Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: x6G/yefbUFDPhzDs/Ucftj/neg1lB1nM5JAK8Al3H1w=
Subject key identifier: 63:A5:38:7E:56:CB:04:A4:6C:8D:D0:6E:BF:E2:59:A6:1B:8B:E1:B4
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 01976F999FEE5FAB5236A1DD8A604EF58B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 18:00:28 +0000
Manifest this update: Sat 14 Jun 2025 18:00:28 +0000
Manifest next update: Sun 15 Jun 2025 18:00:28 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: Yg3qZO2MkC5GNQjSY8bF8ubMZ5U39b2JWAS32A98gog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:9f:ee:5f:ab:52:36:a1:dd:8a:60:4e:f5:8b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Jun 14 18:00:28 2025 GMT
Not After : Jun 15 18:00:28 2025 GMT
Subject: CN=63a5387e56cb04a46c8dd06ebfe259a61b8be1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:52:42:f3:b1:ee:63:cb:09:43:05:43:14:
5d:41:84:43:db:8c:71:85:94:bc:f2:58:85:9c:4c:
7b:7d:cc:dc:ac:bd:cf:fd:1a:2f:bd:96:db:8b:d3:
bd:9b:08:78:62:ed:72:5a:f1:8f:65:23:2b:87:c7:
a6:e3:7c:d4:63:f5:eb:3a:11:76:23:4f:9e:3a:71:
bd:e4:d0:00:8e:8f:7b:87:1e:4b:67:f8:b9:d2:fb:
e2:37:32:16:8e:37:00:d7:79:89:0a:5f:07:d0:33:
a0:a9:73:0c:71:3b:89:76:a7:55:6e:fb:17:9c:32:
48:c6:42:92:21:4c:29:3b:1d:44:46:49:03:dd:9d:
c6:9a:6b:14:e1:bb:e4:3c:c5:cc:e6:d0:a8:5f:01:
aa:9b:b4:c7:2f:91:46:25:a3:08:6f:8f:75:66:fe:
8f:f0:63:f3:de:7e:d9:54:ba:80:31:5b:c1:8b:bd:
06:77:83:f3:ef:5b:30:aa:a5:a2:ea:d6:49:39:83:
6b:b4:42:01:05:b6:d8:ea:43:fc:a3:76:81:c5:0c:
bf:56:66:e6:f0:10:75:10:fb:c6:c9:a4:ac:b3:c0:
a9:c4:16:66:2c:d5:de:c9:71:96:15:99:70:d2:94:
1e:74:4e:88:53:24:a0:aa:1b:0d:cc:fe:6d:f0:4f:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:38:7E:56:CB:04:A4:6C:8D:D0:6E:BF:E2:59:A6:1B:8B:E1:B4
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2f:b5:67:a9:0e:98:12:83:57:9b:08:49:0c:5a:b9:3e:54:
19:20:9c:97:f7:0e:09:06:91:6a:5c:72:a2:18:c4:b6:30:a9:
96:84:4c:3b:a5:6e:1b:96:25:aa:bc:6d:78:18:6f:da:ed:5e:
8e:82:c4:f0:27:92:3a:1f:f6:eb:ab:b3:10:ae:e6:e3:df:dd:
f7:c9:92:dd:cc:6f:07:e5:81:b0:7c:d6:36:4b:ca:48:70:80:
b9:0e:5d:0d:48:a5:fe:3b:aa:9f:24:b7:37:de:33:be:c3:87:
0e:80:7c:ab:07:bc:c0:15:79:e5:e6:10:e1:10:6f:6e:9f:c6:
46:5f:2c:6c:dc:76:b0:7b:00:41:ef:a3:82:63:b1:ec:96:77:
5d:20:38:97:ae:96:9d:cc:53:9e:8d:06:67:fb:73:83:57:82:
a9:47:18:00:60:02:e4:19:13:c0:2b:32:6d:47:77:92:cc:92:
51:91:bb:c5:a8:b2:bd:7c:17:4a:81:90:93:fa:db:aa:e2:d9:
93:98:00:83:3b:d0:0e:88:d6:ef:27:c9:db:e6:59:87:30:1b:
1e:2e:0c:a0:58:cc:6c:1c:2f:a7:85:09:b2:93:a0:d0:28:66:
98:fc:a5:d8:0e:e4:8c:70:45:2f:15:63:b2:37:db:88:e2:ff:
e2:3e:01:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmZ/uX6tSNqHdimBO9Ys5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj
YTBkMGEwHhcNMjUwNjE0MTgwMDI4WhcNMjUwNjE1MTgwMDI4WjAzMTEwLwYDVQQD
Eyg2M2E1Mzg3ZTU2Y2IwNGE0NmM4ZGQwNmViZmUyNTlhNjFiOGJlMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5JSQvOx7mPLCUMFQxRdQYRD24xx
hZS88liFnEx7fczcrL3P/RovvZbbi9O9mwh4Yu1yWvGPZSMrh8em43zUY/XrOhF2
I0+eOnG95NAAjo97hx5LZ/i50vviNzIWjjcA13mJCl8H0DOgqXMMcTuJdqdVbvsX
nDJIxkKSIUwpOx1ERkkD3Z3GmmsU4bvkPMXM5tCoXwGqm7THL5FGJaMIb491Zv6P
8GPz3n7ZVLqAMVvBi70Gd4Pz71swqqWi6tZJOYNrtEIBBbbY6kP8o3aBxQy/Vmbm
8BB1EPvGyaSss8CpxBZmLNXeyXGWFZlw0pQedE6IUySgqhsNzP5t8E+DjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOlOH5WywSkbI3Qbr/iWaYbi+G0MB8GA1UdIwQY
MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt
MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3
LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdC+1Z6kO
mBKDV5sISQxauT5UGSCcl/cOCQaRalxyohjEtjCploRMO6VuG5YlqrxteBhv2u1e
joLE8CeSOh/266uzEK7m49/d98mS3cxvB+WBsHzWNkvKSHCAuQ5dDUil/juqnyS3
N94zvsOHDoB8qwe8wBV55eYQ4RBvbp/GRl8sbNx2sHsAQe+jgmOx7JZ3XSA4l66W
ncxTno0GZ/tzg1eCqUcYAGAC5BkTwCsybUd3ksySUZG7xaiyvXwXSoGQk/rbquLZ
k5gAgzvQDojW7yfJ2+ZZhzAbHi4MoFjMbBwvp4UJspOg0ChmmPyl2A7kjHBFLxVj
sjfbiOL/4j4BpA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:16:38 2025 by rpki-client