Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: eRA/QngUTXRfMvSZ4wWoQOYqEPaB8/SIweeZR01+Y2Y=
Subject key identifier: 1A:17:DB:2C:C6:38:FB:AA:D6:64:C2:01:02:63:C0:8A:3E:E4:0B:7D
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 0197553569F47F05B4C257E159DE45262657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 15:00:53 +0000
Manifest this update: Mon 09 Jun 2025 15:00:53 +0000
Manifest next update: Tue 10 Jun 2025 15:00:53 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: U8Nt5yP2xi5QlrROPWq+gflLK1gIDrMWad1iXCeCGQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:69:f4:7f:05:b4:c2:57:e1:59:de:45:26:26:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Jun 9 15:00:53 2025 GMT
Not After : Jun 10 15:00:53 2025 GMT
Subject: CN=1a17db2cc638fbaad664c2010263c08a3ee40b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:56:d9:b1:3d:12:45:17:12:9d:f1:2e:f3:
47:29:26:0a:75:c6:b6:02:27:cf:ad:55:f1:61:51:
db:55:c0:53:49:af:bd:94:f0:6b:5d:ec:90:77:d8:
0f:b3:6b:89:6b:aa:bc:51:d8:1f:8a:1d:10:e9:5a:
59:0b:41:68:13:d9:23:6d:1f:2d:65:4e:d7:67:ad:
b8:46:57:d6:2b:29:c9:2b:6f:20:57:b5:fe:01:fc:
5a:57:55:b2:ef:ab:5a:98:5f:b0:71:2b:d4:53:84:
ea:0f:d1:fe:2a:64:9f:e2:42:1d:1b:17:f5:57:ce:
90:e3:cb:c1:b4:fb:aa:9a:06:e0:6e:cd:1c:c6:99:
0f:d4:04:8c:bd:87:94:bf:91:c8:65:36:b3:db:14:
1c:96:76:5b:36:9d:9a:48:d1:d1:de:7a:fe:03:42:
57:fd:5e:7f:55:de:11:2d:81:2a:58:05:36:4a:4c:
cf:ea:da:cf:8c:24:7b:d2:a4:d7:90:e8:43:8b:44:
09:b4:11:60:a9:47:64:e8:dd:8f:cc:f5:6b:d8:1e:
1a:fa:8c:18:bb:ad:b3:3e:76:77:8c:e0:3b:10:3c:
93:4f:22:89:83:cc:7e:40:24:26:02:92:97:85:51:
64:ce:e0:38:41:fe:b8:05:52:17:58:4d:eb:a9:4a:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:17:DB:2C:C6:38:FB:AA:D6:64:C2:01:02:63:C0:8A:3E:E4:0B:7D
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8c:60:f8:23:d9:f0:3d:9b:e6:74:57:45:6f:74:40:a3:52:
ce:fd:66:9b:af:bb:17:2b:e7:da:9a:a0:0a:be:88:b6:da:ca:
2d:b5:30:ed:41:69:9f:78:94:94:9b:a6:96:04:7f:78:46:d3:
d0:c3:a9:f9:64:34:2d:9a:06:15:41:2c:42:d7:be:86:3b:9d:
57:a9:7f:4c:a2:ff:b2:91:0e:38:37:ff:bb:a5:ce:65:29:c4:
d7:61:b1:be:29:6c:79:40:6a:eb:2c:f8:a5:69:14:d4:4b:96:
54:e0:2d:72:6c:ed:ca:6a:42:90:ea:7d:83:21:67:a2:29:b1:
61:92:5a:8c:26:0c:b7:de:d3:b7:ed:52:f8:df:f7:fd:3f:6c:
12:4d:3d:54:3f:fc:d8:6f:8f:b5:ba:38:0e:0c:18:05:86:47:
f1:d2:88:4f:b8:1b:6d:f3:36:f0:c7:ac:17:5b:da:a8:8a:3f:
2f:94:ab:ab:72:dd:77:39:31:7a:fe:f0:a9:97:13:c1:60:59:
d2:00:2b:f8:12:6d:28:c6:7a:14:fc:fc:f0:a7:eb:e5:53:a3:
a4:16:4f:b3:c2:19:fd:7f:b2:ff:67:d1:d7:bd:29:10:3c:81:
f4:16:33:28:1e:7d:9d:45:8c:b6:a3:c5:42:e6:a4:b0:be:bd:
98:9f:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:29:50 2025 by rpki-client