Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File: zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier: NxAs6kR40NlhRVHL3M6k4S6wOGYdQ1G9NcQN0kOBnZw=
Subject key identifier: CE:F0:77:93:DD:7F:82:E1:FB:2B:2D:1D:4A:16:76:F5:48:46:84:60
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer: /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial: 0198D54E21746BC7F3158823C2ED1206A026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: 748a2LHN88wONpwbpFWq4xMldnY.roa (hash: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=)
2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: 3hSaxkWHzjPBMQ4F/8jKfWqRntBZEurngoit780rF10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:21:74:6b:c7:f3:15:88:23:c2:ed:12:06:a0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=cef07793dd7f82e1fb2b2d1d4a1676f548468460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:b5:48:58:ae:1c:b6:92:4d:51:c3:48:40:
ea:a1:a4:48:39:b7:f5:5c:a6:6b:40:3d:6d:91:51:
20:f2:ae:9a:4c:98:c4:55:09:42:95:33:e6:ff:85:
ad:f6:71:fa:a1:33:37:0b:1d:30:60:70:ac:cd:4d:
83:f4:0e:0a:9a:2f:4e:47:09:42:80:03:1b:97:0b:
44:f5:c4:90:74:76:3c:06:c6:d7:bd:17:49:4d:58:
ad:f6:63:de:80:bf:cf:6c:f6:7a:ad:0a:13:f6:29:
2c:90:8c:28:17:6b:9a:7e:d2:3f:32:d0:60:71:86:
d4:10:4d:f7:74:fb:d7:1e:7a:3a:c1:7b:93:ed:1c:
8c:20:2e:71:7d:de:ea:65:b0:90:1d:a6:59:ae:a0:
67:1f:71:48:18:b4:43:a1:75:0c:6f:40:aa:de:13:
9f:c5:1d:8c:29:ff:ea:1e:54:99:43:99:05:06:b1:
cf:e9:f3:03:c1:79:4c:41:ac:aa:f5:50:1b:9d:1c:
61:98:bb:92:e0:b4:55:ff:73:66:e4:a8:1e:72:10:
ed:0e:56:ad:30:6d:8e:6a:f8:60:e3:74:77:45:41:
53:0d:ae:2c:69:f9:5f:f5:58:f2:c9:20:f7:99:ea:
24:a8:56:47:53:56:37:cd:62:b2:19:6e:d7:65:4b:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:77:93:DD:7F:82:E1:FB:2B:2D:1D:4A:16:76:F5:48:46:84:60
X509v3 Authority Key Identifier:
keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:b1:87:e5:0e:8b:42:8f:f0:f3:12:85:11:b2:1a:1c:03:
36:e5:b1:6d:53:11:2d:e9:ce:7f:e4:20:63:25:37:e6:db:ab:
cb:a2:0d:cd:80:4c:df:ad:da:e1:ef:d5:f3:21:10:8e:0e:00:
4c:b0:9d:bf:ad:75:9b:9b:3b:43:72:ce:ad:72:be:ad:33:2d:
14:80:cc:59:e0:41:c8:33:6f:9d:34:cc:eb:56:d4:dd:3b:30:
a0:da:b5:a1:70:65:a2:45:04:1d:e7:a5:8b:de:45:6d:24:7c:
66:fb:5f:4b:b2:b5:15:9d:63:63:4b:54:3c:3c:99:19:88:f0:
85:53:6c:10:16:ce:52:f3:2d:9a:f7:16:b0:41:ba:fa:fe:be:
ee:d6:e0:8d:56:81:ad:27:53:99:f0:a0:18:1a:4f:bd:83:ae:
0e:30:df:f7:d6:33:f7:a6:0b:c1:b5:b6:10:fb:32:a8:41:de:
84:75:6c:69:66:1d:61:5d:b0:03:67:7a:a8:75:66:eb:25:3b:
e4:88:1c:23:d3:e0:5d:d5:13:f7:a9:b6:d0:5a:7d:62:aa:67:
5d:c3:1f:92:e2:61:7c:70:b3:ac:83:2e:e1:dd:67:49:9d:ea:
d0:28:37:4d:66:37:30:6f:ef:1c:12:09:1b:3a:54:e6:7c:73:
62:ba:33:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:24 2025 by rpki-client