
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: ra4whVAlNL+/CWFMW7FAJ1SliQHMf9Qavrf1wGDPjIE=
Subject key identifier: B3:34:AB:AF:E2:93:C3:C8:A9:51:ED:96:BD:6E:42:23:E4:48:09:A6
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 0199161BA64A3E99FA4892165891AFE70C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 14A8
Signing time: Thu 04 Sep 2025 19:02:14 +0000
Manifest this update: Thu 04 Sep 2025 19:02:14 +0000
Manifest next update: Fri 05 Sep 2025 19:02:14 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: Phltn7RPwO1bqCkza7ew4VZQocJSYrPwVemyrucezHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1b:a6:4a:3e:99:fa:48:92:16:58:91:af:e7:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: Sep 4 19:02:14 2025 GMT
Not After : Sep 5 19:02:14 2025 GMT
Subject: CN=b334abafe293c3c8a951ed96bd6e4223e44809a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:6e:43:f7:7f:53:4c:93:86:d9:d4:96:4f:
98:75:fe:ca:17:11:4a:f1:cc:bc:e0:72:bf:c8:6d:
e6:4f:9f:07:b8:3b:3a:2a:1a:f1:01:62:fb:a8:c9:
6e:83:8b:74:fb:c5:f8:6d:2c:dd:43:8b:b7:3c:4a:
cc:4a:26:96:48:ef:8d:d2:37:22:0d:77:ce:5b:c7:
92:13:1f:03:f4:95:d0:64:f7:af:bd:16:12:33:45:
51:e4:2e:ac:29:e9:3a:eb:32:7d:67:bc:f8:a4:ed:
74:f2:3a:42:ca:89:34:32:4c:43:e9:01:a3:04:80:
05:59:80:d5:f5:90:17:b1:81:0e:a2:bf:15:5f:8b:
e1:16:15:93:54:44:28:b0:b6:3f:0f:44:5c:a3:dc:
8d:8d:ff:5c:52:b1:50:da:b1:8d:f5:87:11:1e:a5:
91:b8:ec:97:64:62:52:36:86:d7:70:d2:eb:8d:42:
f9:76:db:18:51:85:1f:28:3e:35:bb:65:82:3f:52:
cb:b7:ef:09:a9:9a:5d:32:7e:12:df:f8:44:c2:97:
e9:84:62:ef:13:a9:44:b6:a0:2e:e1:0c:0b:88:33:
26:24:79:08:c6:88:c7:3b:23:04:69:c2:23:9e:12:
d1:8d:71:6c:f9:b2:01:08:99:cc:38:84:7c:48:7d:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:34:AB:AF:E2:93:C3:C8:A9:51:ED:96:BD:6E:42:23:E4:48:09:A6
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:98:42:b4:a8:7a:64:e8:57:22:ac:f1:ed:b1:21:ee:1a:dc:
5a:6f:23:00:2a:3e:72:b7:7f:46:a8:3a:7b:c8:47:c0:a4:2a:
70:06:c0:37:11:19:d2:ec:8f:ee:74:e4:73:ab:b5:dc:0b:a1:
9c:18:4c:8b:a1:39:d2:33:b8:58:92:b1:f1:4a:5e:1c:da:3e:
5a:01:83:55:70:c7:ca:40:dc:48:bc:85:b5:0e:18:b3:0f:fd:
ce:1b:83:c6:dd:ae:38:70:81:f3:43:51:5a:55:42:99:6f:68:
3c:31:2b:b3:f7:33:b9:13:02:cb:55:34:59:71:32:1b:cd:48:
99:ce:b7:b5:23:e0:92:5f:81:e3:be:a0:af:ae:b3:08:93:a8:
84:d6:b8:7e:c6:fd:ae:55:0c:b0:7a:0e:c6:9e:87:ec:14:a1:
c2:10:80:45:2b:6e:b8:ab:1d:da:9d:d1:b2:d2:61:cc:5b:ac:
91:29:15:8b:62:aa:19:83:9b:58:74:4c:74:76:13:b9:50:e0:
b9:d9:d5:4a:89:24:3d:f6:bc:3b:f0:20:70:d7:54:f4:a0:5a:
a1:2c:85:1f:39:98:23:4b:72:93:ce:47:f5:a0:0e:0a:79:48:
e8:65:6e:da:85:9f:2a:5d:4b:9a:0b:a0:99:36:f6:0b:eb:41:
42:39:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:28:12 2025 by rpki-client