Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: gZzQcK/Of2SdsLPqrew9zXOdFEa4IJ80fIqBjHri4yo=
Subject key identifier: E5:B1:73:66:4E:7E:08:CC:60:B6:34:93:01:B4:CD:DD:47:9D:21:FC
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 019A71B83184467AC45627DEA84280784B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0B87
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: 9oU6rGwo1hGFe+UXRRiK7jgD5x954NhNlb9wkaHseas=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:31:84:46:7a:c4:56:27:de:a8:42:80:78:4b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=e5b173664e7e08cc60b6349301b4cddd479d21fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:f4:a1:70:a7:71:db:54:d3:36:bf:f9:83:
73:c7:ab:39:0e:73:64:10:56:f7:11:87:a1:e1:c4:
0d:47:bf:ee:28:68:51:4f:68:8d:4e:8a:bf:b7:0d:
21:ef:62:9f:cd:a0:ef:a2:9f:16:e0:22:e0:92:e1:
52:d2:b1:f4:22:66:7d:ee:b9:0c:26:15:80:d6:c6:
1e:fa:9e:11:97:d8:e5:a1:a4:33:40:45:2b:d8:a1:
10:88:e8:bf:59:95:1a:d6:2b:5f:cc:ab:11:d2:1f:
ef:d8:33:c0:4b:85:56:47:0f:86:f9:fc:e8:e9:8d:
fd:a4:2a:73:87:6a:ce:51:70:5a:74:b1:77:73:07:
39:43:67:66:b1:94:8b:47:c5:b9:a1:b2:cd:82:70:
7c:aa:bf:ac:53:52:2a:10:a2:b2:81:9d:47:04:3d:
01:fd:06:ba:c2:33:ea:b8:6e:6d:a2:63:0e:86:14:
14:1f:19:2f:77:05:b9:b4:6f:ff:6d:e9:11:da:3b:
87:04:1a:1d:11:58:93:2f:72:be:5d:03:51:a9:bd:
b2:c7:c0:7c:7c:bd:62:2f:39:9c:9e:c0:cb:4a:b9:
19:3c:3b:06:49:ab:99:09:dd:f9:12:90:7c:26:b8:
8a:8a:e9:1d:2f:4c:54:7b:02:3e:a3:2d:2d:58:bd:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:73:66:4E:7E:08:CC:60:B6:34:93:01:B4:CD:DD:47:9D:21:FC
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:65:7b:a1:d3:e6:49:5d:fb:7e:13:57:d4:5f:e2:b0:49:cd:
3c:0b:61:c4:20:44:16:d7:06:09:27:e2:ab:28:01:f7:ff:7f:
9b:d4:57:e0:2f:1a:19:e3:e2:65:29:63:86:dd:c6:8a:b6:0b:
94:3e:43:24:25:a2:db:a9:ca:83:09:4e:74:7b:7f:1a:f3:a9:
6c:71:2b:1d:00:16:23:70:dc:9f:83:be:62:4c:81:f5:05:16:
2f:c4:74:48:f8:6c:31:a8:ca:c8:db:8d:ff:45:b5:1c:bf:02:
9b:31:37:9f:93:3e:74:b2:b5:a4:9e:98:b1:cb:45:48:66:d8:
83:d7:79:c2:7a:bc:ec:0b:7e:4a:ee:ec:33:c7:5b:b5:6d:d4:
f7:b3:cf:b9:60:59:5c:c9:75:46:4c:3e:f4:a5:ca:1f:b9:c9:
01:93:31:6d:61:07:37:b1:32:b4:71:72:ea:24:1f:ca:eb:67:
d8:73:65:15:8b:aa:13:db:a3:3f:8f:39:ed:66:d6:24:70:10:
0f:d9:e3:6b:f4:67:61:ae:df:ad:1a:60:11:c8:f0:db:14:4b:
19:9a:48:b3:14:1a:61:04:2a:e8:40:f0:f4:ef:9a:9e:e8:94:
86:bc:41:4e:71:3a:f0:c6:64:07:bd:14:05:dc:8b:7e:26:b6:
16:95:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:58 2025 by rpki-client