Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: S+m5sxVO5xfR+FFhnsKm9h2fQ221C3/0Xvf31CcbSjY=
Subject key identifier: 9D:54:3B:50:BD:4F:AE:45:4B:4E:B3:F5:39:BD:33:E4:DD:F0:EC:42
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 019767E002960379DC47D9A40FBD79F197BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 06:00:23 +0000
Manifest this update: Fri 13 Jun 2025 06:00:23 +0000
Manifest next update: Sat 14 Jun 2025 06:00:23 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: h4FCVSur0kaXs8+OMeAIT8nlhSdXKR7A69kkQaI+RWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:02:96:03:79:dc:47:d9:a4:0f:bd:79:f1:97:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Jun 13 06:00:23 2025 GMT
Not After : Jun 14 06:00:23 2025 GMT
Subject: CN=9d543b50bd4fae454b4eb3f539bd33e4ddf0ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:47:62:f5:ba:12:34:eb:e7:6a:79:e1:90:
bd:6c:9c:28:72:85:08:85:63:c2:ad:21:55:69:de:
29:94:4c:04:61:3b:ad:86:56:d3:bd:7d:d1:d4:ed:
a3:67:64:93:f3:8a:4a:04:33:bc:a6:52:88:ca:a5:
dd:ab:be:d2:1c:21:9a:ff:a5:d9:3f:bd:a4:f9:9c:
a7:67:c3:46:67:40:64:14:6f:0b:b6:99:5f:9a:bc:
55:ed:c2:7f:84:cb:ec:32:36:62:63:c4:a6:c9:76:
b7:72:ba:04:25:94:77:5d:85:7c:5b:88:60:71:f3:
12:83:e7:a8:db:38:8b:9f:80:ee:34:15:4a:aa:10:
f8:fc:4e:f9:54:ae:5b:06:9c:ff:24:02:44:0d:31:
d4:e1:26:27:cc:29:f8:a6:80:e9:2d:c7:f2:9a:36:
a2:d9:dc:8e:3b:09:6d:59:1d:ab:c3:85:a6:d2:f7:
81:fe:1c:ed:73:f7:01:d1:22:94:a1:c1:31:7e:63:
91:ec:3e:a6:6b:f6:55:92:5b:99:be:9b:07:a1:b9:
db:d5:b9:01:47:e5:89:1f:b1:cd:bd:b5:8b:b7:6e:
d8:7a:f7:f9:47:22:20:7e:16:3c:2e:2b:e1:76:ad:
d5:4b:3a:dd:20:f7:aa:e1:37:98:1f:5c:c0:e1:f9:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:54:3B:50:BD:4F:AE:45:4B:4E:B3:F5:39:BD:33:E4:DD:F0:EC:42
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0d:9e:fd:a1:e6:22:c7:30:ae:e5:af:55:62:0d:17:55:18:
7b:e0:e8:0d:92:62:f0:73:21:2e:14:ad:45:d9:8c:2f:8f:dc:
c3:98:1a:bc:92:be:ed:50:29:d9:f1:46:37:ac:66:14:58:ef:
70:56:f7:bd:d8:86:83:d3:49:79:de:a3:29:9a:41:c7:8c:b8:
fc:da:97:3b:1e:a4:de:bd:a8:85:a4:73:9d:1f:ec:ba:14:1e:
7b:bf:6b:78:14:67:da:9e:47:d5:62:ea:ea:41:5f:f5:d5:b0:
86:2c:6f:9d:5f:26:c1:b2:c5:17:74:1e:4e:6e:7c:7f:6e:5b:
f1:76:72:d1:57:31:6a:e7:0a:ed:2c:e3:9b:29:81:cd:ac:86:
8c:68:fd:43:c5:cf:15:33:27:a8:15:a3:de:d5:cd:89:35:11:
f4:e8:b0:d3:ff:96:2e:f0:76:3d:f8:97:44:4a:32:67:2e:7c:
eb:f3:0e:17:22:b7:cb:44:2e:b9:3a:5e:7d:57:f8:74:65:16:
a9:27:51:28:e1:17:d8:b0:23:6f:22:64:39:ce:80:15:80:64:
71:31:5e:ad:44:37:e1:de:ff:fb:8f:41:6a:93:f7:ee:5c:90:
07:ce:6e:3b:6f:3f:a6:00:fd:79:d9:dd:e5:29:27:cc:80:a2:
4b:d9:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:41:09 2025 by rpki-client