Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: xdUUlWZbQWmHedHfxaftPPzUOZKVK6N8mnlHi4cj+dw=
Subject key identifier: E9:42:4D:32:6A:42:BC:6B:D1:3F:3B:D9:FD:74:B8:18:1D:7A:1C:38
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 0196BF6F07DB44303DC8F92C901F5191859E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 13:00:46 +0000
Manifest this update: Sun 11 May 2025 13:00:46 +0000
Manifest next update: Mon 12 May 2025 13:00:46 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: M3ELqSzwZMEALhgvNQ5zFYq2th5ULQooRgLf/kzetwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:07:db:44:30:3d:c8:f9:2c:90:1f:51:91:85:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: May 11 13:00:46 2025 GMT
Not After : May 12 13:00:46 2025 GMT
Subject: CN=e9424d326a42bc6bd13f3bd9fd74b8181d7a1c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:d9:96:88:9a:5e:4b:fe:3f:23:bb:cd:e7:
2e:35:10:60:5c:be:69:31:6a:26:67:e5:95:71:d3:
36:1c:f8:56:58:c2:b3:73:5a:17:7b:da:46:8f:5c:
05:45:1b:b4:3e:49:72:9f:06:6d:a9:16:44:21:c5:
d0:27:92:55:cb:56:e6:4c:f3:d9:2f:dc:a4:56:dc:
16:78:5d:2a:e6:7e:61:d4:73:12:38:f0:02:3a:2c:
54:c7:be:38:e8:2e:94:a6:8e:cb:b6:d0:dc:e3:e8:
67:06:c1:3d:f6:4e:9e:83:d6:15:7f:03:44:dd:90:
70:13:c5:d3:c6:11:f8:48:36:62:93:9b:dd:6e:cb:
4e:aa:48:cb:13:69:88:cf:26:94:17:b5:51:64:f3:
53:c2:dd:d7:ac:d0:78:d7:8f:bf:95:e5:2d:00:0d:
b1:fa:1b:22:f7:88:f8:b6:2c:70:24:37:6e:de:42:
7d:6a:ca:65:04:12:99:ae:af:e8:ce:41:c4:b6:47:
05:6b:d5:a5:df:93:e4:48:1f:eb:30:f3:b5:2e:6f:
87:f5:ef:b9:cd:ec:86:04:90:f5:8a:c2:52:6e:75:
7d:9d:4b:74:5a:d7:c7:ae:29:89:68:1c:c6:a5:49:
ce:a1:36:68:ca:d8:4b:44:bf:65:61:18:49:6c:ff:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:4D:32:6A:42:BC:6B:D1:3F:3B:D9:FD:74:B8:18:1D:7A:1C:38
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cd:c0:d9:bc:09:28:59:8b:2a:96:87:71:1b:c2:18:df:37:
8d:f6:5e:58:21:19:45:07:4e:e7:89:5e:9c:af:ca:ce:59:23:
a1:b7:6e:35:6b:9c:c8:cc:25:70:b4:af:69:ce:23:a6:8b:be:
1f:b5:e6:1b:8b:d0:fa:1f:5e:71:42:fb:73:d0:58:9d:c3:4f:
e0:e1:c0:a6:38:6d:70:05:f6:52:88:cf:9a:c7:a2:62:3c:cc:
f2:32:39:68:7e:30:2c:19:3e:9c:c2:ff:36:f2:92:c6:12:0d:
32:23:2a:e2:92:a6:fe:01:e6:d6:11:b8:2b:72:65:24:bd:86:
6e:c7:7f:93:e7:99:e8:48:73:88:ac:38:48:96:25:28:8a:39:
16:59:05:52:07:a8:ea:58:fb:fb:8c:d8:54:ef:8b:a3:cb:ca:
3e:cd:45:50:2d:00:07:9a:69:b5:07:f6:79:e8:49:ba:58:4a:
b9:5d:a1:a7:87:c2:b3:f5:6c:84:6d:99:50:19:68:3e:38:23:
90:70:8d:16:cc:85:2d:5d:1f:e0:51:2b:76:4a:94:30:5a:db:
26:5f:28:40:60:5a:2c:24:cf:ab:7d:d5:6b:ea:46:4a:16:fe:
7c:5e:3e:5f:21:b0:6b:56:b4:0a:8e:bf:84:9c:76:ef:3f:af:
64:44:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:52:01 2025 by rpki-client