Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: nDBffUrLkcKwu34LF5c/V6FeUeSEBkLAVItSYBfpZ7g=
Subject key identifier: B3:80:85:AC:7B:DB:FA:5C:2D:D7:19:68:2F:F6:28:DA:53:ED:01:0A
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 019764033B25EF476894C63F080100192536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 1587
Signing time: Thu 12 Jun 2025 12:00:22 +0000
Manifest this update: Thu 12 Jun 2025 12:00:22 +0000
Manifest next update: Fri 13 Jun 2025 12:00:22 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: lJIzxGaQMkCTwxKD3AUYB3MJkEXTWFhmOZnDYrI++AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:3b:25:ef:47:68:94:c6:3f:08:01:00:19:25:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Jun 12 12:00:22 2025 GMT
Not After : Jun 13 12:00:22 2025 GMT
Subject: CN=b38085ac7bdbfa5c2dd719682ff628da53ed010a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:e5:ad:bf:f1:1c:e4:37:29:a6:16:95:4f:
81:82:bf:b4:07:5e:e7:7f:38:ae:79:65:dc:89:da:
ad:75:90:a4:97:a7:53:fe:81:0e:39:74:ba:96:92:
26:ae:4c:bf:f3:10:79:70:9c:45:87:08:2c:c5:5c:
85:5c:5c:86:07:fe:89:59:d0:ac:65:41:36:01:5b:
20:09:aa:de:c9:13:e0:5d:a2:93:13:69:a1:1a:8e:
62:61:bf:c2:53:91:92:54:56:c3:fb:01:f2:92:9e:
f9:2b:ca:d5:c6:71:44:0f:ce:09:f7:ad:05:a9:62:
8e:21:90:a3:77:6f:0d:f8:55:f7:76:cf:8c:ec:31:
0a:c3:0c:1c:25:ab:8b:b8:b0:3a:d8:e4:46:ad:3e:
e1:0a:dc:9a:46:e0:7d:df:de:88:04:ab:83:f6:8f:
67:09:e1:29:28:f7:c5:c2:93:11:ab:67:bf:9a:af:
94:84:4b:b2:71:1b:0d:f6:b6:36:66:3d:92:30:77:
7e:3c:62:69:54:a7:e3:95:6d:2b:65:22:4a:1a:e5:
88:b0:4d:ae:6f:c0:83:8a:71:04:3a:31:6f:0a:8e:
f9:ee:b9:8b:b2:78:29:d3:10:1f:40:3e:53:99:a5:
e1:70:13:ee:6e:6d:ad:b1:94:30:90:d0:9b:36:b0:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:85:AC:7B:DB:FA:5C:2D:D7:19:68:2F:F6:28:DA:53:ED:01:0A
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9b:a3:d8:af:c4:46:54:59:51:76:37:9a:7b:c0:38:c1:c5:
3b:48:8c:4b:51:19:99:dd:22:cc:6e:c1:90:28:18:d5:cd:80:
1b:f6:6d:53:ee:8a:e8:8d:ed:2a:48:33:9c:d9:4a:18:d7:5b:
21:04:df:24:42:27:47:e4:89:f8:4e:95:ce:1c:f0:26:1e:f1:
cc:99:4d:d1:72:74:11:92:34:fe:66:8d:51:eb:48:d6:2a:36:
4e:27:a4:13:d2:28:7a:de:a3:f5:f4:6d:b9:0b:2c:77:8d:bb:
d6:b7:cb:af:4b:13:3c:b1:0b:b1:f6:20:80:75:f8:9c:6f:e3:
19:53:3f:b4:92:85:e3:28:bf:82:9f:93:eb:6b:a7:a4:67:24:
da:17:cb:bf:05:bc:9a:6c:25:78:05:29:f5:61:e3:c0:34:6e:
03:12:23:c6:85:a9:6d:a3:2d:9a:fd:cb:ff:70:7c:7c:e0:7f:
99:3e:fd:84:e1:7a:2f:63:fb:ee:6f:a5:09:cc:73:fc:2d:d2:
fb:3d:05:3c:30:c5:62:37:d9:b2:38:28:1d:37:8e:c5:f6:f3:
b5:48:2e:45:5b:e8:e3:48:e7:b3:31:92:5d:19:3f:bf:ed:1e:
76:ea:70:bc:6e:37:d5:50:c9:00:79:e3:75:95:d2:ce:29:15:
f8:af:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:50:50 2025 by rpki-client