Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: aamOAhpSocqe99Bk1XiPkf0Ya2ppPoAcfPbIGZ2GKSI=
Subject key identifier: DE:45:8E:6E:86:AD:AF:54:14:40:67:DE:D1:ED:6E:B1:89:70:A2:7A
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 0197B88EDCEBE2FF3407DF69AC62EE3C86CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:00:59 +0000
Manifest this update: Sat 28 Jun 2025 22:00:59 +0000
Manifest next update: Sun 29 Jun 2025 22:00:59 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: SS54paJkHBHZhS5mWMdMc+GSfoPZmXyBqImJYEVmQiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:dc:eb:e2:ff:34:07:df:69:ac:62:ee:3c:86:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Jun 28 22:00:59 2025 GMT
Not After : Jun 29 22:00:59 2025 GMT
Subject: CN=de458e6e86adaf54144067ded1ed6eb18970a27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:41:05:80:40:b1:9c:9b:28:cf:22:8d:12:
35:8e:46:39:48:ca:76:2c:cf:01:d8:f2:d6:2b:79:
d2:0c:a2:c8:ac:5a:da:bc:45:ee:29:8b:b0:c6:41:
7f:7e:94:f6:69:bf:1e:cb:f7:59:7d:a3:de:63:57:
8f:04:a2:8c:42:b5:36:cb:41:4d:21:cf:d3:e7:75:
6a:57:12:f1:58:57:3e:9d:2f:02:34:70:3c:ed:08:
48:56:0d:25:ea:9d:67:94:35:0f:62:ae:fd:93:09:
eb:b3:fa:8d:f1:35:ff:72:96:27:5c:f7:6b:50:4c:
01:d9:24:5e:36:e5:b7:eb:b5:7e:77:b2:1b:fd:71:
31:9e:b3:f8:be:7e:70:9d:f4:f5:ad:e2:42:38:1c:
ff:a0:b7:7e:18:89:05:df:08:cb:e6:e5:bb:d1:64:
4f:74:f2:01:7c:c8:3c:c5:ab:60:5c:a9:61:3b:c2:
02:14:35:01:a0:bc:59:6a:50:e4:1e:05:6f:44:94:
22:cf:48:d2:09:95:e8:f5:23:e7:e0:f9:3f:d5:ee:
dc:f8:a2:00:ec:3b:8d:b6:cd:5d:71:df:87:60:ba:
95:9e:fc:97:09:9d:28:45:97:b6:38:86:36:a1:9f:
0a:c3:d9:21:a1:c3:2c:56:c8:f4:5e:51:25:b6:d3:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:8E:6E:86:AD:AF:54:14:40:67:DE:D1:ED:6E:B1:89:70:A2:7A
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a8:fa:2e:46:53:4a:67:53:f1:60:d6:af:ae:07:a5:c3:58:
28:79:f8:47:94:56:15:f1:82:74:64:e6:e7:91:e7:19:3c:f7:
96:49:63:35:d1:f1:b1:a6:ea:69:ec:e3:77:31:25:18:5b:0d:
6c:32:6a:4f:1d:71:ed:9d:52:bf:ab:da:cd:b8:cf:29:bd:aa:
39:b6:19:6c:32:4a:54:b9:a9:ea:53:9d:27:00:b6:5c:fc:51:
40:c9:a8:57:01:ff:b3:73:d9:40:43:b2:d7:ac:9c:71:37:b0:
b5:29:f1:2c:51:9c:43:6a:79:50:e0:1d:00:74:07:e8:db:46:
6e:ec:5c:cc:d8:96:5a:dc:e4:34:4d:1b:41:6f:fc:d2:45:cc:
bb:ee:95:c3:67:87:d3:6c:c5:73:e3:c3:06:22:9e:30:89:1f:
ac:a0:a4:fd:3f:b8:be:31:b1:ba:61:b6:c1:76:ab:4e:e4:70:
7d:16:21:c7:e7:7a:96:27:32:ee:73:04:77:2f:92:cc:7d:cd:
3d:21:d5:32:9a:c5:53:94:39:46:2b:76:a7:63:65:ce:d7:51:
7e:5d:66:65:69:2f:59:7f:9d:32:86:af:7b:26:14:a6:b3:0a:
8e:32:ca:0e:70:ef:0e:db:92:92:d3:d3:31:33:e7:9d:22:c7:
7c:0e:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:28 2025 by rpki-client