Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier: PD844ISHG5IZjW6pVgfEQdJxOypgH8ElghrNoo18Y70=
Subject key identifier: 3C:20:C6:EF:DD:55:3D:27:14:39:18:98:76:0A:D7:F7:3E:CD:7E:2B
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 01984966AB298D9787740D35E6A04D23A076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number: 15DA
Signing time: Sun 27 Jul 2025 01:02:01 +0000
Manifest this update: Sun 27 Jul 2025 01:02:01 +0000
Manifest next update: Mon 28 Jul 2025 01:02:01 +0000
Files and hashes: 1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=)
2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: azZ3uBIpLaio/K/0mLg37JmiQjEWUv1GMcCz3VDRmvE=)
3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ab:29:8d:97:87:74:0d:35:e6:a0:4d:23:a0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Jul 27 01:02:01 2025 GMT
Not After : Jul 28 01:02:01 2025 GMT
Subject: CN=3c20c6efdd553d2714391898760ad7f73ecd7e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:27:64:8c:8c:10:e4:d8:35:0d:f4:11:8e:
27:94:3e:ec:49:3b:b5:d2:e5:a9:87:5c:6e:15:dc:
bf:20:2c:f3:51:07:04:81:8a:52:ac:9c:66:e0:b7:
e9:6b:d8:5b:58:ba:63:f4:3c:7b:f4:12:10:b1:81:
d5:80:0f:91:c8:49:c0:6f:53:df:c0:e1:7f:02:ac:
74:3f:83:a8:90:da:72:5a:b0:e1:06:67:12:e5:50:
4d:fa:5c:52:1c:8d:69:c8:3c:55:a5:90:33:4c:7d:
ae:cc:05:e7:6b:ba:ff:9b:d3:b3:68:c6:f7:b9:1a:
e3:f6:f5:f5:4e:6e:c5:fc:17:b5:d4:99:46:50:40:
42:d6:96:ae:70:a6:39:ef:cd:10:b0:77:6c:59:66:
d0:c8:ab:cc:75:83:d1:94:d8:fc:bf:2b:4b:db:b9:
a2:e8:4f:04:74:49:6c:e7:f2:91:50:05:9c:ff:b5:
47:88:a5:c3:0d:5f:43:aa:8a:84:9f:2d:2d:d3:06:
3f:f5:50:5b:a3:a8:50:d8:93:d3:66:0e:28:82:10:
35:ee:c0:3a:1a:d7:e8:40:df:f7:4b:de:df:ad:53:
e6:67:07:de:84:d5:33:17:3f:bb:ee:20:96:d5:5e:
88:fb:26:d5:39:da:93:8b:04:60:43:94:cb:dd:13:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:20:C6:EF:DD:55:3D:27:14:39:18:98:76:0A:D7:F7:3E:CD:7E:2B
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1d:e7:11:ad:96:ec:c4:94:9c:28:c7:b0:bc:61:73:6f:7e:
9b:65:43:2d:59:9d:e6:c3:99:cc:39:e2:4a:a7:bc:56:c1:f1:
2d:a1:b9:d0:a7:45:46:ed:a9:1b:ae:37:6c:f4:84:7c:2c:91:
55:9b:d9:78:06:34:e2:1c:ea:bb:20:30:61:7c:2b:53:e7:ba:
35:af:6c:9a:7e:49:e8:3b:fc:2b:d7:5a:34:f0:df:33:4c:93:
03:6a:99:3f:06:f4:c3:c3:d0:21:31:71:fb:11:08:01:51:ef:
10:60:48:63:29:79:23:d5:89:a1:78:cd:fd:46:0f:be:bd:8b:
c1:3b:2d:43:1f:55:4f:db:e4:51:c8:70:3a:fb:24:d4:89:b8:
5a:b4:df:66:68:64:27:46:c7:65:da:ea:c2:bd:6f:6f:df:f4:
5a:89:90:3f:4a:32:8a:65:55:19:32:9e:f2:ff:80:af:51:23:
78:58:f3:60:16:fc:ba:08:dc:bb:fa:1e:3a:5e:cf:d7:25:a0:
74:eb:54:bc:75:95:fe:62:3d:93:76:72:32:1a:a9:30:9e:30:
3e:48:18:74:4d:21:93:3a:fd:db:86:af:67:de:37:9c:aa:78:
5b:16:e1:92:7f:b5:88:e2:00:27:ff:30:7c:56:7a:27:50:05:
fb:18:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:56 2025 by rpki-client