Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: DSiGh0ieTqGPrcSwHfBbWDqlShTFR92767U7xnwPrN0=
Subject key identifier: 49:D9:72:F5:CA:58:C1:3F:E9:DB:35:18:70:34:F7:A9:64:8F:5B:CF
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 0197711B03A0B9032B0180698EBEBA0C016E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 158F
Signing time: Sun 15 Jun 2025 01:01:25 +0000
Manifest this update: Sun 15 Jun 2025 01:01:25 +0000
Manifest next update: Mon 16 Jun 2025 01:01:25 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: woX1UgaLi0yCaf5FM+/hS1E8MmD5XGkvogiiuipYKIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:03:a0:b9:03:2b:01:80:69:8e:be:ba:0c:01:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Jun 15 01:01:25 2025 GMT
Not After : Jun 16 01:01:25 2025 GMT
Subject: CN=49d972f5ca58c13fe9db35187034f7a9648f5bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:17:f5:ef:60:33:23:45:c2:79:16:60:06:
b5:72:74:eb:e7:15:1e:88:bb:e5:aa:c7:e3:13:91:
01:e2:e8:75:b0:e8:bf:3f:a7:60:6c:45:e9:b2:9c:
5f:be:3b:5f:30:50:59:84:e7:88:92:01:f1:14:65:
51:e5:24:4e:69:c0:9c:11:51:62:a8:46:c0:ce:a2:
0f:2a:8b:c9:0b:4c:31:5e:76:df:f1:77:74:e6:b3:
84:e5:c3:1e:e3:27:57:60:d2:0a:21:0c:8b:d1:9d:
95:4f:23:1c:26:3b:6f:f3:db:74:f0:92:51:93:f8:
b9:ed:17:5d:e6:25:ad:eb:4f:38:a0:9f:7b:63:d4:
8b:77:62:97:a6:bd:fc:b0:0f:ed:3f:7f:d6:e1:42:
1d:6a:d7:35:24:0a:13:b4:61:df:9c:ce:b0:2e:82:
6b:3c:e4:01:3a:8c:63:16:5b:ba:bc:d8:3d:68:a1:
3e:81:44:45:56:7b:61:78:79:6c:46:a7:24:05:54:
6a:7f:b5:e1:99:31:03:17:3c:36:b4:1a:eb:82:8d:
ed:7b:e2:fd:6d:9f:a7:4c:23:52:fe:50:78:a0:3a:
24:9d:20:64:14:05:e7:eb:ef:ad:92:f2:fc:d4:5c:
e3:3d:c3:c8:3e:fb:0c:6c:02:99:33:0b:9d:5a:f4:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:72:F5:CA:58:C1:3F:E9:DB:35:18:70:34:F7:A9:64:8F:5B:CF
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ad:92:d6:a9:a0:44:88:fb:94:d8:02:ca:cd:57:a3:dd:f4:
f5:92:55:e0:8f:01:0f:4a:45:b1:57:c6:e1:05:98:96:3f:d1:
b4:ad:ca:b3:59:fb:de:93:df:8e:e0:98:2e:8c:ff:04:dd:58:
49:76:59:0c:46:16:51:2c:c5:8f:ee:be:3b:d5:ad:97:f5:2f:
70:3e:a9:07:cf:ed:34:13:92:00:f7:1e:3a:85:9e:c6:60:f9:
96:fb:c4:a6:41:09:28:ad:1e:e7:06:96:fe:d1:6c:b8:b5:74:
24:94:d1:0d:ef:8a:b4:31:72:a8:c0:a5:28:39:8d:0a:33:61:
c6:eb:6d:b1:ae:fa:38:45:59:aa:70:05:de:00:b9:d2:d3:f5:
06:dc:ef:ea:56:4e:ad:72:8d:37:98:35:01:a8:8c:76:2f:3b:
4e:c8:27:9b:bc:1c:df:b0:91:c5:9b:2c:b8:88:cf:c4:ec:a2:
4e:21:f1:b6:06:f0:88:64:7a:d9:2d:17:bf:bc:4d:29:45:08:
7b:05:3f:64:86:43:16:d3:d5:43:2d:5a:9b:bf:24:be:15:96:
95:a6:88:f2:3e:8a:c8:03:c7:71:06:6a:ca:b4:41:d7:bb:97:
7c:ed:19:9a:02:b8:a3:aa:f7:8e:ef:17:a0:a2:45:7a:53:48:
cf:14:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:23 2025 by rpki-client