Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: Emx7RefmszleMZihA0XBpruy+Rt/9JRA5tTkqp/ZX+4=
Subject key identifier: 27:E8:57:26:85:EC:C6:DB:89:DC:44:A1:AE:1B:FB:DB:7C:FD:C9:BE
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 01984A41803B7ACB5A5DD44BAD020E4BA246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0B4D
Signing time: Sun 27 Jul 2025 05:01:03 +0000
Manifest this update: Sun 27 Jul 2025 05:01:03 +0000
Manifest next update: Mon 28 Jul 2025 05:01:03 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: S9y7sJnXDLAJPX0uTKcfPkY0f1RjywpMNK9IXOXUaCA=)
2: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (hash: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:80:3b:7a:cb:5a:5d:d4:4b:ad:02:0e:4b:a2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Jul 27 05:01:03 2025 GMT
Not After : Jul 28 05:01:03 2025 GMT
Subject: CN=27e8572685ecc6db89dc44a1ae1bfbdb7cfdc9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:55:4a:84:8b:a7:73:3b:24:0c:54:cb:e7:
2f:ec:9c:53:c4:21:ef:20:86:a4:48:d2:c3:72:0b:
39:23:65:7e:da:d5:8b:93:78:d9:72:9b:b3:a4:87:
6b:52:32:01:e9:d6:a6:c8:9a:fa:32:ae:77:d8:f6:
45:06:bb:d4:0f:37:7a:f4:16:4b:dc:5b:66:d8:2b:
2e:50:85:f2:a8:ca:87:72:a7:65:1b:9d:74:df:a3:
9f:74:2c:54:b7:e5:2c:28:a5:69:0a:2c:a4:71:d6:
21:d1:53:59:e3:4d:93:29:d6:64:a9:16:32:06:67:
b8:1f:09:c5:6b:79:be:d2:c8:e7:5c:f9:6a:1c:69:
4f:00:f7:48:b1:31:19:a7:59:cb:44:a7:10:69:9f:
42:0f:13:ce:6a:7a:28:8f:f2:65:17:1c:5e:b2:b2:
9e:46:ae:71:04:30:2f:e9:fb:a0:de:a4:7f:dd:8c:
78:9e:e6:0a:d6:86:c3:f1:7b:64:a4:be:c1:39:e0:
b9:54:e3:34:8b:38:48:88:b3:57:c7:af:a0:b0:05:
87:f8:a3:68:5f:97:73:78:75:00:9c:65:64:89:4d:
89:0e:41:86:4f:df:78:22:87:9c:9f:f7:56:5a:cb:
4c:80:52:30:fb:b0:10:50:ea:32:42:87:6d:d5:93:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E8:57:26:85:EC:C6:DB:89:DC:44:A1:AE:1B:FB:DB:7C:FD:C9:BE
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ee:d4:6f:c8:b0:d6:6a:b4:37:02:ce:f0:c7:86:ce:f0:06:
d0:04:33:3b:bc:6b:3c:fe:40:4d:c9:b2:06:8e:e1:04:76:2c:
88:99:00:9d:fa:5b:63:10:fd:9d:c5:81:af:68:ec:69:f4:0f:
1a:57:8c:6e:63:ae:a2:f4:a2:7c:94:cc:6b:5f:d5:0d:5e:ac:
16:7a:f2:c5:0a:e4:d0:2e:d0:56:d4:e6:c3:9c:14:d6:8b:a4:
4f:f3:11:3e:d7:01:eb:52:38:d3:3e:63:d8:87:0d:04:34:88:
d0:4e:c0:91:c6:41:bf:2e:92:bb:15:0a:05:23:dc:fe:5d:1e:
94:50:d2:44:39:f1:6c:7c:e5:b9:58:47:41:41:d2:01:a3:a7:
fd:a0:46:89:eb:c2:26:66:ed:17:f8:6c:f8:2a:60:59:3d:27:
4e:ae:3b:73:10:5b:40:3c:d6:1f:ba:32:81:00:03:15:63:ed:
5a:2b:d4:a9:44:52:66:8b:13:d2:5b:08:91:f7:ce:63:17:87:
07:18:de:d7:66:42:9c:ae:aa:63:1d:85:35:e8:60:23:7d:5f:
04:7e:c4:7d:65:0c:e0:2e:d0:f7:8b:09:f7:a1:93:83:13:2d:
71:e9:19:a4:27:2e:5e:2c:a0:35:90:8e:5a:3b:b9:7a:51:ba:
54:4f:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:19 2025 by rpki-client