Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: WtzS6Ufyk9SXRze1W9vl9f926zKwoEBVjTantzsi5Is=
Subject key identifier: 54:C5:8E:98:2F:F4:50:83:27:A9:87:C8:48:45:A6:A8:74:05:00:5E
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 0199180A0DCC35B45EBAB3CAD4AD210E24B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0AD4
Signing time: Fri 05 Sep 2025 04:02:15 +0000
Manifest this update: Fri 05 Sep 2025 04:02:15 +0000
Manifest next update: Sat 06 Sep 2025 04:02:15 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: d1iJOWWC30wwVjq88FKXd4wAm8YY5fQw3cqXeu7j+So=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:0d:cc:35:b4:5e:ba:b3:ca:d4:ad:21:0e:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Sep 5 04:02:15 2025 GMT
Not After : Sep 6 04:02:15 2025 GMT
Subject: CN=54c58e982ff4508327a987c84845a6a87405005e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:38:c0:fb:3f:19:48:e7:8a:af:f0:5d:09:
ea:1e:a4:5a:fb:da:5e:55:1a:95:9e:73:8d:04:be:
c9:fd:d8:b4:c3:e1:d8:54:8e:55:e5:47:39:2b:11:
48:e6:ec:38:fa:c5:4e:ce:2f:7c:af:37:bf:66:1c:
a0:eb:e6:b1:1e:96:0d:7b:72:45:0d:48:15:12:02:
ef:c7:21:82:3f:8a:2c:2b:92:e9:fc:08:b1:c5:0c:
b6:f7:05:87:a5:80:02:ce:0e:55:21:e6:f2:cd:77:
f1:f0:cf:7b:dc:b4:d4:c9:0a:e8:32:89:aa:16:52:
9e:06:e4:df:36:39:0b:da:b9:c8:e4:c4:07:6b:fe:
a5:1d:8e:45:9f:d3:b2:60:6b:5c:a8:68:d4:90:e3:
c3:11:d4:5d:60:80:2d:09:7b:b9:91:c0:a8:87:3d:
e5:d9:5a:b9:0b:81:b4:a9:84:65:12:c1:50:08:21:
57:13:c1:6f:56:c7:d3:54:a6:97:05:81:a1:4f:f6:
fc:34:fd:d5:ac:51:b7:0d:89:69:89:93:09:7b:c5:
82:7b:d6:20:2c:45:59:3f:5e:d8:1b:61:e1:5d:b2:
b6:80:a2:9a:ad:1f:7f:ab:4c:68:f0:17:3c:49:c5:
fe:98:45:2e:ed:38:0f:02:e0:22:67:f1:c0:b9:34:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C5:8E:98:2F:F4:50:83:27:A9:87:C8:48:45:A6:A8:74:05:00:5E
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:88:0e:90:f6:82:65:72:99:f0:cf:bb:9c:73:97:fa:de:d6:
8a:11:a5:cc:2b:50:3f:14:2b:b1:28:fc:9f:88:e6:32:e0:ed:
e5:1f:d3:da:1f:d1:9c:22:16:d2:be:9c:f4:bc:b1:f4:be:1b:
c1:d6:6e:52:88:ba:a4:4e:11:d4:8e:31:00:71:27:b0:28:67:
80:0d:ca:62:36:38:73:28:e7:87:0c:b0:0c:0e:7d:86:eb:57:
a2:64:b5:03:d9:d6:f5:24:cf:60:36:2a:95:7b:42:27:72:35:
2c:2d:92:fd:fa:44:c0:d5:4c:0c:f3:47:fa:3e:41:c4:c0:3e:
bd:a6:e9:82:b3:d1:be:2d:c7:95:2e:5e:df:67:09:e6:68:11:
34:d7:fd:58:e8:f8:06:f7:0f:32:1c:1d:02:7d:09:48:b6:f9:
b1:41:d4:f7:27:59:54:8a:8b:73:fc:2b:d2:35:8a:82:6e:39:
8b:43:b2:14:39:11:af:73:10:32:16:17:14:74:93:5d:1f:3f:
dc:9a:3a:35:e2:7b:04:ba:8c:49:11:db:f8:28:ca:b8:aa:df:
93:11:2f:05:fc:f1:fe:14:9e:e9:4d:01:34:e4:0b:26:e8:7c:
0a:9a:df:07:5f:a8:4b:ef:17:d5:99:4a:e2:ca:a8:88:52:8c:
14:37:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:35 2025 by rpki-client