Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier: j5y1Af6iz9BZ3AuZLjlLYlO2NZAg8uSRYkiQbWzvq5M=
Subject key identifier: 05:BC:BA:DE:93:D8:45:7B:58:92:E5:2B:54:F2:3C:68:07:CB:C7:37
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 01967BA037CC05634D5A4196B907DAB88130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number: 14EA
Signing time: Mon 28 Apr 2025 09:00:19 +0000
Manifest this update: Mon 28 Apr 2025 09:00:19 +0000
Manifest next update: Tue 29 Apr 2025 09:00:19 +0000
Files and hashes: 1: NMSBGdXZ3nNbNM6HmAD11nbjUUc.roa (hash: 8ncSaAlvsGwgwEz4IVnirUboMfpzaj3h+0Dd6V+Vjp0=)
2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: EXvWsKcG4WNioj3MUzp3v1dfnWE8GDhgAhXkWwbQOmM=)
3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
4: sQhT4EcSgUdSOJf-IlcAVbhhanQ.roa (hash: yOHMgQvvnUGeXtEo1mVldnI757iV9L6oiBbCrHJFV5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:37:cc:05:63:4d:5a:41:96:b9:07:da:b8:81:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Apr 28 09:00:19 2025 GMT
Not After : Apr 29 09:00:19 2025 GMT
Subject: CN=05bcbade93d8457b5892e52b54f23c6807cbc737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:18:a3:e2:19:6c:92:5c:c0:13:1a:93:55:
63:12:d3:6f:53:34:fb:34:8a:e5:62:54:dc:83:5f:
fd:0c:5d:e7:fd:4b:7a:90:07:39:29:33:15:c5:48:
75:a4:79:a1:dc:38:9a:1f:06:46:c6:10:a4:4c:67:
92:ab:4b:fa:ba:cd:8a:0e:89:c8:1c:b2:69:7c:46:
5a:61:32:64:eb:3b:3b:ce:0b:37:17:69:ee:73:39:
79:b4:06:91:a1:7b:74:42:ae:8b:43:98:3f:27:f5:
a2:ff:27:32:c2:aa:0b:18:35:ac:a4:09:63:28:2b:
64:07:d5:74:20:14:4e:1c:33:ae:ad:8a:c5:20:73:
0c:7b:c6:de:07:fa:61:b4:44:45:cb:50:36:c0:8f:
0d:30:4f:0a:d0:90:80:3d:34:7b:29:85:63:4a:93:
7a:04:de:c8:58:6e:a3:fc:f2:cd:e8:f2:b4:cc:61:
43:6b:cd:2f:89:b2:d4:6b:74:3e:86:39:de:3b:1b:
ba:1b:52:6c:db:ab:73:cd:0b:4d:ba:51:06:28:1a:
8f:0a:83:11:9d:86:d9:df:89:16:93:bf:e7:48:71:
b4:02:c2:7c:0e:54:9e:25:94:60:91:5c:74:be:02:
a5:f6:2a:3e:a0:41:be:82:3d:8f:62:35:3f:20:d8:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:BA:DE:93:D8:45:7B:58:92:E5:2B:54:F2:3C:68:07:CB:C7:37
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c5:8b:38:fa:d6:93:b6:4a:ab:92:96:31:4c:f3:1e:0a:bf:
10:04:87:df:33:99:c4:0b:fb:b3:ab:28:4c:0e:32:8d:9c:e6:
c3:2e:ce:74:06:63:e5:14:65:0e:f9:7e:30:72:ac:c2:97:ee:
ef:66:c9:dc:d3:5a:8f:38:6e:54:c5:60:66:21:a5:6a:84:b9:
1d:ab:92:62:c2:4e:57:35:91:b5:b5:96:3c:45:9e:60:b9:41:
f1:dd:f7:e3:97:fd:3a:70:46:25:a0:f9:c5:47:1c:42:71:78:
85:b3:45:94:9f:35:c4:9c:76:50:85:4e:57:7b:b3:de:5f:95:
1b:0b:85:82:bf:35:60:7c:7e:6d:27:65:62:ad:ed:80:ae:7e:
e1:c2:1a:78:06:2a:6e:f2:a8:da:16:c9:a9:21:87:70:04:77:
ca:dd:b1:ec:66:e9:f2:77:b5:36:64:29:d6:35:99:4c:6f:c1:
9b:ed:17:5e:26:53:c0:41:c6:48:7f:36:81:2e:39:8a:8e:4e:
55:a0:d2:8b:17:11:41:d3:03:59:55:4c:07:4c:bf:36:8b:fa:
b6:55:81:6f:f9:ed:ed:80:66:06:40:eb:9a:f6:47:73:09:f0:
aa:cb:33:6a:71:72:e8:a4:56:3b:47:c8:c1:48:65:7a:9a:5d:
22:dc:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:56 2025 by rpki-client