Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier: FOSPKhaDzOuhkOwa4Aa/4OuFGyGusNv6Nmn7iCaW/hM=
Subject key identifier: 14:B8:70:99:6D:5A:E8:3B:C0:95:F1:DD:7B:13:97:66:6A:FA:D4:B3
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 019A1428C0978E4DB269405517285D98ECC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number: 13FF
Signing time: Fri 24 Oct 2025 03:00:06 +0000
Manifest this update: Fri 24 Oct 2025 03:00:06 +0000
Manifest next update: Sat 25 Oct 2025 03:00:06 +0000
Files and hashes: 1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: Mt/RNi1NQpsK4pLh1hJbtNpTNJscOLII8pYKQGUiX9Y=)
2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 03:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:28:c0:97:8e:4d:b2:69:40:55:17:28:5d:98:ec:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Oct 24 03:00:06 2025 GMT
Not After : Oct 25 03:00:06 2025 GMT
Subject: CN=14b870996d5ae83bc095f1dd7b1397666afad4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:d6:98:6b:7c:35:30:0a:ab:f1:6f:5c:2d:
f8:bb:84:37:d1:15:83:87:79:c1:26:ba:49:5a:9a:
f8:03:97:6d:55:67:bb:69:cc:64:a9:38:40:9e:f0:
6a:61:b6:a2:3a:45:ce:bb:f2:cd:48:99:92:b6:26:
64:95:a9:b4:e0:69:0b:e0:f3:d0:87:e1:2c:f7:3d:
da:4e:17:41:72:d9:85:32:74:6c:8d:c9:71:a4:fc:
a9:97:8c:5e:b7:8e:a0:34:5a:65:9f:9c:25:28:b7:
7c:9f:41:8b:f0:85:55:73:bd:15:ac:04:35:13:8b:
60:2a:8d:f2:88:9b:d1:98:0b:8b:74:8a:92:25:24:
36:25:28:3e:1f:32:52:25:2f:4d:7e:20:c6:77:1b:
95:4f:db:88:b2:5b:4e:0f:71:5f:f5:4c:0b:f9:26:
5f:25:cd:d5:fe:a7:59:bd:93:57:05:97:03:ae:85:
ba:8a:6b:fc:56:87:65:37:38:4b:e3:4a:43:5a:6a:
54:50:e9:8f:8f:0f:22:6e:e9:76:72:57:09:31:87:
29:c7:72:b8:48:9d:23:b7:91:b9:40:b4:a0:8e:89:
ea:5d:51:69:9d:8c:3b:9b:00:86:fe:a0:55:cd:fd:
f9:92:45:31:b4:80:ee:07:29:ec:27:b7:58:71:db:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:70:99:6D:5A:E8:3B:C0:95:F1:DD:7B:13:97:66:6A:FA:D4:B3
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:61:28:1a:eb:ef:a1:13:7d:b6:14:07:f1:13:4c:bb:17:61:
40:2f:a6:17:de:19:02:83:8a:31:af:1a:45:e2:57:8f:ef:77:
75:94:6e:26:39:cc:4d:2c:23:be:5f:ff:87:73:bb:5e:16:80:
1e:a0:0e:88:e5:ef:ea:ca:55:f8:37:6e:10:b0:d9:1e:78:85:
4f:8e:99:95:e1:da:25:96:2a:61:9b:35:36:e9:5b:8b:1c:31:
92:46:7d:28:10:22:75:a9:84:60:55:cf:d0:33:c1:af:86:b6:
64:3f:c2:d2:57:e3:5a:0c:6c:99:1b:ee:1f:83:9e:81:b1:37:
a0:d4:2a:19:33:55:7e:f6:dd:a0:86:00:1d:3a:1b:34:6c:12:
82:a3:b3:7e:cb:8b:42:10:2d:b9:58:37:b7:b3:46:77:c7:ef:
40:d3:ee:d0:88:aa:6d:12:b5:b0:56:b1:34:58:c6:26:ff:93:
41:cf:1e:e0:58:ff:7c:46:14:f4:23:1e:a9:04:30:d6:71:16:
55:02:44:b3:af:d0:36:69:52:39:1e:a1:e7:22:81:99:99:f3:
ea:b6:da:de:9f:71:e7:d5:4a:c6:d5:8c:6c:fd:2a:ea:10:bf:
90:9e:07:8b:00:23:e3:f7:2a:1d:4f:be:f8:ec:73:21:13:0e:
4d:8c:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:46:04 2025 by rpki-client