Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: YaCk0XddiPxyVCc4cAQMMMMLeTqIVZCn6Nx8NAdIB2k=
Subject key identifier: 37:52:F8:FC:BF:26:1F:DA:09:25:BA:5C:80:49:F8:06:F6:5F:1B:2C
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 01992443AAD118A708AF2BACC113F5554EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 13:00:38 +0000
Manifest this update: Sun 07 Sep 2025 13:00:38 +0000
Manifest next update: Mon 08 Sep 2025 13:00:38 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: TeuleBT1XqGEV78k3ciI0blZkUXXG10ngPDo6xCIrRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:aa:d1:18:a7:08:af:2b:ac:c1:13:f5:55:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Sep 7 13:00:38 2025 GMT
Not After : Sep 8 13:00:38 2025 GMT
Subject: CN=3752f8fcbf261fda0925ba5c8049f806f65f1b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:a6:db:f5:33:36:55:a3:c0:17:1b:ef:a8:
96:48:83:75:41:3c:e9:f0:5e:24:47:12:a3:36:bb:
25:6b:65:72:8a:fa:83:68:79:8f:94:c5:a7:b8:2e:
70:60:5a:c4:70:da:73:f6:01:77:89:da:33:c3:b0:
2a:a9:04:75:2d:91:d9:ab:38:d8:34:b1:9f:22:ac:
bd:5b:41:4c:91:62:a5:a9:b3:14:2e:8a:32:66:85:
c4:ad:d4:eb:41:6e:e7:64:55:c4:6d:f1:35:22:63:
ed:94:8e:d4:b1:47:e7:a0:70:20:b5:15:b1:1e:84:
35:a1:7e:16:6c:ca:a6:12:d0:78:f2:2f:15:a2:e8:
b0:48:62:c9:3e:80:08:ab:93:99:3b:62:c1:2c:c8:
4c:af:e7:d3:09:5f:55:09:3f:bb:47:7e:07:c4:12:
1d:70:cd:69:af:aa:2f:44:8c:31:cf:55:82:b9:29:
36:ce:d4:3d:35:b5:74:ca:0a:94:28:2f:ab:cd:b1:
bf:cb:ce:c1:7f:fc:93:4a:54:fa:7b:40:a0:8a:50:
1e:a7:7e:1a:5c:bd:49:a9:f7:99:c5:65:54:e8:79:
05:f1:7d:fc:98:9b:2d:e7:13:8d:45:12:bd:f5:82:
23:2e:8e:b0:d9:4f:54:6e:a0:a3:3e:25:d6:23:bf:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:52:F8:FC:BF:26:1F:DA:09:25:BA:5C:80:49:F8:06:F6:5F:1B:2C
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5f:13:f6:d9:d0:5f:b3:55:73:de:8e:4f:11:be:17:74:0f:
4d:35:3e:dd:e6:ff:b2:63:33:5f:40:3c:fc:74:77:8e:28:62:
9c:f8:23:63:24:a2:47:89:58:14:50:c8:18:ba:a4:44:90:72:
b7:2f:44:77:b6:d4:56:0a:1a:d8:ef:ed:79:b8:49:d7:18:18:
38:17:c5:75:59:34:43:d7:48:89:f2:3a:72:b0:fc:43:35:dc:
86:56:dc:db:03:b4:bb:ae:78:ca:8f:68:07:65:ce:fd:08:86:
f5:21:5f:0e:11:4b:ab:fb:bb:c7:e5:c9:81:54:76:ab:5c:a8:
36:9b:a0:4c:b2:3e:4e:55:79:a4:e3:01:8b:16:55:84:7d:60:
a2:5a:42:f9:95:af:5e:7c:d5:db:7e:40:14:8a:84:e0:03:69:
a3:7a:8c:15:18:77:af:b6:18:7a:1c:0f:80:8a:4c:99:c9:d8:
9a:9a:be:b1:04:4a:93:34:f0:04:26:8e:8c:d6:2e:98:e1:71:
ac:e8:a3:af:23:d0:a1:17:f3:a9:04:fd:9c:ff:e5:91:58:8f:
0f:38:5d:8d:96:96:f6:49:fa:e4:b4:ac:b0:fa:e2:17:22:e3:
3f:67:bf:92:7a:7b:f3:92:d4:09:fc:d1:9f:dd:b1:79:ed:2d:
45:4d:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:43 2025 by rpki-client