
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: u3g4LCpJnVxaUzj6Qqk7Q5w/0pYOHE7o9k3ULSeatb8=
Subject key identifier: 68:F9:72:45:BD:1C:CE:26:E5:13:1E:B5:14:9A:EB:D5:B4:F7:6B:E5
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 019923D62B844307F8CFD98D60B0BF84042F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 0F47
Signing time: Sun 07 Sep 2025 11:01:02 +0000
Manifest this update: Sun 07 Sep 2025 11:01:02 +0000
Manifest next update: Mon 08 Sep 2025 11:01:02 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: 2msoyJzKcixXIb7tZlJ1z9FWlmuvZvPlcEjoG4CV328=)
2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:2b:84:43:07:f8:cf:d9:8d:60:b0:bf:84:04:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Sep 7 11:01:02 2025 GMT
Not After : Sep 8 11:01:02 2025 GMT
Subject: CN=68f97245bd1cce26e5131eb5149aebd5b4f76be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:9e:73:34:13:85:fb:07:10:4b:50:33:3e:
c9:cb:1d:6e:22:31:cb:e0:c3:fe:e0:a4:64:a3:14:
17:91:7b:8f:b5:32:cd:45:3b:89:b5:4c:f4:0a:31:
74:89:10:33:34:b5:c1:c2:db:93:1a:03:3f:de:c1:
3d:46:38:9a:d9:b4:82:d8:7b:1b:c9:f9:87:bb:14:
28:cb:f8:3c:8a:80:ce:c5:3f:53:d8:35:bc:05:42:
06:ca:85:a8:a7:59:42:2c:c6:73:7f:f6:ac:2b:c3:
0d:71:f2:d9:ea:ce:66:40:81:d2:31:ec:08:62:35:
cd:26:4c:e0:23:b0:6f:de:7a:77:5c:f7:56:85:5b:
d5:f8:0d:58:d2:14:de:aa:47:a0:95:8a:12:fe:64:
ac:74:78:b9:c2:e9:d9:73:cc:25:93:a1:bf:7b:56:
d2:26:11:48:25:73:c0:df:59:bc:50:43:6d:e8:3e:
34:36:4c:a2:52:1e:4a:a9:af:3d:30:d9:7f:74:fd:
39:bc:0a:af:2e:5c:56:d0:54:d4:ca:e8:ef:25:f5:
6b:ab:41:cc:11:0e:e2:fe:78:bd:b3:3a:bc:ba:c2:
37:0a:56:ce:c4:f8:f1:aa:de:7f:88:87:14:b2:31:
f0:43:2f:87:bb:a7:18:63:cf:08:03:5f:83:80:93:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F9:72:45:BD:1C:CE:26:E5:13:1E:B5:14:9A:EB:D5:B4:F7:6B:E5
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c6:97:62:3a:94:96:51:79:93:f1:a0:7e:66:f7:b8:36:d4:
e1:35:e9:90:80:38:fd:40:56:4e:5e:a8:5d:32:67:ae:9b:8f:
e4:d1:d6:e0:c4:84:1a:2a:8e:3d:95:b2:13:69:7e:fe:06:07:
10:7f:cc:b4:44:7d:25:4b:fa:36:e0:9e:7a:67:55:8b:e0:39:
86:ad:1b:e8:ce:ea:ee:29:5e:b9:af:ed:38:48:a9:73:6e:14:
5a:8a:ea:4c:2c:7d:9e:5e:0f:b4:e4:07:cf:6b:04:58:45:e5:
e0:41:c6:e8:31:5d:72:07:34:5f:8f:cf:57:b0:d0:17:9e:a3:
d2:99:68:21:dd:e9:51:a8:02:8c:4a:23:af:af:4f:0d:7c:a8:
ff:dd:55:c9:cd:ba:a2:5c:7b:a5:71:d5:85:59:3c:c9:3d:1b:
c4:5e:40:db:0f:00:d9:bc:33:05:19:f5:2a:95:fc:c3:3c:82:
9d:5f:fd:15:3c:f9:ff:b9:fb:14:1d:72:0e:17:78:85:a1:02:
2e:5c:3e:a0:1e:80:bf:5f:3c:ed:6e:52:b3:89:69:dc:27:9a:
db:1b:23:31:a3:b5:0a:92:40:10:67:15:9f:6a:57:f5:ce:4d:
d2:63:0a:8f:80:9c:6b:7e:86:b4:18:29:0e:06:b5:f1:d5:0f:
b3:c9:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:08:22 2025 by rpki-client