Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: yvTO0YgQ+V3Qe7W4PeDjOlMQnTtLjBYlpwdfYnuGMao=
Subject key identifier: A3:3C:F9:2F:F8:1C:69:C8:22:7D:86:6F:F7:8D:3D:45:41:7E:38:F7
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 0199FEB4B68DD125C4E686BF2510DEBEAAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0C2F
Signing time: Sun 19 Oct 2025 23:01:20 +0000
Manifest this update: Sun 19 Oct 2025 23:01:20 +0000
Manifest next update: Mon 20 Oct 2025 23:01:20 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: T2PSr3J2mrF6Hy6WXi+7/P+v7qIi8z/BMNnkM4vVWlU=)
2: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (hash: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:b6:8d:d1:25:c4:e6:86:bf:25:10:de:be:aa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Oct 19 23:01:20 2025 GMT
Not After : Oct 20 23:01:20 2025 GMT
Subject: CN=a33cf92ff81c69c8227d866ff78d3d45417e38f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:09:be:96:43:b5:5b:5f:e0:88:7f:dd:76:
6f:f7:68:7a:33:15:a4:2d:4e:1a:22:5e:76:db:98:
74:03:64:53:d3:88:4a:fb:bc:06:05:6b:a8:66:c2:
1f:2e:50:4f:34:d6:7f:1f:a1:cf:70:ae:9c:b8:51:
e8:5c:12:b5:4e:90:07:d5:69:76:11:db:a6:65:0e:
6f:7b:52:c0:a6:88:34:a2:61:4f:c7:39:60:0a:0b:
4b:3a:51:52:87:7e:2a:33:9d:43:cb:ec:ac:85:78:
42:cc:ef:9d:0c:71:c5:b3:55:ed:45:f4:54:ab:ae:
71:0b:8a:ff:23:3e:81:cf:03:7b:27:e2:5b:74:78:
b5:24:06:5f:01:d6:16:ac:f9:f7:cb:35:c9:78:d6:
cb:d5:ef:ed:02:a9:20:d1:23:ea:22:c1:4f:f7:d1:
0d:be:43:c8:c8:12:1d:74:a2:46:69:db:49:c7:6f:
89:c4:b4:f6:cc:46:05:54:88:c2:e2:58:78:ad:71:
93:ad:61:01:fb:60:04:16:9d:ff:3d:c6:75:9e:61:
2a:ae:03:e5:f8:76:14:25:96:8a:ea:50:b8:b9:4d:
2f:f7:90:47:83:fa:1d:bf:a3:de:26:e3:a5:c4:cf:
b7:47:06:96:50:0b:d0:e6:83:69:6c:06:37:d9:32:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:F9:2F:F8:1C:69:C8:22:7D:86:6F:F7:8D:3D:45:41:7E:38:F7
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:89:d1:5f:37:df:ac:ea:31:cf:19:82:01:75:a7:20:09:
bb:9a:d0:c0:39:a7:6d:e4:53:0d:7f:39:0b:e8:aa:e9:f0:a0:
bf:3f:1a:06:78:9c:d6:40:9f:71:30:2d:be:2c:25:01:0b:f1:
c8:ab:30:a4:a3:da:83:71:43:e5:42:5e:98:f6:b7:9e:81:52:
ee:34:55:bd:ba:38:31:c8:d2:1c:7e:1e:ad:be:c8:91:a2:70:
5f:c1:2a:a8:96:fa:7b:3d:f5:44:f5:d2:59:7b:1c:4f:f6:bc:
93:8b:b4:1f:a7:ce:88:af:ee:65:f4:38:a9:c9:07:1e:93:ac:
11:1c:ba:7c:03:f2:a5:79:c4:5f:d4:fb:0e:53:99:5d:3e:d8:
aa:06:b2:86:68:68:04:e3:51:fd:c4:ae:f3:74:a9:89:0d:ba:
b6:22:63:ab:27:cf:58:11:8a:9a:2c:d8:04:8a:a1:b6:7b:81:
56:e9:d4:c0:ca:43:61:04:f7:1c:a3:7c:cf:b0:e4:5b:84:f9:
37:2b:49:47:7e:0b:3c:12:23:f6:b7:6b:24:b4:92:f7:16:30:
d3:28:7d:f4:3e:85:16:b7:f9:09:f3:2d:61:01:2c:5c:9e:89:
99:fa:b8:af:3d:5b:9c:10:f9:2a:77:3e:ad:d9:19:f5:50:47:
f3:7c:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:10:59 2025 by rpki-client