Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: c/o4va/6+OqQM/6AWzPvR/+du5EtFf2ZQvgeccZ5nL0=
Subject key identifier: 40:0A:3F:E8:43:C3:40:35:92:F9:F4:5A:03:80:6E:BD:C0:87:F2:89
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 01958EF316988DB88D297D52862A732E25F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 1426
Signing time: Thu 13 Mar 2025 10:00:50 +0000
Manifest this update: Thu 13 Mar 2025 10:00:50 +0000
Manifest next update: Fri 14 Mar 2025 10:00:50 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: TIienM8X4jCVyZSbux4uHLOlUTxxxihOP8w43lGJi70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:16:98:8d:b8:8d:29:7d:52:86:2a:73:2e:25:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Mar 13 10:00:50 2025 GMT
Not After : Mar 14 10:00:50 2025 GMT
Subject: CN=400a3fe843c3403592f9f45a03806ebdc087f289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:3d:fb:67:f5:da:a9:b0:b7:ca:d3:7b:ce:
db:51:11:93:2e:a1:05:bf:80:0c:53:46:1c:e7:19:
f0:6b:8a:93:83:a9:81:03:ac:4a:00:ca:cd:ba:ad:
81:96:a2:6f:44:9b:8e:88:1e:da:b4:0b:a4:98:2c:
f1:cf:59:54:b3:65:6a:5b:c5:f5:54:9f:25:33:6f:
f6:13:d3:7f:53:fc:a8:81:39:55:54:12:04:ac:2b:
02:5c:2f:c0:46:50:09:aa:bf:d0:dc:a3:fc:e4:9e:
cf:9d:f6:a0:d7:55:7f:28:1a:f3:c1:64:60:09:38:
7d:c4:f6:a2:8e:97:bd:8a:5a:57:ee:39:5a:f1:e9:
c7:ee:55:47:e9:84:09:51:d6:5d:73:53:6b:79:db:
78:8d:04:2b:da:a3:f4:ee:6f:8d:3d:d1:2e:a0:38:
db:f4:38:32:a0:5b:29:0f:b9:39:fd:d4:d8:18:f2:
ed:f7:0a:d3:d5:55:2e:d1:24:ed:2e:ed:c0:58:ac:
08:20:76:fd:5a:53:86:7e:42:f6:05:b2:ea:79:e1:
07:4e:93:38:57:96:1c:d1:52:53:c4:79:36:4b:e3:
c2:db:7e:1b:39:ba:76:f5:af:b1:7e:96:9e:3a:59:
b6:96:99:9d:e2:7c:73:e8:26:11:fb:12:9b:92:77:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:3F:E8:43:C3:40:35:92:F9:F4:5A:03:80:6E:BD:C0:87:F2:89
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c2:20:72:42:7d:db:dd:e8:60:2c:c0:a4:5c:42:5e:6a:5b:
34:d6:5a:7d:44:20:5d:1f:a0:ee:3d:8c:2e:70:e8:2d:ec:f9:
7a:2e:66:fd:5f:13:df:d1:b5:5e:05:8f:38:4a:68:e7:d5:8d:
fa:2f:bc:84:41:29:b9:39:62:9f:f5:40:b5:4c:4b:a8:84:a3:
ac:fe:60:1e:8c:df:9e:68:1a:ce:11:ab:2c:88:fc:63:c1:23:
02:fb:2b:f8:a7:8c:d2:0d:de:be:a3:12:3c:a6:94:b1:a0:1c:
40:c6:fc:6d:0f:d2:62:e3:68:f3:cf:a7:22:ad:81:b7:46:bd:
6c:93:26:df:36:f0:d0:18:1e:79:c7:57:fe:68:a3:10:5f:5f:
c0:3f:47:a0:22:25:67:f4:17:5a:7f:86:47:01:02:7e:90:bc:
62:07:22:ae:34:c8:14:96:10:02:f3:75:5e:4f:ff:7c:06:f0:
be:0f:ab:e2:01:7d:e6:2e:cb:60:76:43:cd:93:24:11:7e:b9:
8c:70:a8:98:25:0b:20:e6:bd:ae:a8:f8:4d:b4:03:44:dd:95:
c4:1e:77:94:6d:b1:a1:30:63:55:ec:5e:02:24:fa:5f:8b:1a:
92:58:22:48:72:b9:28:da:de:c9:32:13:fe:67:26:83:d4:b6:
20:4d:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:58 2025 by rpki-client