Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: vGpID6/ee1FBkshCPP8yEwViC1EvHZ8PGIj9FTwCB2M=
Subject key identifier: 87:A1:E4:44:26:67:D1:60:2C:E6:EF:FC:48:F8:4D:A9:7D:58:4D:4A
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 0199FB4588E0085CD52109581FAA7B0B86ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:02 +0000
Manifest this update: Sun 19 Oct 2025 07:01:02 +0000
Manifest next update: Mon 20 Oct 2025 07:01:02 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: BSoagBFYo2hrHD92eUbYJsVg6ZB0AKcPYEkzYiX9TqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:88:e0:08:5c:d5:21:09:58:1f:aa:7b:0b:86:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Oct 19 07:01:02 2025 GMT
Not After : Oct 20 07:01:02 2025 GMT
Subject: CN=87a1e4442667d1602ce6effc48f84da97d584d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:5b:9a:03:be:91:13:2a:95:8e:cf:b0:29:
df:f6:6e:7e:05:e4:57:56:0d:27:7f:f9:ef:0c:be:
e1:90:38:0c:8f:f9:45:31:46:31:06:aa:ed:ef:eb:
28:0f:8a:46:65:69:ce:c1:21:6d:2d:60:cf:a2:d8:
ea:c3:bb:0d:68:4e:75:b7:4b:05:85:8e:a5:e6:82:
83:59:04:6e:8a:36:1d:ea:41:85:69:7d:d4:90:77:
34:f2:11:fd:31:d1:c1:c4:b1:3d:b5:77:11:66:2a:
d2:27:ff:b7:e1:a1:d8:16:b0:c3:91:0b:5e:b4:68:
f1:e6:ce:b1:18:0f:48:62:1b:0c:c5:2c:4e:e6:c7:
c2:17:96:33:5f:9d:a3:eb:64:9d:a4:ab:79:82:ab:
f7:58:0d:54:58:e1:f4:52:cd:6b:14:2c:23:2d:5b:
c3:1b:a9:33:05:a3:94:84:8e:dc:6c:fa:a4:62:cd:
8d:8c:ea:6f:10:08:b5:07:57:48:bd:23:63:76:ef:
c4:e6:e5:af:47:9e:ee:ea:79:b5:56:37:ae:5e:64:
45:00:bb:e1:ae:3c:98:db:c2:0d:be:b0:7b:a5:a4:
43:a1:ec:a6:f7:00:8e:11:c7:eb:63:93:ee:92:ed:
53:46:4c:54:d9:ae:e9:4a:e1:8b:1d:fd:d1:29:3d:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A1:E4:44:26:67:D1:60:2C:E6:EF:FC:48:F8:4D:A9:7D:58:4D:4A
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:b7:12:a7:73:6c:5a:ef:fd:cc:68:f1:d0:64:2d:44:a5:
b6:c1:0d:7e:44:4c:ce:5b:87:c8:eb:cb:5c:ca:fe:a2:53:1f:
aa:82:90:74:29:d0:0a:d3:11:ca:da:fe:29:47:9d:0a:86:04:
ed:98:d6:2d:d1:d2:db:b5:e1:43:6a:d4:5f:17:4e:44:94:7a:
5f:fd:cb:9b:c5:4c:1f:d1:9e:48:58:87:e0:b1:82:40:f0:52:
62:49:cf:0e:d5:7c:f3:a0:1c:e1:3d:a6:3c:a2:67:06:8b:08:
5b:b2:63:10:4e:64:64:22:ac:f5:8f:26:88:c5:df:e3:86:bb:
61:4d:e4:92:44:f1:85:25:4f:3c:54:47:ff:4f:61:08:ed:5e:
9d:df:2d:00:6a:b1:1f:5d:74:f5:ce:68:c4:5a:4a:3f:20:d7:
ea:7f:52:58:94:68:e6:2b:13:da:e2:a0:bf:36:ab:28:7d:a1:
ad:a4:3f:30:54:f9:75:01:36:32:54:31:1d:c6:78:9a:d1:5b:
04:7c:83:a3:cd:a8:c7:a5:93:b5:fb:b7:ee:16:25:1e:a8:19:
f6:91:d1:e8:83:87:48:65:bf:d4:9b:6c:99:1a:f1:22:e7:e9:
17:b7:e8:9e:c8:73:b0:4d:9c:a2:97:63:77:f9:8a:58:f9:d2:
55:54:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:59 2025 by rpki-client