Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: WUKqTlT4NG44rUbWn0vWhJN+hCgM8pWHh7m+WWdL+hI=
Subject key identifier: C3:19:CA:3F:D7:76:07:54:B8:91:E2:56:97:7D:97:24:93:A2:53:A7
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 019A71B8070E70061E7648A0DD7984E5D7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 155C
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: glaXKf2G/1nnyvlOCdnKkMa5ECN33mWRl0vpaxv4zLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:07:0e:70:06:1e:76:48:a0:dd:79:84:e5:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=c319ca3fd7760754b891e256977d972493a253a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:ff:f0:96:80:a7:2d:e4:17:7c:9b:f9:b7:
bc:54:5a:26:81:fe:cd:e7:29:2d:2f:6d:2c:70:a2:
6b:c5:4d:9e:a8:24:c8:d2:c3:e8:12:97:17:30:a8:
c8:a3:1b:5c:76:4b:e6:7c:4c:25:cb:fd:2d:31:af:
f4:92:74:98:b1:c5:43:f4:3d:dd:e5:91:81:4b:02:
24:b5:d6:4b:ad:ed:9b:eb:c9:01:d8:d8:95:15:ab:
e3:fd:53:74:1e:bf:06:b1:be:d2:01:26:ba:ac:65:
18:02:ce:74:35:29:85:02:fe:4d:89:06:72:e8:56:
c4:51:5a:a6:cb:a1:45:c1:29:df:1c:38:e5:c9:e6:
64:08:a4:85:74:a9:41:97:f0:32:09:db:a8:3f:bf:
08:6a:f3:b7:2f:16:3b:d0:dd:db:bf:23:5d:63:35:
18:dc:c7:b2:73:34:a3:f0:6d:da:cd:b9:7a:3c:fc:
27:75:94:dd:51:eb:11:a2:64:d9:59:32:cc:80:f9:
3e:41:cc:91:2d:3c:9e:f7:0b:f3:ac:33:80:fa:e6:
d4:1d:02:b3:ae:e6:61:d6:ba:96:b2:04:b1:30:7b:
08:32:90:b1:47:98:3f:dc:33:5c:42:d6:aa:d0:75:
73:10:58:9f:32:07:d7:57:87:e8:37:cb:93:e1:e3:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:CA:3F:D7:76:07:54:B8:91:E2:56:97:7D:97:24:93:A2:53:A7
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:13:82:d0:55:53:7d:16:76:89:28:be:bf:ff:71:63:7f:b0:
a2:fd:7b:3b:01:05:eb:1b:9d:ce:07:c8:52:cd:d4:aa:4f:01:
56:bb:c9:d8:ba:a4:32:80:7d:43:88:b3:99:77:99:c9:87:dd:
c9:45:18:9a:c1:14:28:c6:2e:2f:d6:65:a1:a0:ca:59:a1:10:
61:91:91:0c:a5:dc:be:a3:aa:ce:31:3e:39:38:de:55:b6:ce:
57:69:6f:7e:1a:43:8f:cb:a1:a8:f1:fa:d7:f5:5a:30:49:2d:
89:56:5b:78:db:0b:10:61:91:06:0c:83:b5:87:1b:17:96:e9:
57:8b:39:a7:e3:5d:df:93:e8:f4:de:a8:71:5a:68:80:ed:d7:
29:59:8b:7c:a9:50:09:30:d6:30:73:9e:6a:fa:a8:9e:5f:ea:
96:58:5f:6e:8f:fe:e5:f2:b7:cc:3b:28:b7:78:c4:f9:6b:d8:
c3:3f:fe:b5:b6:74:06:ca:58:61:40:d5:e0:1e:6c:17:c3:6e:
8a:b7:c0:73:8e:91:75:ff:c4:51:c0:53:16:2f:3e:90:fe:58:
10:8d:db:31:d0:8e:d9:a8:5a:df:92:bc:df:50:72:f1:9b:35:
4d:2f:e0:0a:40:22:6d:48:42:da:53:40:60:87:a9:1d:ac:f1:
28:39:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:12 2025 by rpki-client