Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: Bro63Kc708Z/JKGRSAeienMMKSZ+wXMkS2uCE7y/uKk=
Subject key identifier: 36:8F:C9:1D:34:23:89:31:2D:0E:CE:1E:EA:E0:AA:D6:E4:86:E7:B3
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 0197BF35F51D4143D5746723102663631BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0B05
Signing time: Mon 30 Jun 2025 05:01:13 +0000
Manifest this update: Mon 30 Jun 2025 05:01:13 +0000
Manifest next update: Tue 01 Jul 2025 05:01:13 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: fNOxMD5LDMkGD8e5cyYtD7jYnySiSh5aT+qBom7Il3Q=)
2: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (hash: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:35:f5:1d:41:43:d5:74:67:23:10:26:63:63:1b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Jun 30 05:01:13 2025 GMT
Not After : Jul 1 05:01:13 2025 GMT
Subject: CN=368fc91d342389312d0ece1eeae0aad6e486e7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:1a:c6:10:ff:33:da:26:8b:d1:56:f7:73:
b2:1c:31:3c:84:36:b5:0c:f9:c4:bc:1b:d2:f8:81:
bc:d8:3e:df:a6:6a:fa:1c:b4:d6:6a:4a:be:64:ea:
71:1d:3a:03:53:e9:59:8d:f8:39:c2:6b:d3:f6:e1:
e1:4a:71:9c:8f:71:c2:b9:ef:8e:fe:e1:ca:36:77:
81:39:29:34:54:2b:b3:1f:5e:25:dc:14:02:9f:13:
71:79:32:85:3d:40:a2:b5:64:7c:3e:0d:57:72:f3:
76:0c:95:2a:70:5c:bf:bb:2f:17:31:e0:6c:0a:aa:
23:10:21:d5:17:34:84:b1:88:e7:da:e8:33:e8:78:
5f:36:8f:68:8e:38:46:07:8f:e6:e6:97:a0:53:e1:
6c:23:31:f3:13:b1:76:42:1d:3c:4f:09:b1:af:40:
8e:ed:62:0b:11:f5:06:b1:e8:4f:46:d6:ef:20:b2:
ed:b4:2b:16:f0:93:61:8b:81:a9:7c:77:47:64:47:
45:00:35:eb:d6:2d:01:fd:88:02:00:72:30:4c:cb:
92:f0:f4:9b:5c:a0:0c:b6:24:9b:2d:1f:b3:e4:d7:
16:85:45:32:fe:a0:9e:c7:c4:a2:73:92:57:4b:df:
c3:aa:8d:95:c5:d4:1e:fc:6a:26:fc:08:9f:37:58:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:C9:1D:34:23:89:31:2D:0E:CE:1E:EA:E0:AA:D6:E4:86:E7:B3
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a1:53:c8:98:52:34:39:e8:1e:5d:5e:92:7b:45:90:9a:27:
25:81:1d:7a:48:fb:54:b5:14:fd:f5:a1:c8:f1:06:8c:e0:cf:
e8:7a:14:79:ab:bd:a5:b4:05:15:93:15:4e:cd:00:8b:f1:82:
2b:43:2d:80:39:a3:c7:65:b2:71:9d:e0:8f:3d:8f:fb:7b:68:
25:75:c2:b1:92:e3:ae:5e:7c:98:82:4f:3d:a1:38:02:03:07:
73:59:03:8d:34:64:b7:80:53:20:f0:2a:f2:58:5e:b5:e4:e9:
ae:e1:ac:62:8c:92:e9:cd:2f:56:a2:8e:42:04:97:31:a0:34:
4d:ee:36:49:58:30:1a:54:9a:ec:b0:55:6e:92:7d:3f:12:82:
33:a4:84:df:77:46:45:69:2e:b4:35:76:b1:36:ab:82:0b:7a:
1b:04:be:38:82:7d:a7:17:4f:df:3b:fd:39:d9:b6:70:d9:84:
a8:77:91:d8:e5:43:2e:00:55:5f:31:4f:7a:cb:27:8d:e9:94:
ba:77:27:a3:e8:7d:a4:fa:42:98:15:cb:87:cb:a0:5c:a4:0c:
9b:9c:fc:8b:c4:94:3a:1b:8d:96:11:d6:b7:11:4c:d2:5b:d1:
46:68:a6:ec:d4:00:f9:05:38:dd:98:7f:bf:0b:ea:45:08:1c:
46:51:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:43:12 2025 by rpki-client