Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: I1IdB+URyj1a4fDKJDcMV3CyM0sHDDMLVM7g3S/2qE4=
Subject key identifier: F9:81:B9:8A:03:13:EA:EB:CF:DF:E0:AC:A7:3A:5A:44:A1:78:2B:98
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 019848F77AF03828CAEB3EA5ECD29E9E8507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 046D
Signing time: Sat 26 Jul 2025 23:00:35 +0000
Manifest this update: Sat 26 Jul 2025 23:00:35 +0000
Manifest next update: Sun 27 Jul 2025 23:00:35 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: c2E1+EkLef+SS7ueU+rfM19uzdxAJAA30KbC5Lr9U6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:7a:f0:38:28:ca:eb:3e:a5:ec:d2:9e:9e:85:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Jul 26 23:00:35 2025 GMT
Not After : Jul 27 23:00:35 2025 GMT
Subject: CN=f981b98a0313eaebcfdfe0aca73a5a44a1782b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:ea:4f:e9:9b:65:9f:4b:29:44:fb:22:47:
1c:93:7f:71:fc:c3:55:da:43:d3:a5:7a:1b:19:ea:
2e:29:2b:7b:a0:71:f9:ed:ee:07:b5:8a:ed:12:45:
c1:c5:7e:2a:a0:5e:95:90:34:1d:4e:44:55:39:c0:
00:21:39:07:ea:a2:4f:1b:8f:53:58:43:bb:02:7b:
bb:e8:6a:31:3b:9d:16:09:02:82:b4:7f:b3:3d:0c:
e3:a3:9d:f4:d5:3c:e8:26:57:8a:82:65:90:63:5d:
dd:b6:4a:a5:2e:b9:05:c6:bc:a1:57:62:e8:9f:e8:
f0:b6:e7:00:e8:0f:dc:fa:66:e0:25:58:16:fe:53:
97:80:e1:04:b7:dc:ae:eb:75:7f:e7:54:f5:fa:f1:
3f:3b:b4:77:fa:4f:b5:0a:d6:53:d2:09:7b:73:a8:
4f:a7:34:9c:27:f7:b4:ee:6a:84:bd:72:86:68:11:
6c:63:ea:f2:0c:f3:15:59:b9:b7:e4:da:10:c9:8b:
26:76:25:48:3a:23:6a:b2:35:72:3a:47:c9:14:2f:
e5:41:f0:80:d3:35:e1:1b:63:8d:3c:12:5e:d6:56:
82:ba:04:30:c5:62:72:e7:d6:f7:c2:be:85:97:3b:
64:41:89:8a:1d:62:41:2a:02:f4:6a:25:9b:a1:de:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:81:B9:8A:03:13:EA:EB:CF:DF:E0:AC:A7:3A:5A:44:A1:78:2B:98
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:06:db:10:a0:fd:7c:b0:c3:cf:72:23:c9:b9:b7:ae:a0:18:
f4:b0:5b:e3:5b:06:ce:57:ac:0c:d8:77:4e:65:36:91:87:b9:
9a:84:29:4a:40:ff:48:81:e4:19:b4:5e:60:84:eb:0b:f6:6a:
ef:d6:5d:76:e1:f1:11:dc:c8:3d:de:d9:89:28:9e:a4:2b:6b:
ce:12:bb:85:cc:d7:06:26:29:dd:2a:df:6f:07:90:ba:03:94:
df:bd:d3:cf:dd:92:f5:b7:72:18:4d:14:4a:2b:86:a1:59:97:
dc:bb:86:b8:cf:51:6c:f3:fd:87:d7:1c:fe:9e:61:0b:13:46:
d1:16:9a:24:92:7d:3f:dc:a6:99:38:cf:dd:6a:a2:c8:30:ad:
af:c9:09:19:89:64:7d:db:30:f0:b1:bf:69:1a:e9:57:82:ac:
ff:d2:15:b3:79:3c:0f:46:c7:26:de:17:5d:c3:01:68:17:c4:
53:36:4c:cc:ab:5b:b4:91:2d:31:fd:b7:1a:46:e2:3c:01:cc:
be:89:05:20:a9:0d:0a:19:a1:99:96:37:82:11:31:2d:e1:09:
bd:c3:ca:cf:53:e8:b5:06:d0:ca:3c:45:ad:a0:1e:4f:15:70:
19:af:3e:bb:64:87:29:5a:80:5b:77:6f:d4:55:ea:78:ec:85:
ec:f0:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:03 2025 by rpki-client