Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: TEMjQ5Yd6aZ7URjACgXxqd2V4gtM035YNGiHiD+456E=
Subject key identifier: A1:22:20:C2:E7:0E:0E:51:DF:B6:09:CE:0B:1F:19:1E:23:A0:42:91
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 01988B10501A63AC0B67727CA7B0A5A320C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 19:02:38 +0000
Manifest this update: Fri 08 Aug 2025 19:02:38 +0000
Manifest next update: Sat 09 Aug 2025 19:02:38 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: BHp80dU+loxvGNs59qTwLKnORMvufCdhAQdd8cv2HGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:50:1a:63:ac:0b:67:72:7c:a7:b0:a5:a3:20:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Aug 8 19:02:38 2025 GMT
Not After : Aug 9 19:02:38 2025 GMT
Subject: CN=a12220c2e70e0e51dfb609ce0b1f191e23a04291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:0a:2d:a6:00:98:30:11:83:8a:60:3d:aa:
1a:cf:1f:8a:c2:e5:08:1c:7e:f1:15:cf:c5:0e:3a:
61:ec:8f:60:10:7c:35:3e:6d:cb:8b:13:1f:1a:1d:
c8:8a:72:af:fc:28:99:ca:2f:7d:bb:e5:ce:c2:6b:
3f:7a:49:d6:b1:49:8b:11:f8:1b:d7:82:11:15:41:
a9:c1:ca:72:60:da:c5:c1:1a:2b:74:c8:44:54:96:
15:19:14:f5:8c:ad:15:4b:63:e8:ad:31:9c:84:3e:
6f:a7:94:fd:7b:cb:52:3c:ec:99:a8:8a:21:9f:06:
b2:a1:4c:e8:d8:bd:b2:ec:85:52:ec:ce:29:74:7e:
5b:c8:a3:af:ca:05:f2:e8:ca:95:47:74:43:c2:03:
ee:45:ec:20:e7:d5:22:13:04:23:df:29:69:7e:46:
49:82:55:4c:6c:49:22:5e:69:09:ea:52:a7:29:dc:
21:f8:1f:e7:80:43:a2:8d:d3:06:4f:e3:b4:50:99:
0f:1b:36:0f:ec:ff:a9:c0:1c:d1:97:54:4a:72:17:
66:a8:89:18:7e:e2:3c:e7:71:d6:37:dd:d5:a4:e7:
af:92:13:fb:b4:ba:74:f8:42:72:5a:62:69:35:08:
d1:22:da:db:53:ee:3a:53:9c:af:99:65:4f:1b:cf:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:20:C2:E7:0E:0E:51:DF:B6:09:CE:0B:1F:19:1E:23:A0:42:91
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fe:cb:1e:ab:22:cb:a6:05:48:3a:b1:6c:56:58:3e:20:6b:
69:5e:06:00:f0:3f:14:48:74:7f:a0:60:bf:6c:be:09:8f:b4:
8f:73:33:74:20:e9:cf:75:22:01:bf:1b:23:e9:a0:59:d7:31:
c4:3b:3f:d5:3e:06:5c:c3:d6:fc:fc:90:13:58:39:2a:34:9a:
4c:c8:07:23:17:a0:46:ba:78:91:38:2c:48:2d:4b:83:4c:dd:
06:2c:a5:79:a9:0d:41:98:57:c8:54:ec:68:3b:ac:cc:4a:18:
b6:3f:6a:50:a2:45:9d:27:24:bb:7c:f5:ce:18:fc:50:b4:7c:
6c:c1:de:23:ad:48:ee:7b:f7:34:83:07:67:ed:13:75:8f:b1:
fa:b0:24:4e:d8:09:25:fb:8e:d4:d1:fd:fb:e2:b8:29:ee:9b:
24:e4:88:54:21:e8:a9:f3:6e:fd:8b:66:a9:d8:04:9d:e8:a2:
ba:cc:13:bf:98:6e:88:21:0e:a5:db:22:e5:73:60:05:f8:a2:
44:dc:0b:d9:e3:0a:62:b5:1d:47:41:2f:e2:6d:9f:cc:78:6c:
60:04:ea:5b:cb:70:fc:c7:8d:45:3b:18:e1:3b:cc:cc:2f:00:
13:61:ea:f7:75:af:f8:a1:21:0e:d5:3e:c9:5a:92:92:e2:90:
85:e5:68:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:07:06 2025 by rpki-client