Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: oJM/dG+P1dNUZWpzPI4QJlOPsv/PSEBt9Pe9ih0s8vU=
Subject key identifier: 3B:66:98:A8:4A:B5:A6:AC:43:9E:3F:83:95:82:D9:B3:48:D0:48:ED
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 019A70DC61282D172DC375A1B6FBED2ACFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:01:22 +0000
Manifest this update: Tue 11 Nov 2025 03:01:22 +0000
Manifest next update: Wed 12 Nov 2025 03:01:22 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 8I09wA9cV2P8qyIKnBBxWpb7qD2FwXwGHv7gI90ewFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:61:28:2d:17:2d:c3:75:a1:b6:fb:ed:2a:cf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Nov 11 03:01:22 2025 GMT
Not After : Nov 12 03:01:22 2025 GMT
Subject: CN=3b6698a84ab5a6ac439e3f839582d9b348d048ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:a7:81:be:60:2d:b6:b0:ef:2d:d1:01:c5:
65:4d:3b:48:6f:83:c0:80:47:0a:42:30:c9:87:c8:
09:35:32:72:37:2f:c5:53:bf:cc:aa:5d:37:1f:2e:
ba:5e:66:da:9b:d7:77:9b:29:6d:2f:0e:4f:30:6d:
ff:43:5c:a2:96:ff:ba:68:1c:32:06:19:d2:65:9e:
49:ab:6a:08:96:28:24:84:d6:a9:f7:4c:ec:26:e5:
b0:bf:bd:9d:91:a4:c4:f0:3c:20:97:1c:22:d5:38:
5f:79:9b:10:60:c4:36:bc:3e:61:51:4f:e2:ee:b3:
29:05:38:61:e8:4e:ac:ef:a0:c8:82:23:5c:c5:bd:
0e:e5:08:5b:fd:4a:09:b6:6c:92:87:fc:ef:b1:67:
b0:31:86:fb:28:47:70:0e:79:c6:0d:46:42:44:c0:
69:56:16:a0:4f:04:40:ef:be:dc:04:39:20:ac:cc:
cf:5f:dc:17:ec:ad:54:f7:ea:4c:36:c3:2c:f0:2e:
c0:7c:42:a8:47:1f:37:a0:66:83:43:34:d1:97:ba:
fc:66:86:a6:57:7c:4a:c8:e1:ee:f0:3a:e1:cb:45:
52:c6:78:28:09:62:7e:da:a3:74:3e:b9:c5:52:43:
cb:8b:9b:87:27:73:89:3c:bb:6e:ea:ae:7b:7d:8e:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:66:98:A8:4A:B5:A6:AC:43:9E:3F:83:95:82:D9:B3:48:D0:48:ED
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:79:66:49:b4:84:11:98:79:bb:0c:af:93:67:fe:c4:03:
5e:3f:69:1f:a3:26:f6:5b:53:db:5e:5a:41:1b:11:5c:47:48:
13:cd:a7:e1:3a:f5:5a:1d:0c:11:6b:00:c2:a0:f0:82:b8:64:
3c:71:fe:12:57:6e:7f:83:21:2f:b7:31:5c:9c:d8:af:6d:61:
38:d2:ed:bb:f8:c5:de:69:bf:a4:86:71:df:db:22:8b:9b:f2:
78:87:06:76:08:a6:72:d5:f6:05:43:ea:2b:40:ea:dd:5a:57:
99:95:34:a6:ab:48:c5:98:ae:f3:80:bf:67:82:b8:bb:34:38:
50:95:58:f5:79:6d:93:10:8a:81:54:0a:a3:88:bc:f2:74:1c:
b7:2f:50:5e:28:c2:13:4e:e7:32:8c:1c:1d:d3:15:00:ed:fa:
b8:53:9e:f9:1a:ee:2d:06:eb:b8:83:3e:ae:e2:14:e7:25:ca:
ea:7f:7f:07:ba:67:17:3a:19:bb:d7:c8:1f:58:6c:00:e2:72:
10:f8:d7:6a:f3:30:93:29:75:30:55:4c:38:1d:f1:56:52:3a:
92:e6:dd:23:e7:6d:e2:6b:fd:30:20:78:cb:32:4d:33:f9:3a:
1e:22:af:65:ef:58:84:a8:7d:0b:7c:ca:e9:db:ff:36:db:a1:
f6:47:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:23 2025 by rpki-client