Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: 51/LBnvQ2iZDHqADy63B4SXNv/8F0DJIfMIYAcIBteY=
Subject key identifier: C0:0B:B4:CD:FD:11:D6:A6:4B:B8:1D:DB:75:95:45:56:79:30:B7:1B
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 0199FB7C74B8360439073F168B0BB0ED7B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 054E
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: FtCsxuhUMNrKx2JWpxPNiv2MU5KdU8sSZO5zDpGRM2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:74:b8:36:04:39:07:3f:16:8b:0b:b0:ed:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=c00bb4cdfd11d6a64bb81ddb759545567930b71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:7f:30:5b:6c:8c:ce:bf:4b:af:3f:a5:fe:
4f:cd:a4:b8:24:f5:3d:ba:1f:66:92:9a:63:cd:0e:
73:1d:70:34:52:4a:6a:f5:57:70:4a:31:a8:02:4d:
14:db:8f:80:7a:df:b8:7c:0e:7b:a8:c3:fc:3e:59:
8d:7b:19:a7:1f:95:21:7b:62:33:29:a3:94:c1:f9:
ae:ed:69:57:8f:7c:ae:0b:ee:ff:7b:0b:06:be:64:
f8:fd:6b:88:40:cc:07:8f:81:a3:ce:1f:a6:45:c1:
13:54:a1:aa:02:5c:db:3d:fe:1c:d1:a0:4b:06:14:
cc:8c:5e:81:09:a6:3c:be:69:02:f8:15:df:ba:41:
a1:e8:58:03:f9:31:11:d1:6a:5b:82:4b:28:48:84:
98:00:fb:d1:63:bd:f0:5a:65:f8:b1:56:bb:14:bf:
3e:85:66:ee:62:5e:0b:d6:ff:52:08:db:a5:6e:a0:
37:2a:6e:83:5e:ee:74:3f:79:34:58:1c:14:83:03:
d1:1f:dc:ef:45:5f:dd:5a:d1:bb:12:30:c2:fd:6f:
02:ff:8c:0b:15:7a:da:08:05:da:25:c3:c0:8b:ca:
24:6e:7d:d9:31:f7:89:fe:21:9d:2d:7d:43:07:8e:
df:0e:ab:e0:62:3b:e8:a4:ee:b0:c6:fb:dd:06:b4:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0B:B4:CD:FD:11:D6:A6:4B:B8:1D:DB:75:95:45:56:79:30:B7:1B
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:21:51:59:ae:0a:fb:da:ab:ad:da:f5:b0:bd:1f:f9:a1:
50:aa:7b:dd:59:b1:a9:2d:9c:ee:17:c8:38:42:01:1b:57:0d:
c0:a5:1a:62:bb:dc:d4:9c:9c:6e:bf:1e:6f:6e:0e:e1:68:50:
3f:72:43:91:65:90:77:d5:29:37:f6:04:2c:33:1c:6f:62:8a:
c6:64:4f:36:ad:98:2d:0d:bd:4b:e8:e7:b3:4b:0e:06:06:d9:
8c:55:1c:e3:93:ec:57:33:88:03:90:e0:c5:a8:0f:20:e8:5e:
5d:fb:66:6a:e8:55:3f:7f:20:49:2b:b4:41:64:77:c3:a4:9c:
0c:b7:e3:3a:c3:dd:8c:17:db:5f:87:34:d0:7d:14:7d:df:59:
64:82:cd:fe:f7:7e:e2:95:de:42:99:6e:28:95:e7:be:6d:c6:
99:01:a0:ce:35:23:52:8b:a8:2e:76:df:95:bd:ee:58:56:f8:
3b:3e:43:a6:76:16:bd:24:c5:b7:7a:88:5b:59:17:92:2a:40:
45:b6:04:05:72:b7:c7:c9:6d:8b:25:dd:1b:f8:78:b1:a3:dc:
46:4a:c5:81:f4:a7:bc:dd:ad:a0:75:98:19:f5:bf:54:21:05:
a0:08:e7:e5:fb:5f:db:f2:1b:54:4a:0b:57:8b:59:67:e2:e2:
13:86:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:40 2025 by rpki-client