Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: aM5TohpFbADguwv7pCMXI9Emt6eT0gJwLnOuADVhXoY=
Subject key identifier: FF:5E:29:5B:90:07:42:44:36:E4:E4:9F:B4:F4:F0:EA:75:65:E6:4D
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 019A71B889CC799C3D249EFCB91E1E0A6A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: zLfUzowxLneI0+YXai4dcAvOipguSGgdxn/3XSt8tWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:89:cc:79:9c:3d:24:9e:fc:b9:1e:1e:0a:6a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=ff5e295b9007424436e4e49fb4f4f0ea7565e64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:e9:61:2d:bd:c5:ca:57:f4:de:e6:98:0a:
f6:34:d0:d7:af:db:30:b2:e5:97:6c:29:b7:5e:6c:
ea:8c:66:7c:aa:f7:73:1e:b3:64:c7:da:a8:9e:da:
ad:87:fa:bc:49:fa:c7:24:db:2d:12:19:b7:4d:b8:
11:2a:a8:b5:72:47:d2:ab:0a:c3:0a:62:8a:e0:0b:
03:53:f6:a9:28:d6:ea:73:9d:d6:76:1e:b7:03:f4:
fe:68:ef:c7:c0:9e:3b:29:55:88:59:8c:a2:d0:6a:
71:7d:2f:1b:c9:f4:7c:f6:ab:1c:49:70:92:55:d7:
0c:cd:17:f0:11:50:74:b6:31:92:18:5d:97:5c:d8:
73:97:e5:9c:10:48:eb:85:57:ab:50:41:3d:1a:cc:
7a:49:bf:ac:88:71:24:0e:bb:e2:68:05:0a:c9:2c:
31:4d:4d:cf:82:85:8c:1e:db:4f:2a:54:70:47:9c:
e2:da:5c:ef:f9:c7:6d:25:bd:40:e0:ba:8a:70:7f:
ec:f8:8a:06:6a:5d:1c:f4:a1:ea:5f:c9:2d:e6:8b:
1e:e0:c9:aa:46:1a:e4:fa:d5:24:fd:ab:0a:65:a9:
ef:e3:59:ef:76:a3:bc:08:83:29:03:57:f2:59:d7:
1e:c4:dd:6c:da:7b:c8:49:2b:59:cf:14:38:c7:dd:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:29:5B:90:07:42:44:36:E4:E4:9F:B4:F4:F0:EA:75:65:E6:4D
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:04:28:70:85:df:1c:c6:b2:47:35:50:2f:d5:fe:80:aa:
ad:d3:79:d1:8f:1b:a4:12:76:c8:7a:db:bb:59:63:14:a9:b7:
f0:31:78:cc:93:47:63:3e:83:e4:c2:b1:c6:42:76:3d:0c:aa:
43:92:05:58:fb:f1:4c:cc:7c:28:4e:44:f7:9f:0f:5c:70:32:
34:8e:df:08:91:76:0c:c0:25:ef:fb:81:18:dc:6a:34:6f:38:
33:3b:8d:46:a5:7f:c1:ae:6b:37:37:94:d4:0d:be:06:2e:e5:
69:16:2f:23:b5:00:47:37:1b:f9:28:66:1b:f8:29:72:51:41:
29:22:41:c4:a0:0a:7b:ee:0b:90:45:cc:05:de:58:79:17:f4:
82:fc:f6:aa:16:01:0c:bd:cd:65:71:65:09:b1:59:d1:4d:8b:
f9:59:d4:a6:91:ef:85:be:92:0c:08:b7:8d:10:46:4d:ea:8b:
85:0d:9f:b7:37:2a:9e:9d:50:ad:2f:8a:db:f1:35:b0:0c:e5:
8c:f9:a7:71:6c:42:e3:28:e4:cc:f7:a2:11:20:4e:f2:53:9a:
8c:06:4d:29:e0:a5:6b:b6:0d:d8:f4:b1:02:4f:e5:19:09:1f:
59:d3:b1:89:65:89:40:2b:b0:24:bc:05:58:ce:c3:45:ff:ee:
8e:37:a4:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuInMeZw9JJ78uR4eCmqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZmYzNWY4ZDVhZDNkZWVhNTUxMDY1YjI0MDJiYjBkM2M4
ZDk1MTkwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
EyhmZjVlMjk1YjkwMDc0MjQ0MzZlNGU0OWZiNGY0ZjBlYTc1NjVlNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9LpYS29xcpX9N7mmAr2NNDXr9sw
suWXbCm3XmzqjGZ8qvdzHrNkx9qontqth/q8SfrHJNstEhm3TbgRKqi1ckfSqwrD
CmKK4AsDU/apKNbqc53Wdh63A/T+aO/HwJ47KVWIWYyi0GpxfS8byfR89qscSXCS
VdcMzRfwEVB0tjGSGF2XXNhzl+WcEEjrhVerUEE9Gsx6Sb+siHEkDrviaAUKySwx
TU3PgoWMHttPKlRwR5zi2lzv+cdtJb1A4LqKcH/s+IoGal0c9KHqX8kt5ose4Mmq
Rhrk+tUk/asKZanv41nvdqO8CIMpA1fyWdcexN1s2nvISStZzxQ4x90bkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9eKVuQB0JENuTkn7T08Op1ZeZNMB8GA1UdIwQY
MBaAFAz/NfjVrT3upVEGWyQCuw08jZUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUt
ZTMzZjJiYWFiYzYwLzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUtZTMzZjJiYWFiYzYw
LzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATagEKHCF
3xzGskc1UC/V/oCqrdN50Y8bpBJ2yHrbu1ljFKm38DF4zJNHYz6D5MKxxkJ2PQyq
Q5IFWPvxTMx8KE5E958PXHAyNI7fCJF2DMAl7/uBGNxqNG84MzuNRqV/wa5rNzeU
1A2+Bi7laRYvI7UARzcb+ShmG/gpclFBKSJBxKAKe+4LkEXMBd5YeRf0gvz2qhYB
DL3NZXFlCbFZ0U2L+VnUppHvhb6SDAi3jRBGTeqLhQ2ftzcqnp1QrS+K2/E1sAzl
jPmncWxC4yjkzPeiESBO8lOajAZNKeCla7YN2PSxAk/lGQkfWdOxiWWJQCuwJLwF
WM7DRf/ujjekYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:14 2025 by rpki-client