Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: bwccTQWnQJ1X+gU0KPzB4yPxvkbccZ0ygHgMnSDQYDY=
Subject key identifier: 24:B0:49:88:04:72:D5:5C:1A:7B:64:71:B2:4C:0E:54:25:B1:75:E4
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 019A4EF5188CCEAE245387065A6BDC33C5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: o8MTWCsjS0mqHdf5RJ4M0eMXOfA3Mm7fZMhZvk1qGL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:18:8c:ce:ae:24:53:87:06:5a:6b:dc:33:c5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=24b049880472d55c1a7b6471b24c0e5425b175e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:6b:25:db:0b:bd:ea:f6:42:2b:35:98:76:
58:5c:5d:78:c4:03:ca:48:6b:5b:fb:ef:8c:98:2e:
a1:44:ad:e2:c2:dc:58:0d:fa:b4:78:19:39:39:7a:
a1:82:9a:5d:3b:da:8e:40:3a:be:57:35:de:87:e2:
d7:be:ea:fd:42:df:e8:85:11:40:a6:0b:6d:79:bf:
fa:83:d8:19:7e:7d:1b:bd:fc:51:58:ba:25:2b:ad:
f4:c6:64:9c:03:f8:4e:45:d5:29:28:c7:1e:7e:9e:
20:e0:b0:87:82:c4:64:fd:6b:28:bd:df:77:b0:36:
f0:6d:84:17:85:d6:43:a1:bf:3b:c7:31:1d:80:42:
d6:73:2e:31:fd:4d:68:84:87:b7:9f:6d:54:41:4a:
20:56:a5:8c:bd:89:81:a7:4c:7f:ff:37:68:33:35:
19:0e:66:bb:5b:7a:0a:45:23:4b:75:65:b5:5f:11:
b9:62:57:cc:e1:34:3f:4c:93:6d:e1:ad:3e:f5:ae:
64:42:f1:2d:77:ae:32:bc:1f:41:e2:52:4a:ff:37:
97:1c:88:c1:8d:ec:f6:eb:1b:53:80:7b:47:a7:e4:
a0:e7:dd:3f:8f:ad:e0:fa:5c:c3:25:e8:2f:54:f6:
7f:45:7a:d0:d1:be:79:d3:3c:dd:04:30:a6:71:57:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:49:88:04:72:D5:5C:1A:7B:64:71:B2:4C:0E:54:25:B1:75:E4
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:de:33:8a:01:08:ba:83:0f:b2:a6:94:52:05:99:c4:c3:f9:
c1:24:ec:11:a5:6f:85:a9:3a:e0:ba:c6:29:ca:75:f6:44:d2:
00:80:71:83:c0:f1:fa:06:9a:e1:49:bb:8a:10:12:77:b2:7e:
7c:91:2e:5a:55:ba:1f:7d:58:2b:6f:9d:0d:dd:07:50:77:38:
f4:f6:23:d5:e8:bd:63:c0:15:c1:c5:c4:a4:f8:b3:d6:ee:5d:
1c:3e:c3:b8:fc:ed:03:bd:0a:a8:0c:32:99:fe:9f:98:24:d6:
3d:b0:a9:a2:d9:2c:76:e4:31:31:65:5b:f1:07:89:93:8d:d2:
49:85:66:b2:ad:a2:3e:22:ab:c6:fb:35:22:5c:4d:3f:c3:f4:
35:1b:b4:7c:70:1a:a8:77:c6:5b:4d:d2:b2:c4:65:58:26:69:
1a:ee:cf:a2:3d:e5:78:80:df:fe:ee:79:ad:c5:42:97:ff:df:
c3:84:ff:98:07:9e:d2:40:d4:48:56:62:13:84:3a:5f:e3:1a:
b0:ba:25:c5:7f:7d:18:0f:ee:cd:0e:2a:fa:eb:74:9e:c6:a2:
63:08:ae:62:ef:5f:20:5b:96:f0:27:67:cb:71:55:90:09:b1:
15:36:3e:79:18:63:45:e5:7d:96:a4:99:ae:37:fc:7b:15:37:
90:e7:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:33 2025 by rpki-client