Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: nDv2Wq9vS0x1ANFVCZPmp1C9bhrlpbFgTy3/RBmog00=
Subject key identifier: BE:A8:A8:2C:9D:07:2E:9F:F0:96:3B:EC:86:0A:90:FC:9A:4B:C9:BE
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 0196C9BBA5BA7B47760B0511F54414D3A096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 14C9
Signing time: Tue 13 May 2025 13:00:40 +0000
Manifest this update: Tue 13 May 2025 13:00:40 +0000
Manifest next update: Wed 14 May 2025 13:00:40 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: k0KHr+H8teTGd0+srzE0AlpF6FHWd4Z+SkLexL1Pzfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:a5:ba:7b:47:76:0b:05:11:f5:44:14:d3:a0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: May 13 13:00:40 2025 GMT
Not After : May 14 13:00:40 2025 GMT
Subject: CN=bea8a82c9d072e9ff0963bec860a90fc9a4bc9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:99:39:16:d9:ce:f0:3e:e7:f0:f6:82:62:
3b:07:b1:8c:56:e8:e3:c5:09:53:05:40:5d:17:5a:
ff:9e:d8:ff:ce:1b:d3:d7:1f:dc:fa:ef:4d:1e:2a:
43:51:cf:90:28:57:76:9b:01:3b:f5:3d:88:0d:57:
a6:be:32:78:46:9e:7f:cb:fc:ec:32:16:55:5c:8b:
43:5f:70:33:4d:1f:14:07:c2:bb:05:6f:72:bd:51:
24:24:56:f2:73:40:14:a9:27:7b:6c:4b:ea:75:53:
35:bb:c7:1b:2e:e5:3e:4d:38:67:92:68:2e:00:29:
c0:9c:24:fe:1b:43:a0:10:6a:e6:29:10:41:5b:03:
fc:2c:f9:d8:fc:49:cc:b9:28:63:5d:4f:25:8d:56:
71:f4:f5:ec:14:82:48:d6:bc:51:47:d0:51:5f:0e:
94:9c:04:ae:f7:e7:4c:b3:03:6c:07:d6:66:9f:69:
8c:72:93:4f:50:44:39:80:0f:f4:8a:10:d8:ad:ea:
5f:0a:10:99:3c:c6:88:6b:68:5c:53:e1:69:73:2d:
31:a8:f5:22:c6:0a:fb:0b:05:7c:64:92:4c:8d:36:
d8:da:fd:bc:68:af:50:9b:03:88:c8:e6:67:d3:52:
3a:ac:19:27:af:d6:40:c6:d7:0b:ce:9c:66:02:90:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:A8:2C:9D:07:2E:9F:F0:96:3B:EC:86:0A:90:FC:9A:4B:C9:BE
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3d:de:90:fa:a3:fa:43:b9:95:6b:5e:3b:d0:a4:52:8a:7f:
44:37:00:88:34:11:ba:db:4c:e4:91:80:e9:b4:c1:6f:f5:05:
a7:50:d0:4f:12:ea:73:1b:38:6d:3f:d7:51:55:4e:8f:d2:79:
b9:af:a5:43:49:48:25:2a:cf:0a:33:db:15:26:30:3e:a1:d5:
fb:48:84:03:3b:73:f2:37:7a:af:2b:ed:0c:b1:84:21:ee:cb:
20:cb:b2:8b:2e:10:47:96:45:81:f4:c0:55:9c:c1:5c:12:26:
cd:59:3f:cf:4b:32:c7:36:cd:b7:09:a5:10:42:e8:d9:26:d8:
66:ec:74:da:ab:f9:65:f3:cb:c5:8c:8b:e0:14:e1:2d:be:ae:
02:56:7a:36:2c:bc:9f:10:d1:b9:f0:09:d2:14:27:77:af:b3:
b1:bd:96:97:7d:63:7a:f6:24:b4:f1:a9:a1:9d:16:1e:26:a6:
57:bc:ad:7e:2a:ba:1d:bd:52:80:23:11:d6:82:75:17:1f:30:
44:4f:07:c0:8d:7e:67:e3:0b:0d:b2:2f:0f:9a:5c:9a:53:e6:
9a:2b:ef:e0:db:65:9e:1d:db:8e:0c:a5:85:87:00:2d:1f:17:
bb:d1:b9:50:5a:20:83:27:e2:9e:7c:aa:d1:30:09:0b:05:86:
7b:47:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:40:36 2025 by rpki-client