Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: pd137iL6t20ZqvpYH8EjmmmWPegoRXnCCFDuX4GN77E=
Subject key identifier: 78:DE:47:38:56:79:D2:BB:4F:20:A4:B9:CA:67:50:05:D1:15:08:59
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 0198D515ADC09D7FFE05433EC07E4C4C7EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: TXtCklxKFN97+53G3sYwwd0mZ4mCuAEPBeV/pX6e91Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ad:c0:9d:7f:fe:05:43:3e:c0:7e:4c:4c:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=78de47385679d2bb4f20a4b9ca675005d1150859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:97:3e:8b:76:2c:a5:31:dd:cd:7d:f3:ca:
41:30:ed:ab:29:26:00:32:ed:d0:b9:70:97:da:7f:
22:50:16:5d:91:c3:5a:f6:37:e9:0b:32:3d:26:8a:
e7:92:44:e0:4a:b2:31:a2:90:a4:7c:f6:f4:e6:44:
0c:c0:ff:b8:76:dd:fb:83:ac:b1:54:03:bf:f3:e9:
1c:f1:72:0b:d9:90:82:d2:14:8e:35:c5:42:c9:86:
0d:0c:c4:70:4b:cf:05:39:ce:e0:bf:ca:cc:41:ef:
bb:6d:25:50:c3:d8:51:ae:d4:77:37:d3:3f:59:cb:
4f:6d:95:3a:e8:2d:75:64:05:38:d6:24:ff:a9:74:
66:2c:43:c4:8e:4c:e5:8e:ec:e8:3e:da:78:d1:ad:
f8:2a:bb:29:c9:26:43:68:b8:60:d8:b8:a9:bb:22:
ac:d3:df:9c:3c:94:b3:ad:10:75:9f:03:30:eb:2e:
bf:9b:d0:e2:be:ac:eb:ad:89:a6:a1:17:4b:56:89:
64:3a:41:96:91:fd:ac:51:28:1a:99:df:ae:54:f6:
4d:03:a5:63:c9:a8:27:22:4c:c7:40:44:92:7c:c3:
96:a5:9a:03:25:90:b3:33:92:9f:d6:b8:0c:f9:06:
3a:e1:11:9f:46:d7:75:62:7c:5b:3f:17:e7:8f:52:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:47:38:56:79:D2:BB:4F:20:A4:B9:CA:67:50:05:D1:15:08:59
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2a:39:a4:f0:d8:42:03:15:78:72:11:0e:8a:94:b9:fa:05:
c3:80:ad:f8:9d:01:19:c4:02:c9:7a:3e:f2:56:ae:73:99:46:
d0:2d:6e:ee:7a:26:09:49:65:81:b0:8b:1f:50:27:90:14:4f:
2a:d4:21:86:f9:c7:01:36:41:a8:68:4b:45:72:4e:d9:2a:c4:
6c:9f:88:f1:20:29:30:b5:f4:49:93:70:9e:4f:b1:29:97:9d:
29:ae:ee:3a:5a:ae:f6:05:6f:a9:bf:e4:4e:b0:e5:44:d6:9b:
db:48:ad:f0:45:64:35:26:9f:f9:74:18:a7:10:a2:0b:3d:c1:
8c:11:38:6d:03:70:1d:4f:83:65:94:d0:af:1e:33:f9:a6:a6:
65:a1:a9:3d:47:e7:1f:42:b9:db:28:53:59:69:59:26:21:29:
38:df:ff:ae:1f:8d:fc:3d:23:d7:ea:38:80:82:14:d4:89:6d:
93:7e:5c:ca:16:40:fb:2c:51:96:ce:73:f5:14:7e:97:1c:3a:
58:a9:4b:f6:bb:a1:ac:6a:8b:ec:18:0e:bf:a2:14:18:51:61:
9f:8a:bb:3c:0f:ce:9d:04:a9:e5:0b:83:ac:9f:96:c8:ad:3b:
2f:6f:ee:28:b5:73:9f:8d:d3:41:13:3f:f7:9a:23:7c:18:43:
06:80:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:04 2025 by rpki-client