Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: 04ex1uDhpsrlPNf0mMGCBIR6Q9rEkk9ouv19LtdPHOU=
Subject key identifier: D1:FC:3D:19:E1:31:4A:26:E2:4F:F0:CE:DF:28:A6:2F:5D:F3:0D:00
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 0197CCF16E83E29C22EAE25C7083264A581F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 21:01:03 +0000
Manifest this update: Wed 02 Jul 2025 21:01:03 +0000
Manifest next update: Thu 03 Jul 2025 21:01:03 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 40EAQCooRgXLFA/liN7bD81pEeBc4Z6djdSQ+wjKF1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:6e:83:e2:9c:22:ea:e2:5c:70:83:26:4a:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Jul 2 21:01:03 2025 GMT
Not After : Jul 3 21:01:03 2025 GMT
Subject: CN=d1fc3d19e1314a26e24ff0cedf28a62f5df30d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:a3:4b:51:e0:36:50:4d:7d:ea:d3:82:59:
05:ac:4b:ee:86:ff:f5:0d:c3:e1:62:bc:1d:f8:48:
5f:ea:54:20:98:af:8d:98:b0:42:78:1f:e3:a3:5f:
69:75:8d:e3:af:7b:05:f6:a6:41:86:8d:b6:a8:f8:
31:85:c1:85:60:90:d6:cc:a6:81:49:fb:29:39:2c:
e5:f2:5a:ee:84:5c:ee:7c:1a:81:aa:d0:d3:15:eb:
8a:a8:f0:35:6c:e1:1f:06:fe:10:10:e2:32:c4:2b:
d5:6d:1f:b3:f0:a1:a3:89:1f:d8:6d:85:93:55:d7:
e2:0e:35:0a:a1:d5:59:f0:2d:37:7e:81:f0:fc:c4:
35:2e:42:c7:46:58:73:b5:66:e3:52:eb:a6:9d:9c:
cf:fa:6f:55:61:7e:7b:cb:97:74:ea:65:a9:10:95:
30:07:d2:cc:40:4d:69:5a:bf:d3:e8:2a:50:eb:67:
ad:69:fe:10:74:d3:ef:e1:71:b8:0e:3c:75:88:40:
60:e5:c2:e7:95:84:83:12:f2:4a:8e:f3:7c:7f:f2:
6f:b5:da:3f:00:24:82:85:84:cd:ff:2e:5a:0a:a6:
fa:21:b6:e7:64:3a:9f:04:af:d8:c8:4e:2b:81:a8:
d1:68:62:43:27:e8:2f:61:90:67:e1:dc:df:8a:0d:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:3D:19:E1:31:4A:26:E2:4F:F0:CE:DF:28:A6:2F:5D:F3:0D:00
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cc:4c:f8:59:7b:59:c4:f7:5f:7b:e5:07:2f:c8:6d:33:49:
cd:3b:cd:4d:d3:52:2f:c0:58:28:ca:26:ef:fb:c3:e3:71:62:
2f:69:5d:35:e3:4f:93:94:14:00:18:fe:ae:46:e6:d1:4e:15:
8c:e9:74:8e:e0:cd:3a:5f:c6:4e:00:dc:a8:bc:55:50:fc:51:
65:be:2b:eb:a2:9a:4d:ed:18:c2:65:11:59:be:03:93:e9:4b:
1c:b3:b6:d1:da:d6:2e:dd:90:96:29:14:c2:91:50:6c:7a:bb:
b0:a2:0e:c3:12:28:f6:15:78:b0:9d:58:c2:ca:94:c7:64:bc:
24:b4:5e:6e:08:fc:4e:95:58:9b:5f:60:6c:99:c7:4b:3c:ba:
b9:c4:b7:11:d6:57:44:1d:bd:d8:b3:52:75:0b:05:b8:05:b3:
9e:2e:07:c2:0a:92:5d:e5:a0:97:25:fd:f8:63:fc:b0:cb:5a:
31:cc:4b:e3:04:de:26:c8:c1:25:e2:21:ac:8c:82:ff:89:ba:
c1:78:0f:8a:43:f3:9a:86:dd:ab:fa:39:c2:5a:e5:35:e6:d5:
ad:cb:6c:20:7b:84:aa:3f:f8:32:7a:9d:ea:ba:09:23:c9:6c:
d1:f7:6d:8f:08:a0:6f:b7:fa:e3:1e:0e:fb:ef:5e:dd:0c:df:
78:bc:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:08:29 2025 by rpki-client