Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: hr/S3aeVMjeohaCrmfb4jrd2/qaTX96kKa2vTcwTDR8=
Subject key identifier: 15:D1:8D:35:B2:B8:44:6C:3F:CC:40:8E:C9:B9:39:6D:52:8C:23:E9
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 0199FE7E0730CD8322B4EF70FBACE7346F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 22:01:36 +0000
Manifest this update: Sun 19 Oct 2025 22:01:36 +0000
Manifest next update: Mon 20 Oct 2025 22:01:36 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: fVmwpS/NQZhZ8FPZX3YY00pUfyJbNeVemX5BBtC3fLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:07:30:cd:83:22:b4:ef:70:fb:ac:e7:34:6f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Oct 19 22:01:36 2025 GMT
Not After : Oct 20 22:01:36 2025 GMT
Subject: CN=15d18d35b2b8446c3fcc408ec9b9396d528c23e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:c8:a9:54:eb:90:dc:25:9d:d1:63:bf:6a:
34:49:b0:69:cc:55:9d:99:c0:6e:23:8a:cb:d0:aa:
b9:03:a7:45:d6:0a:3e:68:8e:89:74:3f:1d:08:22:
95:41:3d:56:06:c0:3c:4a:fd:41:08:17:a5:37:91:
b1:d7:fa:de:d9:bd:7b:fa:6f:a8:c3:ee:05:fb:85:
76:85:19:14:e5:6e:3c:b6:ac:82:72:c5:ad:45:4d:
37:0d:e1:b0:15:b2:c0:c6:9f:57:56:42:c2:32:e8:
ad:57:19:70:1f:85:d2:93:68:e6:af:74:21:c6:f3:
00:54:71:07:86:e3:f8:7b:23:00:cd:20:5b:48:77:
1a:14:83:1b:d9:c2:02:cc:c8:62:8d:fc:ca:89:9f:
e8:40:1f:c6:d9:65:6a:1f:1b:f2:c3:85:5e:12:d9:
3a:f3:44:4a:d1:9c:e6:b2:f9:ee:f3:84:c9:23:06:
91:56:a7:94:01:80:57:44:58:e9:b9:5d:fb:df:53:
77:e9:e0:c1:5c:ee:ca:97:f4:0c:10:82:3c:ed:ec:
8f:4a:ec:21:94:58:4d:ce:73:e7:65:16:2a:8a:78:
a5:ce:92:c7:42:fe:4a:37:8e:c3:62:50:e4:dd:11:
4d:85:a1:22:0b:60:1f:18:68:5b:29:10:92:c1:50:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D1:8D:35:B2:B8:44:6C:3F:CC:40:8E:C9:B9:39:6D:52:8C:23:E9
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:fa:4e:eb:4a:a0:aa:1d:cc:17:08:57:b4:77:a9:75:6f:
d1:7b:0e:73:73:25:b0:24:ff:13:3e:1e:b9:86:75:ab:6e:17:
61:cc:75:63:73:e1:ce:c9:2f:d1:e7:4b:b5:78:00:4c:c7:2f:
d5:e3:05:a2:cf:56:b4:b1:a0:09:80:ec:81:29:ca:96:8d:65:
78:fb:27:73:62:bf:d1:c2:db:f4:d9:73:bd:61:bb:62:89:5f:
d0:28:5b:2f:7a:30:88:65:bd:73:f3:80:1c:c2:67:58:b8:55:
15:99:2c:f0:a9:4a:f0:36:96:2f:90:41:d9:ca:83:95:a9:fd:
83:bf:84:ac:b0:26:a3:cb:34:14:d5:46:e1:13:c1:00:85:25:
c3:4c:3b:74:07:85:e7:c2:43:99:7e:ef:2b:a0:9c:be:45:c6:
46:64:c9:74:4d:59:21:fc:ec:03:17:ae:7e:3c:29:d8:4f:c5:
fd:cc:a2:88:e1:8d:3d:89:cd:d1:46:2c:c6:de:7f:89:4b:92:
84:9a:4e:91:d3:d5:47:43:e0:ee:e5:75:1b:a8:c7:56:bb:aa:
36:80:e1:64:ce:bd:c0:26:ee:2d:f2:47:8b:98:53:05:88:64:
f0:83:5a:af:6e:1b:3e:58:2f:8f:ef:ae:3b:df:dd:73:9b:1e:
d3:24:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:34 2025 by rpki-client