Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: PfsEqf8gYw2nORzJHTqrCYITziYj5TA5mt43aSFGTpI=
Subject key identifier: 7F:A3:2D:E3:DD:C7:9D:00:DD:7D:EF:7D:A6:30:9A:9A:86:DC:EC:74
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 01965349F45816770AD54837B9F3F90ACCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0965
Signing time: Sun 20 Apr 2025 13:01:17 +0000
Manifest this update: Sun 20 Apr 2025 13:01:17 +0000
Manifest next update: Mon 21 Apr 2025 13:01:17 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: OC6bjLVRCEQzrueApLqXIEA9HOfuO2SSNgA0TocP14k=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:f4:58:16:77:0a:d5:48:37:b9:f3:f9:0a:cc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Apr 20 13:01:17 2025 GMT
Not After : Apr 21 13:01:17 2025 GMT
Subject: CN=7fa32de3ddc79d00dd7def7da6309a9a86dcec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:6d:9b:e4:c1:c2:a8:08:61:0d:7c:03:b7:
d3:af:3d:81:b0:73:04:24:bc:62:46:cc:55:2c:ca:
6c:22:6f:15:64:48:00:ae:d4:2d:7b:56:54:6e:ac:
db:3c:75:05:c2:56:b0:0e:48:59:e4:f0:6a:c7:00:
bd:18:c2:bf:3e:84:56:38:aa:8d:49:4b:ed:02:76:
f1:2d:e5:e8:a5:4f:31:f9:68:b2:5f:d7:34:24:73:
7a:ef:4c:7f:95:8c:b0:b0:d2:9e:b6:cf:21:46:5c:
fe:6e:e7:22:12:97:f8:0b:5e:98:16:26:72:6d:f5:
c7:b4:a0:ee:0a:34:22:07:70:38:51:57:3f:42:0e:
1b:33:97:75:f2:b5:04:82:6c:57:43:2d:28:94:84:
74:33:84:d6:40:3a:80:0d:f4:4b:78:fb:73:83:bd:
7d:1b:92:b0:20:6b:c6:9a:8b:a8:08:03:b5:f6:dd:
9d:fe:4b:ae:72:10:14:9a:33:98:f2:75:07:70:38:
ad:8f:76:22:96:33:ba:1e:ea:1a:f1:f6:10:75:fc:
22:a5:c5:8c:3e:89:9f:28:e3:e5:dc:24:72:b4:1e:
d1:bc:5c:42:aa:b6:e0:61:64:00:f4:24:2d:b1:61:
a1:37:0b:4b:93:99:87:51:61:f4:2c:d2:e9:ae:0c:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:2D:E3:DD:C7:9D:00:DD:7D:EF:7D:A6:30:9A:9A:86:DC:EC:74
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bf:55:69:80:b3:93:0a:d3:e0:5c:ad:5b:fb:50:f8:9a:57:
fc:14:5e:2c:48:7f:84:0e:8a:6e:d2:c9:79:ed:fc:19:bb:9f:
f2:1f:ac:e6:d6:f2:fc:2c:55:f7:74:b9:a8:3e:d5:f3:55:d6:
62:b9:6d:40:88:79:6e:56:e2:bb:e0:fc:7d:d7:cb:a1:cc:c4:
3e:64:f1:97:42:a2:28:e2:a5:a9:de:98:1c:5c:57:2e:fa:1f:
67:1b:89:be:a3:04:9d:03:de:6d:a6:11:45:a9:a1:49:b7:dd:
c2:ab:f1:a0:6a:4d:b6:0b:79:7f:9c:1c:38:d9:8e:eb:47:b2:
29:7c:83:61:07:aa:b5:f8:6c:f9:3c:ea:8d:60:3d:ee:e9:3c:
2a:c1:7f:9c:81:bb:96:a7:4c:21:a3:f2:a8:bc:52:95:5d:33:
f3:d0:40:4f:03:55:7f:72:5b:4f:17:6f:49:b3:1d:85:5f:36:
55:e8:54:af:f8:36:6f:e7:a3:58:3a:3c:c7:4b:ec:8b:ed:22:
c3:e6:f3:60:d4:2e:62:dd:75:f7:f7:21:66:40:80:1c:9d:51:
ef:5f:72:dc:4a:2f:e2:bb:b1:92:2a:85:72:32:4d:58:64:7b:
5f:21:12:ef:46:09:c3:88:8f:e4:1c:10:44:a5:90:7e:f5:f8:
fc:30:d9:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSfRYFncK1Ug3ufP5CsyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YzkxMzE3MjgzMjc2OTM3ZDQzNmY0YjIxNmRjZGEzZWZi
ZTJhODgwHhcNMjUwNDIwMTMwMTE3WhcNMjUwNDIxMTMwMTE3WjAzMTEwLwYDVQQD
Eyg3ZmEzMmRlM2RkYzc5ZDAwZGQ3ZGVmN2RhNjMwOWE5YTg2ZGNlYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aRtm+TBwqgIYQ18A7fTrz2BsHME
JLxiRsxVLMpsIm8VZEgArtQte1ZUbqzbPHUFwlawDkhZ5PBqxwC9GMK/PoRWOKqN
SUvtAnbxLeXopU8x+WiyX9c0JHN670x/lYywsNKets8hRlz+buciEpf4C16YFiZy
bfXHtKDuCjQiB3A4UVc/Qg4bM5d18rUEgmxXQy0olIR0M4TWQDqADfRLePtzg719
G5KwIGvGmouoCAO19t2d/kuuchAUmjOY8nUHcDitj3YiljO6Huoa8fYQdfwipcWM
PomfKOPl3CRytB7RvFxCqrbgYWQA9CQtsWGhNwtLk5mHUWH0LNLprgwAPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+jLePdx50A3X3vfaYwmpqG3Ox0MB8GA1UdIwQY
MBaAFNnJExcoMnaTfUNvSyFtzaPvviqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmNrVEZ5Z3lkcE45UTI5TElXM05vLS0tS29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mNjM2YzYtMTBkMi00ZjZmLWI0MTgt
NTBiOWQ1MjM2MWMzLzEvMmNrVEZ5Z3lkcE45UTI5TElXM05vLS0tS29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mNjM2YzYtMTBkMi00ZjZmLWI0MTgtNTBiOWQ1MjM2MWMz
LzEvMmNrVEZ5Z3lkcE45UTI5TElXM05vLS0tS29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb9VaYCz
kwrT4FytW/tQ+JpX/BReLEh/hA6KbtLJee38Gbuf8h+s5tby/CxV93S5qD7V81XW
YrltQIh5blbiu+D8fdfLoczEPmTxl0KiKOKlqd6YHFxXLvofZxuJvqMEnQPebaYR
RamhSbfdwqvxoGpNtgt5f5wcONmO60eyKXyDYQeqtfhs+TzqjWA97uk8KsF/nIG7
lqdMIaPyqLxSlV0z89BATwNVf3JbTxdvSbMdhV82VehUr/g2b+ejWDo8x0vsi+0i
w+bzYNQuYt119/chZkCAHJ1R719y3Eov4ruxkiqFcjJNWGR7XyES70YJw4iP5BwQ
RKWQfvX4/DDZEA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:38:13 2025 by rpki-client