
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: Il1PCoW5vxS+sMGJb1EjEZ/qUb1yM9yUwJ8kcRTzwdU=
Subject key identifier: B8:D8:69:17:27:06:9A:6A:D4:DF:2E:03:8B:36:51:FA:5D:80:C9:27
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 0198D8845DBF8C88B56525089F36931FE8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 0F20
Signing time: Sat 23 Aug 2025 20:00:09 +0000
Manifest this update: Sat 23 Aug 2025 20:00:09 +0000
Manifest next update: Sun 24 Aug 2025 20:00:09 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: jBZMBs2rT1XQ4zvPn8x4ZYPQ4GIwYG9y9shaScvH4Lc=)
2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:5d:bf:8c:88:b5:65:25:08:9f:36:93:1f:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Aug 23 20:00:09 2025 GMT
Not After : Aug 24 20:00:09 2025 GMT
Subject: CN=b8d8691727069a6ad4df2e038b3651fa5d80c927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:bc:ad:e2:75:31:d6:b2:0d:95:63:01:88:
ac:ea:e5:13:b5:b9:4a:24:fb:4b:86:50:ed:fa:6d:
50:3c:63:d3:2b:71:39:ca:0a:3b:10:bd:b0:58:e8:
75:2c:ab:e1:30:48:5a:96:5e:ee:da:17:3a:3d:8c:
2c:ed:ec:89:21:71:d3:e2:b7:2d:95:81:37:44:3b:
c8:2a:de:91:da:7e:5a:f4:f8:84:c3:f4:e8:16:e2:
d8:83:15:cf:ea:11:b0:ea:78:bd:09:fe:31:f9:01:
06:68:4f:4d:77:c4:9f:a2:dd:6c:b0:39:6c:94:bc:
28:64:7f:09:48:42:b5:5e:f5:7e:80:a3:10:12:28:
12:3d:ea:26:b3:ff:cb:55:e3:8d:7b:46:14:b6:82:
c5:cd:43:c6:3b:fa:6c:9b:6d:33:13:0f:46:53:b6:
b9:1b:32:aa:39:11:f2:b8:68:15:fc:ce:cb:c9:30:
60:b2:32:0e:fa:47:99:da:46:1d:63:87:79:a5:b3:
27:86:97:af:71:01:a7:28:ff:28:a6:dc:8b:0a:1e:
7c:7b:93:6e:67:86:18:e0:fd:f8:a0:69:2c:b8:1b:
b1:8a:ca:18:06:7b:b8:03:ce:d3:66:9c:df:2a:0a:
e9:6b:e0:cf:8f:19:8f:07:ea:e1:30:28:ae:ea:51:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D8:69:17:27:06:9A:6A:D4:DF:2E:03:8B:36:51:FA:5D:80:C9:27
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a5:7f:3b:b6:6b:f8:11:d0:18:85:c6:e6:c1:47:ff:17:a9:
40:90:2c:fb:6d:61:1b:92:dd:c6:9a:bb:96:13:f7:fe:75:2b:
77:0e:41:c7:d1:88:df:8c:d5:2a:ca:0d:72:cc:aa:11:e2:21:
cc:7b:13:5d:0c:69:29:e9:fe:60:83:db:9d:5a:17:35:0b:4e:
8c:45:50:87:4d:b9:72:f3:7b:bc:af:70:c0:df:f6:3c:09:15:
4d:62:48:ca:cd:e6:16:43:02:02:37:7b:84:45:b9:b6:46:e2:
96:66:89:8f:64:42:ee:fe:83:7c:2b:ec:b8:a9:e8:05:3e:ae:
d3:84:43:8d:1d:62:d9:1d:04:ca:9a:26:1f:6a:fd:34:ec:87:
4f:b0:52:7c:7f:95:6c:90:f4:6a:c4:e3:ef:d0:db:9c:ee:0b:
95:a3:d5:51:b5:11:f6:0b:c5:98:98:c0:2c:7c:37:32:37:f1:
ef:d2:26:bc:8e:36:71:bd:51:59:84:55:0f:e4:b1:f3:8d:e7:
6a:25:7d:40:18:95:c9:c2:6e:01:65:1e:ae:f0:f8:d5:dc:21:
11:54:c5:f4:8f:1f:3d:7f:b6:a0:7f:c9:ca:ee:d2:b2:0c:83:
ed:f5:f4:36:52:02:5d:00:e7:7c:53:62:f2:ed:ac:6b:c4:63:
27:2e:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:44:09 2025 by rpki-client