Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: APLf6dB5pFujshKS3Oa54hl7ms3EwKkXWZKrMmMCjaA=
Subject key identifier: C1:1D:86:85:64:B2:59:19:5E:2F:4A:C1:E9:07:9E:EA:DA:3A:31:8A
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 0197567E840C9B33E8C45F463E44F58E3574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 21:00:21 +0000
Manifest this update: Mon 09 Jun 2025 21:00:21 +0000
Manifest next update: Tue 10 Jun 2025 21:00:21 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: wAQZzoR/4nY6C47GDOFhH96gdU5Y2s4dxvhDeSFhWxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7e:84:0c:9b:33:e8:c4:5f:46:3e:44:f5:8e:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Jun 9 21:00:21 2025 GMT
Not After : Jun 10 21:00:21 2025 GMT
Subject: CN=c11d868564b259195e2f4ac1e9079eeada3a318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:b0:d2:d8:36:ce:c7:01:33:a1:14:22:d9:
fd:f1:fd:6d:95:22:89:f5:2f:5d:a1:32:c2:47:15:
35:8e:57:ac:27:54:25:91:59:20:c5:72:c1:df:ae:
90:9c:bb:0b:a2:98:a3:0f:31:8a:37:cf:1d:eb:e0:
4d:cc:72:6b:8b:6c:ca:6f:3c:1e:c9:65:d2:9e:6e:
e6:91:6d:1d:56:45:c4:86:7a:ca:d1:a1:18:78:e4:
43:07:9a:d3:22:09:ad:ff:73:f9:be:4e:d6:47:7b:
0e:b8:56:33:07:5e:e0:26:29:9a:9a:a1:e8:5a:29:
ae:94:b2:ba:c4:f8:23:40:0c:b9:4d:96:45:b3:cf:
cb:2a:65:d9:92:4f:32:a4:00:a6:fc:a2:0e:e3:fa:
c1:d8:ab:9d:aa:25:c3:4d:20:0e:c3:58:dd:1c:0c:
6e:c5:fc:bf:39:39:c3:5f:1a:56:b2:62:51:f4:39:
98:d0:b7:e4:5d:75:8e:de:22:b4:23:99:26:2d:d6:
6f:70:9a:7f:0a:14:f5:75:39:ad:7b:f1:b4:70:2a:
e6:3e:3a:45:ef:71:9b:bf:ae:25:ce:ce:4d:72:28:
a4:ea:b6:57:29:00:1a:b4:d8:38:20:3d:d5:27:06:
9a:c0:21:f6:c6:0e:e6:cc:ce:f2:eb:44:ec:26:a1:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1D:86:85:64:B2:59:19:5E:2F:4A:C1:E9:07:9E:EA:DA:3A:31:8A
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:17:1a:5d:ed:22:c3:d3:19:9c:c3:32:dd:01:86:3c:09:0d:
fb:d7:fe:6f:1f:66:8f:c7:a4:da:6d:1c:52:85:ac:86:89:de:
0c:47:27:3b:7b:05:1b:6c:a0:8c:f8:9f:b1:38:19:7c:67:9e:
96:82:a7:3c:2c:04:cf:9a:41:e7:c7:e0:35:24:8f:ef:a1:df:
0e:07:ee:00:ba:02:07:71:67:e4:b6:43:56:23:18:6a:d4:08:
3d:a7:54:c7:87:53:21:89:36:df:23:e7:e1:5b:44:9c:53:d6:
32:09:0b:67:92:e3:7f:cf:b4:c6:c8:94:da:79:10:31:c7:15:
df:29:70:1c:35:7a:86:2f:3e:a5:a4:5a:15:59:c8:18:72:63:
0a:fa:db:5b:b8:c2:e9:03:0a:34:1a:96:48:8e:9f:fa:f1:47:
8d:b9:c9:50:d9:28:13:da:e4:1b:ac:f3:95:b6:8f:e7:31:17:
57:13:9e:fd:0f:fe:51:b5:32:71:05:16:0a:5c:96:ec:b9:fb:
07:00:6a:9f:b5:06:e5:4a:7c:b0:4a:94:66:49:e6:6a:8c:63:
ba:7a:e4:64:79:4a:75:f8:5e:b6:39:51:e2:52:ff:a9:e4:47:
d3:75:ee:21:91:da:43:dc:9c:a6:ac:41:ae:f8:33:e2:37:fe:
c5:b0:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:29:16 2025 by rpki-client