Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: lgvyhEwYQKrZ4K4rgUFeXAKC3+CQ72RPkJBxPvRVbxQ=
Subject key identifier: AF:A4:A3:BA:07:63:0E:49:73:C8:9C:40:38:DD:30:15:3E:9E:84:EA
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 0197895931BDE3040EE716FA9726D9E7A7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 18:00:13 +0000
Manifest this update: Thu 19 Jun 2025 18:00:13 +0000
Manifest next update: Fri 20 Jun 2025 18:00:13 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 0Thmz1ebQHWwdpv2BXxEjIRe2SsfgBJ2vli0WjOmzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:59:31:bd:e3:04:0e:e7:16:fa:97:26:d9:e7:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Jun 19 18:00:13 2025 GMT
Not After : Jun 20 18:00:13 2025 GMT
Subject: CN=afa4a3ba07630e4973c89c4038dd30153e9e84ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:88:98:73:a6:06:a2:4b:49:30:24:ab:4f:
cc:7d:7d:4d:cd:40:a0:fd:6a:28:23:3d:4a:86:d8:
0b:18:6c:17:6f:fb:31:f0:87:af:84:68:74:bb:71:
93:76:90:f8:84:ed:c2:3a:45:50:f4:46:a9:7a:44:
50:5e:60:03:d2:e9:b1:a6:ac:17:4f:0f:7f:66:be:
18:e8:38:fc:18:70:f2:f0:da:7e:fb:51:9b:85:49:
31:26:4c:dd:c8:7f:15:c8:b1:59:67:23:ef:45:b2:
5c:d0:be:38:3d:fa:1a:ae:dc:5d:c8:91:5d:fc:e7:
1f:72:3c:98:54:46:04:4e:25:ce:2c:8c:66:59:bf:
69:f7:65:5c:6b:36:85:0d:33:08:f2:64:61:24:96:
78:f4:74:07:a9:94:a2:66:4c:66:5b:52:ec:a7:ec:
aa:5d:82:ed:5c:b5:32:87:ec:ff:e7:2d:3e:b7:6e:
39:93:90:2c:06:a0:ef:59:66:a1:b7:06:9a:23:86:
00:3e:c8:9b:6e:45:d4:c1:f2:4b:0b:ec:da:00:e3:
33:d8:cb:2c:41:81:65:74:f9:bc:03:12:e4:29:43:
5d:ae:a3:2e:e3:64:5a:6d:75:41:c8:0c:df:d0:88:
8d:00:3e:7e:df:2f:6a:95:26:60:67:fa:b7:79:29:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:A3:BA:07:63:0E:49:73:C8:9C:40:38:DD:30:15:3E:9E:84:EA
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d1:15:52:de:e2:7e:43:d2:63:85:e8:ff:e5:47:30:d2:2c:
dc:d5:9c:f3:96:7e:c9:c5:14:eb:42:32:4e:85:29:4e:86:3e:
ce:cf:87:1c:d8:60:cf:97:1b:a1:d3:28:5b:00:c5:38:fe:1e:
94:22:8d:d5:a7:be:5d:f0:cc:f2:58:69:9d:84:79:03:ab:c8:
f7:6d:c8:42:bb:37:04:e7:f6:d9:34:42:5f:19:42:36:7a:59:
7b:22:ca:dd:3a:a3:4d:a7:7e:5e:48:85:23:69:a6:5b:f3:69:
47:e8:39:8d:bf:d6:74:a7:16:d0:18:80:1d:36:5e:62:7b:24:
94:d8:c6:20:02:81:51:4e:28:1f:2e:44:b4:3b:56:ab:cb:91:
9a:88:c2:f0:45:40:95:4a:b4:be:42:34:af:50:78:d5:76:90:
2c:78:36:8b:62:95:14:ed:06:1b:3c:84:8c:af:07:db:41:b6:
99:7d:d0:75:55:d3:cf:78:23:95:a1:00:6e:3f:02:c3:bc:b6:
fb:06:66:02:3c:2f:56:65:5a:2e:05:02:1c:41:19:70:1d:6f:
fa:bd:f1:5a:86:47:d2:2f:d4:35:8c:ea:f5:b6:4c:fd:5f:f4:
4c:30:c3:3b:7b:19:0f:55:7b:2b:7f:45:ae:42:c6:26:cd:b3:
46:70:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:13:08 2025 by rpki-client