Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: 9PZ0WRiVKdDu29l3GEP/TskOtKT/SII5jB86y8n2/C0=
Subject key identifier: B3:19:5A:02:DC:27:82:17:AC:0B:E1:65:9B:59:44:AA:0F:42:63:58
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 01974D451F0A1AFEA0BD22D2AF1C9519BE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0ACA
Signing time: Sun 08 Jun 2025 02:01:04 +0000
Manifest this update: Sun 08 Jun 2025 02:01:04 +0000
Manifest next update: Mon 09 Jun 2025 02:01:04 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: nPU8KhqRCUKQ5liZB6x7f/0d4ML0LVYPV27jHSOaDqo=)
2: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (hash: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:1f:0a:1a:fe:a0:bd:22:d2:af:1c:95:19:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Jun 8 02:01:04 2025 GMT
Not After : Jun 9 02:01:04 2025 GMT
Subject: CN=b3195a02dc278217ac0be1659b5944aa0f426358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:1d:fa:07:86:c0:08:b3:07:f2:e8:51:63:
9c:af:31:f7:b6:8f:c5:9d:1b:48:a2:ab:b4:ee:56:
a4:7f:55:99:0c:a1:90:fc:5f:f9:68:8c:bb:ad:ba:
5f:69:bd:fc:2c:74:62:12:dc:e8:c4:c9:1a:d1:61:
c0:28:76:c2:7b:0f:9d:54:2b:85:77:da:7f:98:68:
85:e8:fa:ba:69:ef:2e:38:76:ab:9d:10:10:8f:e6:
2c:c3:07:77:bd:93:04:4c:fa:ea:45:9f:1f:d1:1b:
5d:f3:62:6c:34:ba:e2:9a:4c:54:65:71:a1:51:76:
ee:41:63:f0:20:62:37:b6:73:a7:c2:83:d3:ba:40:
cc:2b:57:31:04:60:a1:eb:ec:8e:c8:f4:7a:89:3b:
50:9d:bb:2f:87:2b:45:74:00:2f:d0:a0:0f:5d:5d:
e9:4c:8b:7d:3c:75:39:e7:0b:32:94:52:6b:6b:2c:
ab:26:b9:9a:f9:d5:39:08:aa:a0:f5:f1:2d:3b:e5:
58:04:68:53:04:f5:b5:63:b7:65:b8:d7:8b:d7:18:
d9:ef:d8:4c:09:b2:be:d2:c5:2e:5f:8a:8b:f1:5d:
95:08:6a:9d:5c:0f:ef:e7:33:6c:21:02:82:53:7e:
7a:47:5e:6e:e3:06:d9:26:d3:a8:3b:22:2a:ed:b7:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:5A:02:DC:27:82:17:AC:0B:E1:65:9B:59:44:AA:0F:42:63:58
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:24:53:27:f4:89:84:f6:37:25:46:7d:47:46:a7:56:31:84:
b3:02:7a:7c:27:bd:f2:97:db:9c:58:cc:97:83:e9:20:b2:d5:
c6:44:b3:8f:e0:f7:bf:a7:0a:aa:59:96:bb:96:ae:04:d0:dd:
bf:71:1e:26:08:4f:d2:54:70:41:1b:c8:96:ca:1b:df:1a:69:
70:eb:2b:8e:e0:cc:2d:a5:ef:85:00:ba:08:f6:af:6c:82:66:
a5:56:6b:bf:7e:1b:d9:d5:6e:41:34:ec:b1:f9:3e:62:f8:1a:
55:8b:8a:7e:35:53:69:4e:e3:9e:14:c7:52:0e:00:04:2b:52:
c4:a1:e1:02:4d:14:58:77:6e:82:28:fa:3b:93:06:26:99:26:
dd:b5:5f:26:dc:45:6f:85:b7:61:d5:9b:81:81:44:71:8a:24:
03:49:39:2d:24:b9:5d:1e:fb:c1:83:12:fb:47:d2:bb:8d:cb:
72:f7:9a:f8:5e:00:c3:01:b3:1e:10:dd:71:ab:78:5a:ce:1a:
e9:ad:a2:90:6e:78:04:f5:21:1c:b8:c0:76:4b:88:f2:a4:02:
4c:e5:c8:66:cf:0d:c6:4b:23:cd:5a:0a:8e:67:2e:f4:d2:82:
65:ff:91:e7:c4:0b:3c:c8:1d:9a:17:40:37:37:93:44:5d:5f:
3c:01:c3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:12:59 2025 by rpki-client