Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier: sj1ayfxx+erDvuC3h1tckWMW06T46heT6qHe/WjV5xw=
Subject key identifier: 22:82:FE:B5:F7:E2:1E:53:52:DA:96:53:80:06:B1:C0:60:D7:DF:0C
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 019646D794BB49C5E8EC59E3D1E7A64F75EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number: 1207
Signing time: Fri 18 Apr 2025 03:00:55 +0000
Manifest this update: Fri 18 Apr 2025 03:00:55 +0000
Manifest next update: Sat 19 Apr 2025 03:00:55 +0000
Files and hashes: 1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: 35viykCPq2ibQsNy2a0ipsSaHVq+hj8HU/qJtOOsWR8=)
2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:94:bb:49:c5:e8:ec:59:e3:d1:e7:a6:4f:75:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Apr 18 03:00:55 2025 GMT
Not After : Apr 19 03:00:55 2025 GMT
Subject: CN=2282feb5f7e21e5352da96538006b1c060d7df0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:11:8e:f5:d4:08:00:8a:9f:5a:bf:8f:f9:
19:33:46:41:43:b4:61:f4:bc:c8:90:26:31:aa:4c:
76:df:09:14:0f:e1:c1:22:78:5b:be:78:c5:92:50:
c6:2f:92:f5:91:b7:ba:8d:2e:57:e1:59:1f:1b:3c:
df:5f:bc:0d:39:69:3d:8c:d3:d9:a3:94:b2:90:2a:
ef:f7:a1:04:8c:30:ff:85:96:bf:99:1d:64:b6:9c:
85:0d:f0:78:28:1b:01:f9:a1:73:5c:4b:2b:2a:98:
f2:b3:7f:fe:18:ea:73:c5:1c:ee:12:74:53:ef:97:
5c:19:42:a9:3f:16:58:44:4a:18:19:f4:63:48:f8:
37:5a:5f:10:e4:87:0d:c9:32:a3:f1:3c:bf:8e:92:
68:f1:86:0a:0b:76:c4:a0:3a:c4:41:4d:59:f4:28:
0b:1a:d1:4a:4b:22:c6:bb:d1:df:53:7b:8c:f6:f5:
78:8a:10:ab:39:25:c2:18:54:c6:0b:fe:a4:d9:55:
12:bd:ea:75:fa:7d:6d:d4:5c:aa:9b:fc:1a:8b:a1:
03:52:58:7a:91:1c:68:ee:24:df:ee:0c:01:ec:8a:
ed:99:64:3e:68:7a:7d:d4:de:5a:b5:b7:f2:82:72:
49:11:2d:d8:80:57:05:20:07:4d:50:e3:e1:c3:12:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:82:FE:B5:F7:E2:1E:53:52:DA:96:53:80:06:B1:C0:60:D7:DF:0C
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bf:d1:34:ef:96:98:ef:c4:b6:58:e1:91:e1:a1:ec:72:70:
a1:49:39:a9:07:84:91:c2:0f:0d:11:49:8a:8e:72:08:96:09:
17:d5:c8:95:ec:f1:97:fb:cc:5a:c1:23:47:2a:80:eb:bb:a8:
d5:49:40:b2:68:8c:01:cf:e3:75:27:9a:ae:44:c8:6b:02:91:
a4:9a:8b:01:e5:52:db:4d:d1:4c:b4:75:00:98:b3:ba:64:67:
56:89:e6:45:a5:39:19:73:ae:d7:03:86:3b:72:55:44:21:cd:
c6:68:8b:dc:e3:4b:44:1f:ff:82:1b:1e:22:57:5f:f8:2f:50:
06:af:1c:55:84:55:70:db:5e:c4:cb:61:00:5c:8c:0e:b2:6f:
82:7b:2c:cd:4e:59:af:12:0a:a5:e2:a1:a6:82:8b:0c:80:b8:
b0:d6:7d:16:eb:8e:b2:fb:3f:14:f2:68:a6:dd:6c:ea:f4:f4:
d1:b4:0b:66:70:a8:d9:8b:33:fc:0f:3e:25:63:d9:f1:da:01:
8e:2c:ea:62:92:ea:89:94:cf:9c:a9:79:44:31:d4:80:68:f8:
d3:59:0e:08:ea:19:68:ac:8c:4b:53:28:96:59:10:8b:06:be:
18:cf:e9:68:80:08:f0:d2:18:4d:a3:e9:8c:0f:f3:cf:55:42:
ca:78:f1:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZG15S7ScXo7Fnj0eemT3XqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDdmMGZkNjIyYWZkNmJkNGEyZDZjZTBmMWNiY2MwN2E5
YzQxZjEwHhcNMjUwNDE4MDMwMDU1WhcNMjUwNDE5MDMwMDU1WjAzMTEwLwYDVQQD
EygyMjgyZmViNWY3ZTIxZTUzNTJkYTk2NTM4MDA2YjFjMDYwZDdkZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiIRjvXUCACKn1q/j/kZM0ZBQ7Rh
9LzIkCYxqkx23wkUD+HBInhbvnjFklDGL5L1kbe6jS5X4VkfGzzfX7wNOWk9jNPZ
o5SykCrv96EEjDD/hZa/mR1ktpyFDfB4KBsB+aFzXEsrKpjys3/+GOpzxRzuEnRT
75dcGUKpPxZYREoYGfRjSPg3Wl8Q5IcNyTKj8Ty/jpJo8YYKC3bEoDrEQU1Z9CgL
GtFKSyLGu9HfU3uM9vV4ihCrOSXCGFTGC/6k2VUSvep1+n1t1Fyqm/wai6EDUlh6
kRxo7iTf7gwB7IrtmWQ+aHp91N5atbfygnJJES3YgFcFIAdNUOPhwxLSdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKC/rX34h5TUtqWU4AGscBg198MMB8GA1UdIwQY
MBaAFGXX8P1iKv1r1KLWzg8cvMB6nEHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYt
OGJlNGFkNTc3NzNiLzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYtOGJlNGFkNTc3NzNi
LzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjb/RNO+W
mO/EtljhkeGh7HJwoUk5qQeEkcIPDRFJio5yCJYJF9XIlezxl/vMWsEjRyqA67uo
1UlAsmiMAc/jdSearkTIawKRpJqLAeVS203RTLR1AJizumRnVonmRaU5GXOu1wOG
O3JVRCHNxmiL3ONLRB//ghseIldf+C9QBq8cVYRVcNtexMthAFyMDrJvgnsszU5Z
rxIKpeKhpoKLDIC4sNZ9FuuOsvs/FPJopt1s6vT00bQLZnCo2Ysz/A8+JWPZ8doB
jizqYpLqiZTPnKl5RDHUgGj401kOCOoZaKyMS1MollkQiwa+GM/paIAI8NIYTaPp
jA/zz1VCynjxGA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:53:55 2025 by rpki-client