Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: 0YtmLxdHItHb/TwIvUGiyuLG8/dbPwsufJzMcpZB0Sc=
Subject key identifier: 7B:A9:BC:61:62:D3:13:7A:21:C1:A0:6A:E8:70:4F:30:56:84:21:1D
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 0197591234011957D59060EA77A65C8175A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 09:00:54 +0000
Manifest this update: Tue 10 Jun 2025 09:00:54 +0000
Manifest next update: Wed 11 Jun 2025 09:00:54 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: N+1nDVhmumW20G0Yme/ZN4EUAkYnkwq34sprwJaexTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:34:01:19:57:d5:90:60:ea:77:a6:5c:81:75:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Jun 10 09:00:54 2025 GMT
Not After : Jun 11 09:00:54 2025 GMT
Subject: CN=7ba9bc6162d3137a21c1a06ae8704f305684211d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:4a:5d:b6:ba:05:c0:f7:c7:c0:48:2a:36:
42:6f:cc:38:2c:a9:59:94:57:05:d7:ff:a0:c4:12:
c1:97:b4:17:2c:48:ea:04:91:95:b7:62:c5:34:76:
4b:03:19:09:56:9e:cd:d8:c0:05:62:2b:98:17:95:
02:47:30:01:8c:22:51:fd:4f:3d:d6:3e:03:f2:f6:
cd:42:53:e8:a4:75:93:b2:74:7f:f7:d4:cb:c1:5e:
92:82:18:d6:e7:ba:ec:ff:8e:2b:4a:5a:f8:82:ad:
5f:87:44:fa:89:4b:e3:b6:6a:1e:e9:0d:b7:e0:73:
4e:e4:91:a6:b9:a3:3e:f8:22:f8:ae:35:2f:36:e7:
a2:dc:db:3b:80:9c:68:10:09:24:34:3f:d0:8e:e4:
39:61:23:bc:33:b5:b5:f8:f3:5f:59:e3:81:1a:ee:
8f:30:6f:70:a2:23:bc:ae:5b:0d:1c:75:dc:13:28:
27:a1:f9:04:9b:af:47:de:1f:7e:85:89:80:ce:46:
03:ef:0f:b0:26:c9:e9:9f:3b:b8:2c:3a:3f:45:cc:
f0:aa:30:a5:46:02:c9:88:a1:ae:83:3d:6d:2c:38:
11:6f:80:0e:97:ba:f7:c2:bb:3e:06:24:d7:ce:35:
6b:ad:48:77:30:81:c2:b4:fc:4b:a2:0b:f5:92:66:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:BC:61:62:D3:13:7A:21:C1:A0:6A:E8:70:4F:30:56:84:21:1D
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a7:e7:45:fd:0a:a7:2c:f2:f3:fe:a9:37:80:10:f3:01:51:
3d:ba:46:3d:2a:4a:68:b2:75:cd:bb:31:c0:b7:72:41:0f:e8:
99:2e:11:cb:e6:48:04:eb:6f:94:5f:e4:72:5d:1f:2d:b7:3f:
a5:57:5a:41:bb:ef:bd:7c:a5:15:28:9a:ba:1d:54:42:16:e8:
4e:52:29:58:a9:b6:f8:d4:90:da:44:d1:76:52:fd:a3:48:e0:
ca:34:46:f2:7c:37:62:c0:ee:0a:62:96:eb:cd:6a:56:60:a1:
1a:b9:ad:d9:b9:a5:aa:23:3e:51:06:7b:be:56:d4:d1:1a:c3:
c3:a4:95:d0:80:ae:c2:36:7e:cf:d5:72:5e:8d:93:f7:99:41:
fa:f5:96:e1:a4:92:d8:16:be:e0:72:6e:0f:4e:98:ed:cf:d9:
23:46:7a:43:a3:8a:2f:6a:d5:d1:b9:be:21:72:1c:08:36:c0:
9a:3a:b8:2c:e8:0e:56:a4:aa:c6:33:91:2b:cd:46:f4:a1:99:
c9:c3:83:ff:19:70:b0:dd:4e:32:ed:aa:b3:74:64:47:5e:24:
36:22:05:c7:07:26:a3:ee:f1:e5:54:f8:7d:ad:2a:5a:b3:01:
c0:0b:59:00:ed:89:d9:1d:67:c5:20:06:80:e5:64:4f:b8:f9:
38:36:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:27:27 2025 by rpki-client