Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: fAIdQPfwOs9qj1jVtEXtBFL4Uenh/8jZqXz4Lx1DYvQ=
Subject key identifier: 5D:FC:59:85:40:C8:65:CF:BA:1E:BE:6A:2C:A7:34:4A:55:51:F9:E4
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 019653EE71705193D2D1F76F020218087E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 148C
Signing time: Sun 20 Apr 2025 16:00:57 +0000
Manifest this update: Sun 20 Apr 2025 16:00:57 +0000
Manifest next update: Mon 21 Apr 2025 16:00:57 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: zP7jopVZ0VLHu4u/fok/WY5iqsMjbxvNgGXzMti/c00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:71:70:51:93:d2:d1:f7:6f:02:02:18:08:7e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Apr 20 16:00:57 2025 GMT
Not After : Apr 21 16:00:57 2025 GMT
Subject: CN=5dfc598540c865cfba1ebe6a2ca7344a5551f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:e1:d2:43:b1:2c:23:b0:19:b5:45:7a:e3:
0f:53:f3:16:a4:69:76:08:70:ea:bd:3f:35:8a:f2:
3a:42:00:99:74:80:6d:4b:ff:8d:83:77:f0:37:aa:
49:4c:f4:3f:76:f5:f6:42:e6:28:44:b8:27:f6:89:
21:28:af:62:eb:ab:3e:99:ca:ce:8a:88:d8:51:00:
e7:31:49:89:a1:1d:dd:fb:c6:92:05:43:ac:d4:63:
c5:59:36:89:8e:97:75:44:3d:c6:7b:ca:91:03:c6:
2d:7b:cb:c7:a4:a3:15:52:7d:71:1f:2e:b1:b3:e5:
8c:fc:89:ad:4e:2d:98:32:97:0d:1d:8c:19:fa:ab:
8d:21:bb:de:3a:1e:53:9b:66:8f:d4:88:d9:7b:7a:
f0:af:6c:4b:4b:dd:88:cc:3d:0b:42:ba:23:f0:22:
2f:3e:24:ba:ed:76:2e:36:36:28:e0:01:ce:19:05:
b4:ae:57:1b:d9:ba:cd:50:b6:e3:01:fc:9e:6c:8a:
18:93:01:3b:9f:94:fb:65:db:2b:4b:95:08:c2:23:
47:3b:ab:c1:6c:d8:7a:c4:66:7e:c2:f4:3a:9c:c3:
51:66:fc:09:30:e1:e0:3d:db:73:c4:e9:d6:3a:ce:
aa:a5:d0:9b:38:8f:26:52:9b:83:81:d9:16:b8:ef:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:59:85:40:C8:65:CF:BA:1E:BE:6A:2C:A7:34:4A:55:51:F9:E4
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:62:64:2b:1e:e8:83:08:19:db:d0:25:8a:02:65:82:3a:
45:58:01:38:6a:70:d2:e4:89:1c:1c:0e:56:ad:57:8c:1b:bd:
29:77:4d:59:9b:40:6c:50:b2:87:b7:b0:93:f6:27:a8:d9:cb:
d0:2d:62:3e:27:4e:14:ee:76:14:ce:db:27:4a:d8:65:99:05:
32:ea:21:1e:c4:f3:fe:7f:e6:a9:74:22:14:f0:fa:a2:40:35:
f3:ea:c8:f6:93:69:b0:c3:a9:52:36:d8:25:14:46:eb:51:3f:
11:5b:be:22:e1:b7:a4:ff:12:c2:f5:1e:53:4c:5c:c9:17:6d:
14:50:ae:71:66:1a:d1:29:af:3d:9f:a6:86:4c:7c:3f:1e:2f:
fb:50:a4:56:55:15:62:38:3a:6f:fc:28:c2:e8:98:56:92:50:
71:b9:e4:0d:28:3e:56:d7:66:75:02:24:e4:ed:9d:71:d2:22:
09:30:6f:27:1f:e7:3d:77:9f:56:61:d1:80:e5:df:a7:de:d6:
c3:14:58:4e:ff:df:58:de:94:b8:0b:ae:77:1a:00:83:f8:24:
52:0d:7c:64:c9:93:7c:1d:8b:28:cf:d8:28:07:52:01:88:8f:
43:08:e8:99:56:5a:68:79:5c:69:c1:0e:10:31:cf:fb:97:4e:
40:03:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:53:24 2025 by rpki-client