjUwNjE0MDkwMDI3WhcNMjUwNjE1MDkwMDI3WjAzMTEwLwYDVQQD
EyhhNjBkY2FhM2ViMWE4NGVjYjY2Y2JlMjgyZWUzZWQ1ZDA0NWVlYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMM7UVCzxaCQn9/iXzIBpbfFFPH7
M7qRviFA3gA80f/3TRJidNXLqpVV+4ywOHCgiIkiy4+uZmyHOTJNY6H35Vh2QieY
6gJsGBeYfnvBBwL5vDf0cofSz3AztxDxT4fTREXXU5ivr4lig5/21zK8jzIxWA2S
+9BmfNtwpdIFz6wOEjnz0vVFaXxpt+7aIwgucwLI4ge4HX6Vl/UvpaM5oTOKmM3G
prnWn9BMsiEHKUdVWoLRIPzfZ4Rc+F/AkspcSsNE2oUBf5Vv3ORFQbgx343y5ogz
1QKmceFftEUyapjs5rtH2wzJzcJ89TUUD6HZY8W8YV6Hl9VNWLBRb+IzywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYNyqPrGoTstmy+KC7j7V0EXus3MB8GA1UdIwQY
MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt
MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3
LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjBpHQgm
nodvwp5xB8PB07xQ/NJYyivZPJm3lj3IQA8HIvAYsO+Hn+efNtrrsYcod/zRxhVK
/wTl+V6RcoSrWYi2Ceiw4uB/Hyx0R/u5WC89MDf6lnm0rlvcLd0PlbE5Hpkw9q8c
C03zJZcNge2buE6B3pUuw+pvtqVdCL0n5ibu+S4kHEp031rxCo9LmXzz382JbVsQ
XYgl4K1Kp75zaHA+3aadVf0Ol87gtp9IhQ2LqPAcxV8enWV/HPPO8VW4t8Ox/RAs
4cI1GBYokwGfAj3e9Vkv27oL9LC3Cw7jjOF88zU3OT3VbAZKzsELQZrZ6M/siEQf
QkBtw81jYZ2BLA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:27 2025 by rpki-client