Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier: 3uHePEeQC6yQNZ49YfLHNyeLwkRl7QEmJ99dxTDkR9Q=
Subject key identifier: AF:08:E3:AA:4B:25:61:90:DF:65:F9:F8:39:05:98:91:76:B2:95:7A
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 0197B6A16823FEEAAB2359B61589456647FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number: 158E
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=)
2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: EizIdYn61nc7IMJNhutp8uVO6d9Drt8jqvzHPQEe79Y=)
3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:68:23:fe:ea:ab:23:59:b6:15:89:45:66:47:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=af08e3aa4b256190df65f9f83905989176b2957a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:cd:7b:92:59:b2:e7:29:34:72:7e:c7:90:
5d:27:13:52:e8:8d:0b:06:71:73:56:6b:fa:8a:24:
00:af:e1:5f:46:fe:7a:c7:05:d0:a6:d3:64:a3:9b:
d8:96:58:bb:05:46:87:5c:0c:05:7d:08:1e:44:f3:
16:60:00:a6:dc:1a:3f:56:e9:17:93:b8:90:5f:8d:
6e:ab:6e:57:0a:9d:7a:df:7a:af:b1:ff:8b:be:6b:
84:76:3a:e4:02:19:8b:63:dd:a9:63:64:7c:a2:d9:
72:79:97:fd:69:78:be:3b:7c:d6:c5:fa:ca:ac:53:
af:bd:3b:85:c7:57:d7:ae:74:93:e0:85:95:06:1d:
42:6b:4e:ec:10:1f:bd:7c:ef:ca:7d:b0:da:08:13:
fd:6a:b1:98:8b:d9:79:98:1b:71:bc:0f:f5:2b:10:
ab:fa:2c:7b:26:c8:a5:bf:fd:17:8b:49:b5:64:ec:
8c:6b:bd:d2:cf:42:fb:7f:db:51:09:4f:84:87:63:
75:bb:0d:2f:97:e0:da:39:53:23:b1:09:23:60:54:
44:e3:f3:cb:29:e2:5d:83:b0:8c:d3:af:6b:52:d3:
fe:25:ce:fa:fd:8c:a3:30:27:cd:41:8c:93:3b:6d:
7a:d0:a1:64:a9:67:96:61:c5:8d:55:66:a2:26:4d:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:E3:AA:4B:25:61:90:DF:65:F9:F8:39:05:98:91:76:B2:95:7A
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0e:ae:1f:74:6f:11:8e:ea:4c:8a:c7:be:e1:bb:19:bd:60:
72:89:56:c5:bc:5b:4d:6d:1c:1d:fb:7c:2b:1a:dc:d2:68:3b:
26:1a:0f:3b:18:ab:c9:14:c5:bf:15:ae:cc:a6:da:f4:78:db:
47:6b:d4:f6:79:3f:54:10:6d:11:13:da:73:63:80:95:72:1b:
5f:d5:65:aa:94:66:8c:e4:b5:36:82:25:81:0b:ca:fd:5a:d9:
f7:e1:7f:7a:d1:03:70:57:27:1b:e5:c3:5c:a3:74:6a:0c:74:
d5:65:66:df:24:69:f9:21:00:81:3a:05:18:72:76:59:d6:f4:
3c:e5:a4:f8:2b:a6:ca:61:7f:fc:54:58:88:17:fb:92:c1:05:
a0:b3:e2:83:39:70:41:91:c7:06:3e:89:d4:2f:0f:53:f2:a7:
38:c5:bc:06:61:22:39:27:ae:5b:4a:10:87:7b:7e:fc:45:2b:
a3:91:c9:c2:05:9b:df:98:b6:89:26:e2:09:2f:97:4e:cb:59:
90:a1:79:18:fa:3d:0c:34:21:37:29:4d:eb:9c:0f:ab:95:de:
e0:cb:75:1a:43:5c:28:02:95:36:2f:3d:f5:ba:8f:35:fb:c9:
3c:e8:b8:a4:3f:78:7b:1b:0f:c7:80:ca:64:62:53:bb:4a:67:
51:eb:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:03 2025 by rpki-client