Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: v8DOKcMPelLNidhin41YFA27pweMZSbUzpr0PIoM918=
Subject key identifier: DC:F7:3F:7E:84:5B:C0:A5:BB:3A:FD:7C:42:85:78:67:CF:0C:E8:84
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 0199221E5303DF6FD265F500793C6DFEDC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:00:36 +0000
Manifest this update: Sun 07 Sep 2025 03:00:36 +0000
Manifest next update: Mon 08 Sep 2025 03:00:36 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: nheMKUWJMShRrAev2q3mB2dEw/mrNQaKxilKAu6nuY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:53:03:df:6f:d2:65:f5:00:79:3c:6d:fe:dc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Sep 7 03:00:36 2025 GMT
Not After : Sep 8 03:00:36 2025 GMT
Subject: CN=dcf73f7e845bc0a5bb3afd7c42857867cf0ce884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:f9:41:7f:9f:d7:1f:f5:cc:67:4e:40:58:
00:53:ad:17:3e:50:9f:20:de:f3:3e:e1:9c:ad:7e:
a5:8d:62:b4:81:51:dd:3b:f7:cb:8e:24:f1:97:24:
bd:53:b3:e7:72:ed:df:5c:05:69:eb:e4:30:91:80:
8f:0a:02:48:a9:be:18:87:63:13:45:d5:95:ea:72:
57:56:e8:ff:84:a2:92:c2:5b:b2:01:67:08:66:ec:
e2:a3:b3:60:f6:24:82:e6:6d:24:5e:2d:ce:d8:07:
81:48:6f:a2:b4:54:83:dd:42:f4:49:46:2e:b7:cd:
9a:e9:c4:ac:45:0e:d3:f6:b9:a6:06:77:bc:c6:f5:
b3:33:d9:48:e0:b9:63:5f:52:0e:6a:a1:7c:a1:88:
30:c0:4c:10:a0:f5:42:2a:70:10:5f:14:01:d0:c4:
15:8d:d6:ef:cb:4c:dc:7b:3a:8b:a0:70:36:f2:66:
89:11:b3:b9:e7:38:2e:21:4a:9d:76:fa:4f:ad:87:
25:aa:82:3f:96:80:19:a0:5f:a6:63:ca:84:ef:a8:
6f:d4:07:22:84:a8:08:87:04:aa:52:58:91:a8:b7:
80:ad:db:62:b6:5d:61:76:15:44:7f:bd:01:78:61:
b5:9a:ce:30:d4:20:21:1b:08:88:e3:c6:04:cd:95:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F7:3F:7E:84:5B:C0:A5:BB:3A:FD:7C:42:85:78:67:CF:0C:E8:84
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7d:23:86:5c:4e:2e:33:95:7a:0f:f1:f1:24:83:fa:8b:8e:
8b:c9:64:fe:f6:45:d4:90:6c:f8:dc:37:2b:cb:5b:0a:b3:d8:
07:85:3b:19:84:be:9f:72:b2:91:cd:08:a0:1c:fb:91:2c:98:
d2:b8:5b:5f:b6:11:c6:56:7c:40:bb:07:38:ca:7b:aa:54:57:
a7:b6:c7:75:aa:fe:95:fe:06:6b:7f:39:69:9e:4a:a5:16:ec:
22:3c:b2:79:ee:52:94:45:62:09:88:7a:7f:ff:74:8f:37:c3:
e5:33:17:48:13:98:ae:2f:49:99:8d:73:ba:49:d1:24:a0:04:
35:b7:f3:7f:6c:d3:6c:a9:e8:bb:90:93:d4:f0:14:c6:be:54:
69:84:2a:1a:20:3a:86:66:b0:16:93:24:1a:0e:50:c3:c4:1b:
15:30:e0:57:11:be:ee:6c:0b:83:a9:0c:23:c9:84:d1:09:1b:
c8:c5:c0:9b:38:47:af:c8:47:0c:54:f6:65:d7:b3:5c:3f:e1:
9f:56:8f:ae:fc:12:06:5d:5c:e8:8e:6a:01:aa:54:15:88:63:
06:cc:d0:0f:92:2c:96:52:08:cd:2a:65:25:e4:c2:9e:35:fb:
ea:2d:90:3b:8a:6a:3d:f0:16:b5:db:ef:df:a4:18:69:36:02:
7a:9f:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:57 2025 by rpki-client