Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: gvYph91ADe+P8+YXeVYplKb549BymTudNmC+kquKr/M=
Subject key identifier: 6B:70:B0:F1:88:F2:26:09:19:5A:0D:15:89:1A:F2:16:31:DC:1B:5D
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 019922C2F501A15BB8307849D6CF86BCB006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:25 +0000
Manifest this update: Sun 07 Sep 2025 06:00:25 +0000
Manifest next update: Mon 08 Sep 2025 06:00:25 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: GkQp8JTDD/hS6m79ICv4Wn3bNJji0n0XiG3VAcagyfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:f5:01:a1:5b:b8:30:78:49:d6:cf:86:bc:b0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Sep 7 06:00:25 2025 GMT
Not After : Sep 8 06:00:25 2025 GMT
Subject: CN=6b70b0f188f22609195a0d15891af21631dc1b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:92:d0:0b:4d:33:27:31:c0:fc:27:49:5b:
66:3e:c6:b5:93:af:de:47:58:45:a5:85:74:68:f3:
b9:39:aa:7b:3a:4e:41:de:f9:67:a3:5d:84:24:52:
55:7d:3e:72:b7:a1:ff:04:d5:5e:b3:bf:ce:53:43:
31:f1:3b:7b:c2:8c:18:11:8b:5d:bf:63:9d:4e:c0:
46:bb:c1:13:db:fa:fb:3d:08:b2:bb:24:ad:1e:63:
60:fe:58:53:c9:4b:af:7c:49:58:52:14:1c:72:5c:
fc:7e:db:a4:ae:df:2a:2b:79:32:1d:89:0c:7d:59:
55:d0:aa:b8:7a:ec:f2:13:8d:65:4c:70:a5:23:fd:
2a:18:cf:df:b9:4f:ed:46:47:cf:56:50:04:93:f8:
3c:32:d2:fb:05:e0:f4:e7:08:a3:bb:26:fa:92:95:
2b:48:3e:ac:ac:24:7b:38:bb:a2:ea:74:1d:1d:79:
18:e3:de:25:e6:e6:84:1f:2a:73:a3:04:11:7f:92:
2c:17:85:e6:ec:53:ee:83:7b:63:ac:ed:cb:d4:eb:
b3:27:87:9f:16:de:a1:39:fa:9e:7c:e0:3e:15:16:
b4:b9:0b:be:bf:58:58:01:9d:2d:ab:01:2b:ec:c2:
20:b6:06:d7:8a:67:49:fd:97:b1:84:a5:b7:f6:a9:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:B0:F1:88:F2:26:09:19:5A:0D:15:89:1A:F2:16:31:DC:1B:5D
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c3:5c:0f:3f:2e:02:72:bb:5f:24:91:fe:8c:4e:bc:73:3e:
42:36:65:52:6e:3b:a7:ad:94:c1:90:11:6a:e4:b3:cf:54:4a:
0b:96:99:29:3c:c8:30:92:a1:f1:76:cb:ad:0f:66:b5:c6:b8:
9c:90:75:53:85:1d:ca:48:2b:58:fd:06:54:8f:59:b7:6a:08:
83:2a:86:36:43:fc:0a:d7:76:6d:b7:2b:dd:40:4a:e2:ea:d0:
b8:88:cd:b3:b2:ef:b5:9f:5d:dc:12:cd:ed:9b:ec:91:51:77:
44:be:db:e5:12:db:a9:45:c0:6c:bb:6d:4a:c4:af:4f:e8:ed:
a9:aa:0c:e5:cb:3f:0f:b4:c5:09:8b:bd:b0:3a:d5:58:88:8b:
07:97:d4:e8:c4:5c:88:fc:72:61:6c:d5:67:f8:fc:24:24:8f:
df:65:e1:84:03:56:40:7e:60:ea:26:e9:91:95:9b:ba:81:68:
06:df:36:a2:e7:60:1d:7c:33:aa:de:10:45:a3:f9:f7:b9:be:
d6:bb:01:52:68:c4:69:6e:20:e4:d5:04:d5:18:b2:dd:45:4b:
dd:49:30:0f:62:c3:da:9d:74:6d:a6:f5:d8:26:38:28:a8:bd:
6f:d7:f2:0e:08:03:80:b9:73:5e:a0:bc:19:91:fb:11:ff:a6:
46:f4:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:53 2025 by rpki-client