Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: D60+Jf1HhkmM2n2+uwl7Vd7HGUlktUd0EcwgWePuarE=
Subject key identifier: FA:0D:D5:3A:DE:A7:97:82:7F:62:28:7B:7B:03:F3:54:75:4E:C0:BE
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 0198D773810ECD567FE19D4575E41D6C6306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 15:02:07 +0000
Manifest this update: Sat 23 Aug 2025 15:02:07 +0000
Manifest next update: Sun 24 Aug 2025 15:02:07 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 1NrfZqNfQW6qT7Jt20U3gumidV6FcblsJRWlZSblNwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:81:0e:cd:56:7f:e1:9d:45:75:e4:1d:6c:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Aug 23 15:02:07 2025 GMT
Not After : Aug 24 15:02:07 2025 GMT
Subject: CN=fa0dd53adea797827f62287b7b03f354754ec0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:f9:a4:5c:7c:76:b0:17:a4:00:f4:1a:58:
31:12:50:60:b4:5c:c2:a2:55:c7:1d:9c:87:8f:61:
98:97:5c:c4:ef:97:78:99:67:cd:c8:7b:d0:24:c9:
c0:b3:02:08:d6:17:a4:ae:45:77:40:43:00:3d:90:
a8:be:f4:e2:85:12:4d:33:11:3e:b3:3a:4c:06:ad:
be:5f:5c:29:2f:a9:d8:a8:e9:2b:53:2a:21:e6:07:
a7:a9:81:53:15:5d:de:a3:a3:ad:82:da:ef:c0:db:
8f:61:2a:77:12:2b:9f:d6:e7:87:47:37:6f:0a:1d:
81:9b:bc:6e:e6:b8:8b:ef:a9:92:38:24:28:da:2e:
5f:48:47:86:ab:83:40:e2:5a:44:1c:e3:63:58:64:
0c:15:07:21:91:f6:50:3b:9c:ed:e9:47:c4:26:58:
69:37:02:d0:62:7e:1f:6a:3b:4c:ca:ea:10:8e:39:
09:3f:af:c5:9b:48:01:96:b0:49:69:06:3b:e7:4c:
82:45:2e:fa:9f:a5:33:54:cd:d4:24:e8:79:2e:5d:
d0:34:5d:e7:07:58:d3:ba:d4:9b:54:11:9a:e1:0b:
85:9a:b8:8c:59:89:ec:a8:86:a5:37:c4:50:89:bd:
9c:c5:09:11:e2:e7:cd:94:81:1d:1a:30:b3:c3:6a:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:D5:3A:DE:A7:97:82:7F:62:28:7B:7B:03:F3:54:75:4E:C0:BE
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:51:69:fb:2f:40:64:bb:60:5a:d2:50:10:a6:d4:49:1a:21:
1a:6f:c9:27:3c:67:68:29:53:16:9b:27:c4:d9:9b:6b:d1:75:
70:19:4c:eb:72:d0:ed:7f:2b:12:6d:f5:2a:6e:11:b7:a9:9a:
5f:32:31:ee:d8:16:0d:22:cf:62:a3:9d:d3:12:7e:00:14:54:
57:9e:53:f3:f4:ef:58:21:dc:49:72:42:02:29:bc:61:17:33:
6d:b8:7d:ff:6e:2d:c5:df:c8:b9:a0:ee:27:ae:2c:09:4f:98:
af:a2:4c:60:7b:81:1b:0e:55:a6:b7:5e:58:7f:72:30:06:2e:
74:cb:7b:02:52:60:d6:d4:e8:0b:fa:3f:db:1e:c9:82:66:05:
53:6a:b4:51:b4:ad:ad:fa:bd:41:f5:a7:e3:26:6a:dd:1e:f2:
3e:26:a8:ab:9a:b2:36:e5:51:43:b2:4f:5f:20:13:e2:dd:7b:
28:7d:47:48:ff:e2:68:3d:d0:d7:c6:eb:b8:a3:aa:18:e0:5b:
73:c3:8a:67:e3:1f:1f:0b:8d:d8:1e:06:76:ac:fb:8e:41:35:
ba:6a:67:4c:4d:07:6d:69:d1:94:f0:d1:f9:b1:ec:00:02:62:
56:f5:4c:a7:45:55:f5:1e:90:6d:cc:44:78:64:62:83:91:71:
86:25:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:44 2025 by rpki-client