Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: t4lePYD4ufob/Lcj9CanE/M1KTZIjQIhH9rxHK9Z/LM=
Subject key identifier: 1B:7D:24:ED:49:83:0E:40:DF:28:77:C7:15:D6:82:16:4F:E3:6A:EF
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 019A01B5D405035A7C79F496BFED6BD7D46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 0FBA
Signing time: Mon 20 Oct 2025 13:01:24 +0000
Manifest this update: Mon 20 Oct 2025 13:01:24 +0000
Manifest next update: Tue 21 Oct 2025 13:01:24 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: UDokyz6A60vsZFEyAJ6EVcFN5bzb48MBsTl02t+SacA=)
2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:d4:05:03:5a:7c:79:f4:96:bf:ed:6b:d7:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Oct 20 13:01:24 2025 GMT
Not After : Oct 21 13:01:24 2025 GMT
Subject: CN=1b7d24ed49830e40df2877c715d682164fe36aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:37:86:1c:ef:20:a9:7e:5e:87:4a:b6:74:
93:59:23:b3:a7:d9:c6:11:76:55:81:74:c9:bb:b9:
bf:4e:75:12:bc:52:36:3f:de:67:8c:14:60:d9:7f:
a7:c3:1b:e1:40:2a:3e:84:de:1c:a5:cb:0f:2f:a6:
2d:47:9e:5b:4a:39:b1:03:8e:ee:32:51:3c:9b:c6:
9a:05:e2:8d:d5:8d:27:3d:31:ed:65:53:a5:4c:e3:
0e:76:3f:cf:4e:17:54:1d:35:a3:ca:9b:c3:f5:b0:
5e:47:98:91:16:f9:3e:8e:09:23:98:3a:72:8f:74:
b3:7d:6e:0c:c3:13:e1:97:f8:ba:15:ed:51:ae:3f:
d0:ad:63:85:46:1e:aa:eb:cb:ac:9f:72:5c:c4:5c:
92:85:7d:75:1b:c1:8d:58:51:73:2b:19:74:d8:e7:
d1:8e:86:a8:11:f3:e6:87:25:81:59:a1:e2:68:23:
3e:7e:82:62:3a:eb:ef:ef:22:68:9f:a2:72:2b:9c:
c8:be:4e:5a:e0:d7:f4:7b:77:6a:c3:e1:a7:13:92:
7d:2b:d5:a1:d5:63:ae:3b:2c:e4:a2:08:e4:52:e9:
2e:d5:13:fe:3f:56:97:b7:1d:4d:e2:45:ca:c7:ad:
41:28:eb:f0:20:a0:94:44:92:00:b9:0c:90:15:8a:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:24:ED:49:83:0E:40:DF:28:77:C7:15:D6:82:16:4F:E3:6A:EF
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:db:b3:ad:b0:8c:56:69:54:54:b0:0a:d3:ca:3d:2b:9e:89:
d2:24:c1:8e:f8:03:dd:81:fd:3e:1e:37:15:6c:5a:d8:27:18:
54:87:80:69:13:2f:32:1e:7d:df:9e:c6:27:c7:b6:70:28:45:
62:5a:e3:02:ae:3a:9a:7f:10:1a:b8:eb:d2:4c:cf:b9:b6:dc:
48:86:e4:2a:8d:46:58:e6:7d:e6:7e:12:9b:e2:32:27:c2:b5:
c5:b2:ff:fe:f6:55:76:b5:9e:af:a2:11:f0:46:b6:f4:b3:61:
bc:00:04:34:93:2f:39:13:54:68:42:78:ef:cc:f6:8d:88:0d:
dc:0f:84:64:44:c0:f4:91:22:e0:29:34:ca:94:5b:39:71:af:
65:22:18:17:29:d2:15:9e:39:c4:f1:bd:5f:0f:ef:5b:ca:52:
cf:f0:62:21:e7:aa:6b:11:97:ab:10:4d:d4:1c:01:af:e7:ba:
d3:53:67:72:7f:95:bd:91:3e:19:2e:00:cd:19:84:19:76:83:
bd:ba:21:94:91:52:34:bd:77:8d:aa:34:a5:7d:82:76:1a:99:
28:33:7e:ba:45:3e:94:3b:cf:d1:51:5a:88:b5:5c:64:24:eb:
59:f1:c1:a3:18:37:3d:a8:8c:64:13:ef:dd:38:47:a7:8a:5d:
d4:3b:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:46 2025 by rpki-client