Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: nKm7FwltTVEtzSIVtOayjJZaaTpRctwbbasocR2QiIE=
Subject key identifier: 0B:E6:E8:45:36:3E:81:20:B9:65:3F:DD:13:A9:96:64:20:80:16:21
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 019A71B88DEF2D8351F14200855973B85CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 0FF4
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: oVgD5vdfBEeAITk6njKD3I8j1LUrKSfV/ALepLvkA5k=)
2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8d:ef:2d:83:51:f1:42:00:85:59:73:b8:5c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=0be6e845363e8120b9653fdd13a9966420801621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:81:6a:7d:37:c2:73:c5:c1:c8:3e:05:de:
8c:0b:ac:96:20:90:15:07:52:84:41:1b:37:89:b8:
0f:66:f2:77:f8:2f:53:db:66:e7:7c:76:16:39:bd:
59:eb:6c:45:fb:c8:6a:4a:f9:ae:11:0b:1e:22:8a:
c1:f1:1c:fc:10:92:46:67:73:76:49:4e:eb:a8:e7:
ae:55:d1:96:70:f8:80:ea:3b:09:24:64:8e:3c:74:
f6:1e:28:62:0a:72:fb:a1:e3:51:bb:dc:a5:8e:a2:
a4:0f:d5:b9:b3:7a:0f:ed:46:40:ae:79:27:40:e7:
64:01:d8:df:8e:6f:8a:d9:89:74:f0:fa:3e:b8:80:
21:5d:06:d8:51:c0:bd:67:3e:bc:f9:9c:76:ba:dd:
9f:38:5a:bf:39:c3:03:63:3d:65:02:97:83:2c:da:
1c:69:55:5f:52:c7:7d:41:50:74:c6:7f:d8:15:59:
3a:78:d6:6f:86:d0:e2:b2:51:f4:06:cb:27:99:e0:
b3:da:f6:12:8a:1e:ea:18:32:28:72:05:f0:11:a5:
0a:9e:09:71:d2:3c:81:1b:1a:47:f5:cc:74:dd:81:
fa:02:46:5d:20:c4:86:52:08:13:28:40:ac:13:8c:
39:44:b3:00:4a:e2:14:85:fa:bc:eb:b3:98:01:a2:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E6:E8:45:36:3E:81:20:B9:65:3F:DD:13:A9:96:64:20:80:16:21
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a4:e1:d9:a7:29:55:6e:d0:3a:59:3b:18:ba:0a:8c:4b:32:
0b:12:48:11:bc:fd:00:65:ee:4d:bf:b0:0f:13:51:76:5b:cb:
7c:52:b9:76:6a:24:4d:41:78:5c:42:f0:03:86:3f:c1:1c:08:
63:e1:ac:4c:df:f3:f3:fd:92:ec:57:39:a8:dc:77:9c:e9:9a:
35:d6:42:6f:fd:6f:3d:07:fe:6b:50:15:6a:e5:f0:2b:47:44:
3e:ee:cb:4e:21:1c:ec:e9:cc:61:5e:eb:69:6b:2f:25:bb:9f:
1f:3e:2f:a5:31:1c:e3:63:e5:5b:79:65:5a:03:83:55:1f:72:
03:0c:e7:74:5a:74:9b:18:14:52:4b:f4:f8:22:13:c3:dd:5a:
b8:7d:4b:e0:49:a3:e1:88:3d:21:72:1d:54:58:88:68:1d:78:
45:34:64:ce:87:98:6a:0f:eb:da:32:fe:f5:c6:d1:4b:92:57:
36:9f:10:8e:86:dd:c2:c2:a8:34:92:8e:f8:68:d9:14:c6:fa:
e2:1e:0b:cb:bd:73:a6:a3:46:38:c7:ee:7a:df:2d:2f:ab:6c:
2d:98:b3:46:c8:39:aa:51:2f:3d:3d:16:12:5b:23:f4:34:a2:
23:1a:35:db:2e:9a:0f:1f:d3:04:71:c4:d0:18:bc:37:e4:64:
f8:93:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:59 2025 by rpki-client