Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: LGb2kk6AUpisKEZS94L4TIrvuDm/BvDqqzSDYJPQriI=
Subject key identifier: 1C:C0:AF:E2:A7:F6:27:2D:FC:C4:89:7C:59:6D:3B:C4:1D:23:29:BB
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 01974BFB60A5592C851DBE5A543E816DCAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 03EA
Signing time: Sat 07 Jun 2025 20:00:54 +0000
Manifest this update: Sat 07 Jun 2025 20:00:54 +0000
Manifest next update: Sun 08 Jun 2025 20:00:54 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: mH4+EZ3bJj6a2d+gfW2UC9mwOPFVvi4Km5gqfQbAscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:60:a5:59:2c:85:1d:be:5a:54:3e:81:6d:ca:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Jun 7 20:00:54 2025 GMT
Not After : Jun 8 20:00:54 2025 GMT
Subject: CN=1cc0afe2a7f6272dfcc4897c596d3bc41d2329bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:1a:7f:36:73:e5:14:1d:e1:26:a0:76:05:
17:46:ce:e2:dd:54:50:b4:9a:8a:8c:7c:b5:cd:a0:
c8:9d:1e:7c:f6:9f:56:22:73:24:1b:ae:9c:7b:c2:
4b:0e:e5:ec:4f:33:87:fa:4a:fd:22:7b:64:ce:86:
7a:fd:2d:64:f7:25:58:f5:d4:42:a3:98:fe:4a:f6:
fd:50:70:f6:35:d1:37:b7:23:44:f2:f8:2a:7f:0f:
af:fe:76:34:4a:c4:cb:47:6d:b4:3a:d0:f1:ae:e1:
a2:f2:85:d5:5b:bf:96:4f:67:da:2a:d1:dd:8a:01:
06:26:04:5a:54:91:0d:f0:ca:f7:19:b2:73:b1:12:
39:d1:b3:39:e8:a4:a0:51:8d:e4:c1:3b:31:d6:b0:
f1:29:4e:83:b7:3c:63:b9:35:34:6f:8b:fe:55:53:
9f:3c:39:53:57:0b:e4:56:05:98:25:a8:11:a2:c4:
33:80:ee:bd:87:d4:8a:93:40:1d:76:9c:73:36:29:
d6:6d:f7:88:c5:03:da:45:5c:63:bc:9e:86:62:70:
17:62:ad:ae:07:94:a4:b8:fe:6b:61:a3:7a:1a:02:
b5:fe:67:24:78:25:35:27:d0:d6:88:f1:1a:d3:2d:
cb:97:c8:45:ca:7b:b9:b3:14:4a:ee:06:f9:73:45:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C0:AF:E2:A7:F6:27:2D:FC:C4:89:7C:59:6D:3B:C4:1D:23:29:BB
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ad:52:7e:e6:09:ab:50:99:e9:bd:d4:79:5a:8f:c9:3b:4b:
b1:4a:1c:56:12:60:11:c6:25:7d:9a:18:ef:1b:90:b2:1c:8e:
1f:5d:90:5c:ee:43:d0:43:73:22:f3:c1:c4:eb:f8:3d:02:66:
91:1d:b6:2b:0c:c5:9d:c1:38:9c:55:61:c1:23:51:32:60:bf:
ea:39:4c:63:c4:b8:08:b1:11:8b:ef:6e:cd:7b:aa:2c:82:cd:
bf:f4:68:dc:3d:c3:05:41:6d:1d:ba:a7:f3:9a:3e:51:e3:76:
00:ef:9d:8a:92:3c:ae:1e:57:37:7a:db:cd:1c:2a:14:66:63:
af:53:44:1b:7f:37:4a:46:fb:5d:26:b6:1c:37:71:38:84:f9:
04:ff:1f:2a:d2:51:19:a1:82:66:e1:57:1f:45:74:25:4c:ab:
c3:d9:d4:2e:01:59:a5:8d:bf:93:19:d4:17:07:1f:ca:ea:b7:
c9:37:09:7c:92:2c:a7:1c:8d:23:4a:e0:f2:3a:97:65:3c:96:
09:f2:5c:93:12:57:2e:88:dc:6b:50:2b:c8:42:85:ad:0c:47:
3c:09:7c:3f:c5:14:c6:57:22:fd:75:f9:4d:70:87:ae:0a:50:
f9:e3:d3:9b:05:2e:90:b0:f2:4d:e6:1c:e1:37:6e:08:a9:00:
be:43:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:44:48 2025 by rpki-client