Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier: Tek18V8SXV+xQ9jI5kRZwpTHjxLfRq3z/lb6NAvAps4=
Subject key identifier: 20:21:0C:E2:7A:11:11:23:1B:3F:5D:73:E5:B1:22:21:74:3F:ED:01
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 0199FBEB5D9FD4C44F8D49BE32AF8CD46BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number: 16BB
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=)
2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: OJmgqexqCmob1DmHZHy6ZsTI3unkw7AoyeFUpxrbNsA=)
3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5d:9f:d4:c4:4f:8d:49:be:32:af:8c:d4:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=20210ce27a1111231b3f5d73e5b12221743fed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:de:67:39:5f:7a:55:9b:ba:d2:f3:48:d2:
6c:28:38:e3:c1:d8:24:88:4f:f9:4a:78:70:61:19:
fc:b4:0d:f6:cb:d9:d1:ef:98:96:b9:8f:74:f0:41:
55:4c:fb:3e:50:e1:03:fe:21:08:5c:68:58:8d:9a:
80:ae:de:9e:f8:72:dc:a7:25:3e:d4:c5:8b:2c:45:
d5:86:b1:f8:ea:1f:78:17:cb:6d:d0:d2:5c:64:eb:
8d:ff:fa:c4:1c:5b:fe:ab:f2:ac:7c:55:8e:27:81:
f8:23:a0:cd:c1:08:85:da:0d:e6:5e:fb:42:1f:4a:
20:6b:ba:51:20:d8:a4:6c:9e:42:57:17:2c:c7:3a:
88:d0:38:0c:e7:c6:29:ea:2e:2e:a1:41:81:c8:0b:
1f:49:bd:c6:a0:dd:68:8d:1f:1e:ea:e8:47:aa:cb:
ff:59:43:ef:80:63:07:3e:a8:5b:cd:bf:87:e7:37:
ba:64:61:c2:82:71:1e:65:26:78:fe:0e:ba:0a:4c:
5b:78:2a:85:b1:f8:a0:36:4c:e9:f7:80:b6:89:e0:
da:8c:b0:84:56:4f:96:41:02:49:ff:53:47:c8:b1:
fb:ce:1d:93:e3:c9:c3:33:44:80:af:69:db:7c:01:
6e:6d:4f:1a:04:28:58:ee:a2:a2:14:d5:9b:9d:75:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:0C:E2:7A:11:11:23:1B:3F:5D:73:E5:B1:22:21:74:3F:ED:01
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:98:fc:c0:bf:aa:a4:46:52:e5:30:4c:d2:f7:09:cc:2b:2b:
7f:1c:8a:b5:07:bc:79:e7:dc:cc:7b:c2:d7:d6:d8:e7:bd:08:
07:05:27:37:cd:1b:82:12:43:23:92:a1:fb:18:ba:14:40:3d:
c7:a0:a0:36:6a:ba:68:fd:a1:73:a9:77:25:fc:f5:bf:92:5a:
19:8e:3a:16:e5:4c:68:56:f5:1d:f5:87:d1:8e:9e:79:4e:21:
b5:90:6a:61:26:04:97:d9:f2:7b:7e:6a:73:a2:08:d3:94:04:
62:0b:84:14:4b:10:a0:70:ef:e2:f5:5c:15:d7:53:39:47:48:
4c:32:4d:49:1e:46:10:6a:6e:4e:5e:09:f5:50:f2:c6:29:3d:
5d:f9:32:59:68:5b:94:f0:56:af:81:1b:3d:8f:07:fa:c8:85:
ed:c6:af:dd:8e:61:6c:06:35:da:96:a3:30:85:36:ca:ca:3e:
95:76:45:82:1a:0d:fd:2e:1f:e4:8f:e5:e8:d7:95:f1:48:44:
00:2d:79:df:1e:a6:96:e2:ac:48:65:c9:50:9c:ce:7c:70:86:
b9:ea:30:5b:1c:8f:23:bb:ed:54:36:c1:94:06:08:25:70:18:
c5:a9:8a:24:e3:f4:b3:9f:5e:3e:5e:34:7e:d2:43:9f:1e:87:
d4:a9:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:21 2025 by rpki-client