Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: WN8CvAawp5Ojh93IDifUGfT1hXwIeddVNCgy/eBvc58=
Subject key identifier: 13:6C:70:08:0D:41:EE:EF:25:68:D1:BA:71:11:B7:DC:17:6B:B9:BE
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 01968E4B9E0862402E9A947526DF0A6BCDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 151C
Signing time: Fri 02 May 2025 00:00:42 +0000
Manifest this update: Fri 02 May 2025 00:00:42 +0000
Manifest next update: Sat 03 May 2025 00:00:42 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: q36BiVFTolOpREjwAwYug+sf3Z+zqwnaQe3hcFx38KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:4b:9e:08:62:40:2e:9a:94:75:26:df:0a:6b:cd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: May 2 00:00:42 2025 GMT
Not After : May 3 00:00:42 2025 GMT
Subject: CN=136c70080d41eeef2568d1ba7111b7dc176bb9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:d8:25:a5:d1:09:16:10:19:9f:35:06:3a:
61:b1:9d:91:2e:a1:70:63:c4:8a:33:b9:8d:7b:2a:
70:f2:e8:9c:ed:eb:2e:53:46:2c:e4:59:24:00:b1:
3f:ea:b9:c8:dc:0e:fa:e2:f1:e9:1c:c1:92:e0:97:
64:7c:5b:a4:fa:3b:93:17:c3:65:bc:a0:1f:79:9c:
fe:5d:1c:26:0a:36:b0:5e:66:12:ac:51:f5:63:93:
45:43:58:91:3d:84:55:94:eb:c2:a2:7f:eb:fe:d4:
84:ee:52:f3:bc:5f:88:47:52:fc:95:4b:ec:47:0e:
98:26:a4:a0:1f:f6:ad:14:f8:63:56:98:98:99:1f:
e5:27:73:b6:b3:a6:83:dc:7f:c8:fe:68:6a:6e:5b:
24:3d:42:c8:26:72:fb:36:e2:36:f7:6d:e3:25:02:
7c:94:c0:92:7c:ba:66:d1:ca:96:e3:1e:03:70:fa:
5e:48:dc:0a:51:4e:8e:f9:45:8b:5a:0a:81:4f:bb:
aa:f1:01:40:a4:d0:6b:0e:b8:d6:97:b7:1a:50:c5:
01:3b:39:0f:ab:b4:29:5b:34:40:d6:47:51:2f:67:
ce:3d:59:81:02:d7:aa:43:54:fe:a8:30:99:24:d4:
a2:d3:8d:a0:74:4b:aa:3b:51:de:3c:6b:3a:f6:b7:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6C:70:08:0D:41:EE:EF:25:68:D1:BA:71:11:B7:DC:17:6B:B9:BE
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4c:79:dd:cc:8c:5f:6d:8f:f9:55:10:20:88:b0:b8:7f:88:
6e:f2:0c:9f:b6:f8:b4:eb:d1:2f:64:35:80:10:7d:05:c6:50:
55:e8:02:bf:80:72:55:35:c5:82:36:2b:0e:90:f0:5e:a2:8d:
91:41:a3:d4:e0:35:62:59:d2:e4:e7:46:0f:7a:55:b1:e0:2b:
0d:d1:80:26:15:de:98:c1:67:11:cd:a2:86:ad:10:46:28:c8:
7d:b5:7b:73:08:92:ee:b1:73:4e:f8:42:72:68:1a:82:3b:a1:
e8:21:c2:3e:48:50:c4:3a:33:30:b5:4d:85:8d:ca:a5:35:3f:
7a:d4:f7:96:0e:71:e9:1d:3b:d8:2b:4f:9b:a1:e9:7b:a3:cb:
5f:66:e7:0f:17:39:12:32:94:13:4f:02:40:f2:23:a4:4b:cc:
c2:c4:af:5e:42:95:ca:3b:92:5b:2d:ef:d0:05:d4:08:35:be:
37:a6:18:47:90:a6:ea:bd:1c:5a:9b:af:71:01:12:da:35:ca:
04:76:96:b4:f1:1f:96:bf:ae:fa:c5:5e:5c:65:4e:f1:f7:ef:
3f:5e:22:1f:f0:24:15:88:b8:0c:3e:38:3a:67:34:77:be:42:
b4:19:fc:fd:c4:cd:be:f8:b2:58:2b:e4:ba:31:4e:12:c9:94:
c2:d4:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:23:33 2025 by rpki-client