Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier: iTPOBxVX7mtT4wU3hJazLrVRvQJIJSU0c5OoGMTCYrc=
Subject key identifier: 8D:F7:7B:F9:7A:E6:85:8D:F1:73:18:08:1D:05:4A:89:CA:7B:6A:FD
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 0197499EFAF1D397493A9574FF7A7F90EF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number: 128D
Signing time: Sat 07 Jun 2025 09:00:45 +0000
Manifest this update: Sat 07 Jun 2025 09:00:45 +0000
Manifest next update: Sun 08 Jun 2025 09:00:45 +0000
Files and hashes: 1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: sCEojJgcA8XbJdR86K2kt/LFHMP2Zzvha+XYTxmEDps=)
2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:fa:f1:d3:97:49:3a:95:74:ff:7a:7f:90:ef:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Jun 7 09:00:45 2025 GMT
Not After : Jun 8 09:00:45 2025 GMT
Subject: CN=8df77bf97ae6858df17318081d054a89ca7b6afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:6f:2e:46:30:fc:01:30:50:fa:af:dd:ed:
c6:13:f6:d1:2c:0f:7c:07:29:2b:cc:74:b6:9e:8c:
b6:ba:8e:d1:41:6b:73:10:11:30:65:28:77:86:ef:
f3:c7:db:de:4b:fa:f3:e5:cf:23:95:26:68:bc:76:
58:29:89:1c:25:93:f1:f8:82:90:06:4d:c2:51:da:
53:53:cb:c9:be:54:56:e6:2b:48:91:da:57:ef:6c:
f6:7c:ae:d6:1c:8f:7e:fe:dc:62:fe:a9:34:8e:2b:
1c:d6:f6:ca:27:c2:07:37:53:6d:e9:8b:34:c3:9f:
35:56:2f:e4:3b:1a:d2:bc:c1:82:b5:34:fb:3e:07:
43:76:d8:79:42:65:4e:85:2d:c0:28:df:68:82:4a:
e4:09:f4:ce:3a:4d:27:b7:ec:67:be:49:a3:71:fb:
f0:a3:65:04:4a:a0:6c:7c:67:31:86:4d:a3:c3:1c:
a1:51:a2:dc:01:a4:21:ba:91:97:54:02:13:62:87:
4b:e0:17:cb:32:7c:56:b8:bf:4f:af:ea:25:ac:f1:
86:b8:fc:f0:ea:df:5b:3e:e6:8d:57:a4:7b:66:12:
b4:7d:0a:9f:d5:5e:80:d2:f3:48:8c:ab:e2:7d:5f:
9a:88:43:3d:07:dd:2c:e7:99:f6:a5:3c:ec:3f:2a:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:7B:F9:7A:E6:85:8D:F1:73:18:08:1D:05:4A:89:CA:7B:6A:FD
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8d:c6:d6:1e:82:20:33:7e:78:a9:cd:b3:63:bb:b3:e2:ae:
a4:19:0f:7c:64:12:93:23:49:45:bf:e2:79:a7:a4:e5:aa:bc:
ef:94:c6:02:bc:9d:75:84:6e:b6:23:af:6e:49:da:86:6c:f6:
a3:69:8c:af:19:23:90:be:a6:ee:ee:9e:9a:c3:a4:02:37:7a:
95:af:fd:04:17:6c:a0:ee:28:67:37:e0:c3:0a:6a:61:d5:40:
8c:e3:61:13:68:7a:e9:6b:66:f4:08:cb:0f:6c:28:48:f2:4b:
93:5a:12:9e:19:e4:b6:7e:a0:45:8f:f8:c4:2b:ee:12:a2:a6:
3a:fa:7d:d3:6d:b5:38:76:ba:e6:47:74:f0:0d:b1:61:6b:3d:
d3:80:4c:0b:e6:f3:f2:54:e1:b8:46:54:43:3d:92:5e:53:de:
02:8d:d2:14:62:2b:7a:82:df:91:89:4a:3e:66:14:ba:b8:d6:
8d:40:7d:d0:86:29:87:c3:99:40:11:ff:03:2b:c6:e2:e2:d4:
c6:53:b6:4b:9f:17:7f:b9:ee:ef:83:7e:88:76:f5:63:e5:30:
78:05:e0:bf:73:d8:28:75:f3:e3:b6:49:a8:d2:f1:90:fb:6a:
cc:38:c7:1c:25:17:ef:ca:6d:f2:d5:ff:6c:72:fa:35:cc:8b:
99:a6:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:06:33 2025 by rpki-client