Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File: zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier: IwP2N25ctCgtffrLcpRHaeziXQnzGbjclSorknFHavs=
Subject key identifier: 3F:18:13:E4:61:6A:05:AB:F5:F2:FE:93:10:92:C6:23:2E:76:EF:6D
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer: /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial: 0199FC8F20D2FE6B7C7DCCFE3B247BC43C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 13:01:02 +0000
Manifest this update: Sun 19 Oct 2025 13:01:02 +0000
Manifest next update: Mon 20 Oct 2025 13:01:02 +0000
Files and hashes: 1: 748a2LHN88wONpwbpFWq4xMldnY.roa (hash: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=)
2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: 4ZF2bL9EtZ3KzROXcQOUGYo7a3BJt6re/0TD37E6sVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:20:d2:fe:6b:7c:7d:cc:fe:3b:24:7b:c4:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Validity
Not Before: Oct 19 13:01:02 2025 GMT
Not After : Oct 20 13:01:02 2025 GMT
Subject: CN=3f1813e4616a05abf5f2fe931092c6232e76ef6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:7a:22:4a:51:41:8d:43:a3:44:f7:80:18:
91:48:e0:af:54:88:23:ea:cf:fc:3c:41:30:82:f3:
5d:e0:91:36:27:63:cf:ea:0f:c4:aa:c9:4d:ca:69:
63:4f:f5:cb:07:0b:ef:da:fa:10:6f:e8:42:28:b2:
00:f2:4e:97:11:09:21:ee:46:9a:04:e5:1c:b5:85:
24:1b:f3:be:28:81:f7:a6:69:29:ff:a8:8a:3a:03:
06:e6:bb:38:09:63:0b:44:69:f5:b1:da:09:0e:6e:
20:6e:89:9f:9b:32:ee:c0:a5:85:e5:28:d4:cb:66:
79:55:28:43:53:08:68:72:10:fc:c7:64:ee:bd:b2:
f6:74:d3:4a:e4:17:e8:5c:a3:02:c9:c8:2d:84:50:
5a:a6:2b:fa:1b:53:ad:fc:31:f6:3c:3e:51:fe:d6:
7f:dd:60:81:66:67:a7:c6:4f:21:36:48:6b:f8:07:
8f:51:8e:54:15:66:d5:3d:58:7a:7e:54:b2:db:ce:
43:3f:53:06:ca:0d:25:db:aa:7e:db:3e:28:24:3d:
7b:96:fc:0b:f3:ee:0c:7e:bf:e9:bb:5d:57:5b:ac:
7c:8d:9e:9d:24:c7:d9:d1:37:98:68:2e:cc:d3:91:
27:1f:b3:21:22:d9:e1:b5:67:1e:e3:84:ba:02:56:
a8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:13:E4:61:6A:05:AB:F5:F2:FE:93:10:92:C6:23:2E:76:EF:6D
X509v3 Authority Key Identifier:
keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1d:89:d3:21:83:22:e7:c1:2b:5d:d3:4b:b0:98:fa:57:4b:
2d:c5:3e:92:0d:3f:78:af:b6:91:ea:a6:d6:2f:4a:a5:98:7f:
1b:55:73:6a:46:23:f8:94:95:54:6c:33:b3:4d:76:cc:08:23:
c0:cb:11:de:81:fd:0d:89:dd:5e:b5:d0:35:f2:60:30:03:92:
cd:f4:f9:07:47:ea:e8:d0:6a:fa:92:27:76:42:07:c7:c6:2f:
36:a3:73:6b:96:7f:82:34:17:61:06:96:96:cc:84:fc:73:7b:
82:95:ca:c4:03:18:99:7d:2b:47:19:b9:5d:f9:76:43:c1:83:
9e:04:0a:f5:ef:66:5b:fd:35:d1:26:d3:87:ad:b5:c4:62:23:
aa:e6:5f:e3:59:66:49:95:09:fd:b5:d5:bc:7a:cd:1c:2e:6e:
90:8e:5f:6b:df:96:66:8c:d9:60:ac:fa:75:33:a6:a4:d9:54:
95:ea:f5:6b:3b:8d:ed:aa:b9:98:5e:16:d0:03:e8:35:c1:9d:
8f:4c:1b:3b:ab:49:93:a0:09:9e:74:c5:67:02:bc:3d:a2:71:
40:a8:fe:6b:a5:60:eb:01:d1:cc:0c:9d:f9:61:ce:cd:48:c1:
0e:c2:10:ef:eb:d5:10:5b:ef:a3:cb:7f:8b:ad:d2:a3:01:64:
6b:47:61:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:10 2025 by rpki-client