Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: wLQvh5Z0gBP9K+euj1d6kuQffI+R6hQjnvdbQFciACI=
Subject key identifier: AE:42:07:51:7E:05:83:4E:59:16:07:E1:B4:7A:D4:39:81:7A:49:75
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 019A7149CA9DDBEDEB9E92B4ABD98C46AFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 058B
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: QWKRIGYhNrioXE/kvvNhFomw8fmhjUW2K5c1Igw9SpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ca:9d:db:ed:eb:9e:92:b4:ab:d9:8c:46:af:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=ae4207517e05834e591607e1b47ad439817a4975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:04:1e:4b:ae:3c:9a:04:c8:d8:c6:3a:24:
ff:47:c1:a9:53:7a:6f:b0:05:94:b5:72:b8:04:70:
9a:c7:3c:91:0e:fa:f8:4d:90:e2:5f:ee:e7:14:6c:
af:c6:58:a9:bb:a1:84:75:8f:ae:44:ca:fb:a0:a0:
67:62:f5:9b:6e:85:e4:2f:4f:e8:b2:34:f6:3b:c3:
94:75:22:fe:ee:d9:ab:2f:e3:83:ca:72:c5:25:29:
7a:e9:7b:cc:fc:de:73:72:e4:2d:7e:97:cf:62:b7:
aa:e0:4f:eb:41:31:c9:92:dd:a3:40:5c:58:cd:08:
76:ff:35:5d:e1:5d:f5:73:a8:44:58:fa:8e:2e:b6:
c6:e3:e6:9b:f1:b7:e8:82:ca:20:96:16:03:f0:00:
32:e5:0f:97:2b:59:fd:f3:5b:89:33:26:47:72:da:
e1:e7:b7:86:db:11:ea:92:93:d4:e5:7f:ff:dc:82:
f1:19:dd:12:47:10:f8:76:51:12:3d:44:4d:77:8a:
5c:bd:83:07:f7:3c:36:41:30:8a:90:eb:a5:6b:12:
6b:47:7a:ea:96:e1:6a:0d:95:69:63:5c:00:f6:e7:
f4:89:88:dc:5c:2b:02:0e:07:e8:de:48:ee:c5:e6:
49:20:b5:66:a8:5a:d7:f9:dc:8b:7b:87:0d:61:1f:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:42:07:51:7E:05:83:4E:59:16:07:E1:B4:7A:D4:39:81:7A:49:75
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:37:79:99:ce:61:97:87:39:f1:cf:23:77:03:6e:63:15:87:
1d:fb:18:0d:fe:bb:4e:7f:9d:2d:ff:81:49:b0:fa:58:45:9a:
27:9b:c4:38:17:af:d2:a1:f3:76:f7:26:0d:75:3f:78:ce:8a:
09:16:20:c2:62:38:b9:ed:9e:cc:6d:db:9f:01:be:31:ae:3d:
20:e6:54:46:96:e5:dd:48:f9:c1:90:db:65:28:52:72:71:af:
78:7d:de:04:0d:1f:c4:1d:1e:32:5c:c3:6b:29:7a:b1:2b:11:
99:e0:7e:d5:85:22:e7:db:93:c3:cb:aa:d5:39:db:4e:08:27:
48:65:84:5f:7d:db:9a:8a:31:6a:91:ca:81:5a:98:c5:85:15:
c3:97:57:2d:7f:d4:7d:fe:83:ec:ca:b2:02:fa:07:8a:7a:eb:
6a:55:57:b7:89:d1:95:44:86:31:cb:22:61:21:3a:4e:bf:f7:
df:cc:86:81:60:e0:29:79:f2:93:00:3a:00:7f:c2:7b:ff:8b:
a5:54:03:51:32:63:ef:a7:14:0e:b2:7e:c2:68:91:f4:b8:c6:
fb:0f:80:e5:04:73:e8:31:5a:9f:46:5f:13:0a:f5:d5:92:08:
2a:53:45:6d:bc:ca:6b:51:62:00:9f:bc:be:22:f6:6c:fd:76:
88:55:b0:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxScqd2+3rnpK0q9mMRq+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODdlNWQzM2E5YjI4YmU3ZjFhZjhiYzljMTM4YjE1ODA5
MGYxODkwHhcNMjUxMTExMDUwMDUyWhcNMjUxMTEyMDUwMDUyWjAzMTEwLwYDVQQD
EyhhZTQyMDc1MTdlMDU4MzRlNTkxNjA3ZTFiNDdhZDQzOTgxN2E0OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxcEHkuuPJoEyNjGOiT/R8GpU3pv
sAWUtXK4BHCaxzyRDvr4TZDiX+7nFGyvxlipu6GEdY+uRMr7oKBnYvWbboXkL0/o
sjT2O8OUdSL+7tmrL+ODynLFJSl66XvM/N5zcuQtfpfPYreq4E/rQTHJkt2jQFxY
zQh2/zVd4V31c6hEWPqOLrbG4+ab8bfogsoglhYD8AAy5Q+XK1n981uJMyZHctrh
57eG2xHqkpPU5X//3ILxGd0SRxD4dlESPURNd4pcvYMH9zw2QTCKkOulaxJrR3rq
luFqDZVpY1wA9uf0iYjcXCsCDgfo3kjuxeZJILVmqFrX+dyLe4cNYR/wowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5CB1F+BYNOWRYH4bR61DmBekl1MB8GA1UdIwQY
MBaAFA6H5dM6myi+fxr4vJwTixWAkPGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMGEyNWMtZDUyNy00Yzc1LWExYmIt
M2VmNjQwZjkzN2M0LzEvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lMGEyNWMtZDUyNy00Yzc1LWExYmItM2VmNjQwZjkzN2M0
LzEvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzd5mc5h
l4c58c8jdwNuYxWHHfsYDf67Tn+dLf+BSbD6WEWaJ5vEOBev0qHzdvcmDXU/eM6K
CRYgwmI4ue2ezG3bnwG+Ma49IOZURpbl3Uj5wZDbZShScnGveH3eBA0fxB0eMlzD
ayl6sSsRmeB+1YUi59uTw8uq1TnbTggnSGWEX33bmooxapHKgVqYxYUVw5dXLX/U
ff6D7MqyAvoHinrralVXt4nRlUSGMcsiYSE6Tr/338yGgWDgKXnykwA6AH/Ce/+L
pVQDUTJj76cUDrJ+wmiR9LjG+w+A5QRz6DFan0ZfEwr11ZIIKlNFbbzKa1FiAJ+8
viL2bP12iFWwFA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:13 2025 by rpki-client