Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier: H9Ki/87sFUcSk0RxviEw3EBgq3vmXqkeHyFq7rm2NC0=
Subject key identifier: E3:01:22:9C:91:B1:93:8F:A6:8B:0F:26:82:58:40:49:E7:BC:AE:04
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 019A39B7C0282ADEA07B6727D5FE24C5F82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number: 16DB
Signing time: Fri 31 Oct 2025 10:02:14 +0000
Manifest this update: Fri 31 Oct 2025 10:02:14 +0000
Manifest next update: Sat 01 Nov 2025 10:02:14 +0000
Files and hashes: 1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=)
2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: VAadMJiHBS8fG0phmzRW2McH+VINDOkTaqTrEivON4Q=)
3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:b7:c0:28:2a:de:a0:7b:67:27:d5:fe:24:c5:f8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Oct 31 10:02:14 2025 GMT
Not After : Nov 1 10:02:14 2025 GMT
Subject: CN=e301229c91b1938fa68b0f2682584049e7bcae04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:bc:2d:3d:86:75:cf:7b:68:ca:a3:aa:62:
91:a9:15:5f:65:42:77:2a:f0:d5:07:aa:4b:a9:2d:
ce:51:32:0b:21:d0:85:3f:2a:7f:27:c5:b9:26:7e:
9f:ca:ed:93:97:a8:09:c2:bc:ae:ab:33:85:51:e2:
c5:d1:a1:d0:29:2d:7b:16:7b:81:b3:4e:c5:30:37:
07:61:54:8f:45:5e:f7:d9:80:42:68:da:0b:5c:b7:
ec:22:32:16:b1:2b:10:b2:f8:0c:3b:c3:7a:a0:39:
85:99:9a:a3:cd:10:65:f9:31:b2:24:aa:2d:70:cf:
c2:30:d4:8a:da:a3:f9:58:8d:6d:1d:a5:74:03:22:
b3:b6:d0:72:79:cb:58:cf:40:f7:f1:14:0d:26:87:
9c:d1:bb:d3:e1:f6:6e:9a:07:5c:9a:25:12:69:45:
21:45:59:0f:4e:24:84:9e:52:d8:61:76:e5:18:82:
c8:07:d7:6a:84:7b:e8:56:5c:65:c3:ef:a6:ac:51:
22:6a:88:3b:2e:2a:c8:ee:90:45:e7:39:c0:63:96:
58:94:3b:c7:96:6d:ff:e7:ea:dd:3f:41:c1:2c:5c:
7c:94:6c:f1:92:f3:90:4c:46:0b:89:94:89:db:95:
e4:79:3d:4c:2d:ca:5c:bf:bd:8c:7b:5e:c7:2f:f1:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:01:22:9C:91:B1:93:8F:A6:8B:0F:26:82:58:40:49:E7:BC:AE:04
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:38:a2:65:30:07:1e:18:65:07:f2:46:89:a9:2d:17:2e:db:
49:d0:6f:dd:ca:d7:5d:a1:47:45:86:09:c3:1b:95:dc:1a:e6:
71:f5:fc:c2:70:18:2a:02:6f:fd:70:09:27:25:8f:e9:07:bb:
5b:3c:0a:e8:6d:42:6d:c9:e3:2a:99:67:b5:b5:11:6a:ab:b9:
3c:ca:e9:50:c8:a6:f5:2a:4c:00:b6:bb:df:c4:6b:15:67:46:
b8:f0:8e:47:b0:63:da:37:ce:96:b5:5e:d0:7a:7e:fc:d7:7f:
0e:6e:66:de:6f:12:12:b8:67:71:ac:fc:50:89:a8:bd:b2:17:
6c:86:53:54:02:07:35:59:d4:37:f6:24:e4:4c:58:cc:03:21:
99:06:97:1b:7b:2e:9f:26:49:a9:bb:9e:d7:3a:a8:86:a2:c5:
f6:e8:71:0f:a6:37:b6:b8:ec:54:f2:0e:79:f5:05:26:c9:6e:
f3:eb:7e:00:93:58:6e:b2:18:c3:1e:36:1a:d5:bc:45:17:20:
aa:c2:8e:3d:1c:05:08:4e:ed:51:57:8d:8e:44:00:e5:be:e3:
4f:40:20:42:86:17:46:54:8f:9c:c1:3f:84:c8:7b:25:df:10:
5b:c8:a2:23:fb:aa:08:5d:86:84:e4:f8:a3:9e:f8:ab:03:19:
29:05:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:26:36 2025 by rpki-client