Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: +u1b/QcSZJicTZxcwoSd01C5jG8AXAh/VnPvHRHbizg=
Subject key identifier: D1:5D:E9:9E:BE:36:38:7B:32:82:D8:22:4F:75:CC:81:D4:9D:E3:6B
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 0198D54E0C4FE12DABFCB8648551C199A9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0B95
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: vcczDyedw1qYaq2wmD0rw993OSnSke5qzn6ZXAQbqIM=)
2: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (hash: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0c:4f:e1:2d:ab:fc:b8:64:85:51:c1:99:a9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=d15de99ebe36387b3282d8224f75cc81d49de36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8e:5f:6f:e4:45:ce:92:29:43:7d:9f:fb:e1:
0c:be:01:4c:98:5b:dd:46:20:f3:1e:29:1f:a2:f6:
f7:ba:1e:5c:e9:ff:e1:df:c8:e7:68:bc:4b:bb:af:
10:fc:2b:e3:ad:9b:1f:a3:5e:68:a1:ee:99:ff:e0:
42:d5:5f:c0:2b:66:be:44:21:51:11:e5:67:6f:dd:
e1:d6:de:4a:bd:b4:e2:3e:b7:4a:fe:24:fd:72:09:
19:cc:a7:73:a7:34:89:c4:42:a7:2e:d7:ee:5c:be:
0a:52:47:ee:05:d2:8b:aa:6f:71:94:3b:96:91:e7:
c1:50:62:13:78:08:0e:0c:a0:22:4e:26:97:cd:af:
48:b3:ff:c3:fd:e9:5e:d1:2e:26:47:a5:f9:9f:c6:
b6:63:72:e8:a8:b0:fb:7a:c3:13:a9:fb:0d:a0:a1:
7d:bd:46:47:ca:bc:72:07:55:7a:0b:57:18:23:02:
88:ea:82:e3:b7:fa:a0:fc:ef:3d:46:67:7c:03:e4:
2b:8b:96:4f:6a:8c:ad:2d:35:04:c0:6a:16:1f:d7:
af:78:5b:4c:4e:a5:f8:ef:b1:dc:90:8d:94:9a:9d:
af:85:b0:98:e3:fb:a9:c2:65:40:82:d6:a2:88:d8:
fb:5d:3b:6d:ff:4a:ca:73:f2:5d:a0:5b:41:5b:87:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5D:E9:9E:BE:36:38:7B:32:82:D8:22:4F:75:CC:81:D4:9D:E3:6B
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bf:b9:f3:f7:97:b1:8e:20:dc:d9:28:f9:a7:b9:29:5d:9e:
90:a3:e2:2d:1e:f4:6b:ea:30:cb:e7:1d:ee:25:a3:ae:b1:28:
d7:7d:b4:3d:f7:03:1a:fb:67:74:20:41:e5:d3:b6:8a:45:27:
6a:77:43:52:39:d0:93:b6:cb:2f:d2:0f:af:d1:49:b0:d5:75:
b3:78:9d:3e:27:cd:60:90:74:b3:7e:99:25:75:e8:31:9c:63:
bd:96:94:34:40:df:a6:35:70:9f:81:eb:8f:89:09:e0:0f:36:
d4:f8:b5:41:d6:96:d9:71:b7:60:dc:c1:fc:de:b9:1f:31:15:
82:ea:cf:2a:d5:3e:a7:f2:bf:75:4b:cb:20:e6:dc:6c:be:f8:
f4:e6:39:b8:99:d2:b8:f6:c2:17:d1:38:37:84:65:d2:68:7c:
56:05:fb:c2:f2:ec:50:80:8c:7e:39:da:57:c9:64:ca:ec:ab:
ae:38:72:7e:b7:40:b3:18:0d:9e:d9:02:fe:ae:af:b9:1c:0b:
c7:3e:83:fa:72:ce:10:93:c8:4a:a0:ca:21:27:99:17:60:45:
20:b3:dc:56:00:d4:9a:73:e7:f8:fa:b7:ba:c8:d8:5d:b1:cb:
5c:d8:57:39:a4:65:98:a1:40:da:78:be:f0:c1:81:59:e5:61:
b7:32:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:08 2025 by rpki-client