Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier: vaW8cu3yjl3f81ke7yoTR47Ai3hECQ+QvtAaxqezD9E=
Subject key identifier: C9:C4:C4:57:47:42:44:F3:D8:03:78:80:4D:85:81:FD:7D:8A:24:19
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 0197C72655ED4862D9D6B908468D362DB2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number: 12CE
Signing time: Tue 01 Jul 2025 18:01:07 +0000
Manifest this update: Tue 01 Jul 2025 18:01:07 +0000
Manifest next update: Wed 02 Jul 2025 18:01:07 +0000
Files and hashes: 1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: 5Sc5MuYBoMyKHJ6kkB96BUzj4f5hxAUsPKzr6tbtXxU=)
2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:55:ed:48:62:d9:d6:b9:08:46:8d:36:2d:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Jul 1 18:01:07 2025 GMT
Not After : Jul 2 18:01:07 2025 GMT
Subject: CN=c9c4c457474244f3d80378804d8581fd7d8a2419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:41:14:a2:ff:e5:5d:59:36:79:fd:f1:0a:
80:3b:45:ad:ca:87:01:35:cd:b2:ad:d2:51:b5:98:
c2:c7:c1:cd:ea:76:0d:15:4a:12:37:98:1f:1f:74:
98:53:f8:b1:18:f1:a1:a5:7c:64:d7:47:6d:1a:fa:
d1:eb:c1:97:83:83:a3:c9:bd:4d:5c:a7:52:27:1b:
d5:0c:0e:7a:8a:ea:3c:b9:7d:1f:1a:c7:6b:2f:c1:
3b:51:f0:5b:4f:c1:a4:45:a3:da:c2:f4:6c:c0:8d:
3d:18:42:27:3a:73:e1:e4:01:3c:b3:90:36:c5:8a:
e2:b5:6e:3f:83:61:d7:90:f8:ac:1e:26:ab:ee:90:
6e:95:aa:61:f9:94:3d:08:e8:31:b2:05:de:ed:ce:
3d:76:0f:e4:d2:36:4e:bd:a9:1f:18:9c:08:a9:75:
4b:19:13:c1:d5:2f:ea:bb:d6:18:05:62:58:bf:ea:
48:c9:0f:ac:c1:6f:02:d2:a8:b8:a4:66:9e:3c:a5:
80:f9:b2:41:f3:f8:e3:0c:16:ef:51:bc:f5:2f:e4:
46:94:87:ae:bd:b3:de:7c:ba:58:26:7e:a5:cb:23:
4f:d3:9b:4a:00:fc:55:76:21:3c:4d:85:90:f5:00:
00:af:b9:a6:34:fe:99:a5:19:ea:23:55:de:c7:e0:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C4:C4:57:47:42:44:F3:D8:03:78:80:4D:85:81:FD:7D:8A:24:19
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e6:bc:4b:76:7c:e4:55:e7:71:65:96:01:00:84:86:fa:a4:
f0:97:71:a9:f1:06:80:16:e1:41:55:74:7c:90:2a:d1:51:62:
2c:62:17:02:b5:14:7a:09:df:46:07:e0:be:e9:15:21:49:a1:
71:29:31:f2:39:c0:d0:7a:4e:dc:9e:52:ae:cb:44:d6:41:5c:
e2:d6:39:61:8a:9b:4e:c8:15:f3:9f:2c:49:63:e3:37:eb:55:
42:69:3a:ea:62:c5:5e:39:32:15:67:14:1c:61:ee:17:a0:69:
85:10:8a:a6:78:4e:8f:d4:ca:b1:ca:93:e6:71:55:78:c7:65:
4f:89:41:30:17:d1:dd:26:a8:21:ae:81:e6:35:44:53:d2:80:
9d:5c:6b:22:c6:43:58:2f:84:cc:71:a5:c8:9f:a0:5f:07:ba:
d4:17:ec:fe:7a:9b:0a:e7:8c:6a:5e:78:03:3b:44:b3:6a:69:
fa:58:d7:46:a8:d3:26:9f:6b:15:b3:77:f3:8e:84:5c:99:72:
e3:86:0a:67:c2:ad:de:c7:9a:ac:c7:4f:f7:07:f2:05:48:86:
46:0d:4e:1b:b2:44:50:a5:8d:93:f6:ec:0c:c9:0d:b3:3d:f7:
d1:37:05:be:37:14:6c:3d:d5:d3:30:c2:d5:11:b2:b2:06:62:
14:52:25:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfHJlXtSGLZ1rkIRo02LbK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDdmMGZkNjIyYWZkNmJkNGEyZDZjZTBmMWNiY2MwN2E5
YzQxZjEwHhcNMjUwNzAxMTgwMTA3WhcNMjUwNzAyMTgwMTA3WjAzMTEwLwYDVQQD
EyhjOWM0YzQ1NzQ3NDI0NGYzZDgwMzc4ODA0ZDg1ODFmZDdkOGEyNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu1BFKL/5V1ZNnn98QqAO0WtyocB
Nc2yrdJRtZjCx8HN6nYNFUoSN5gfH3SYU/ixGPGhpXxk10dtGvrR68GXg4Ojyb1N
XKdSJxvVDA56iuo8uX0fGsdrL8E7UfBbT8GkRaPawvRswI09GEInOnPh5AE8s5A2
xYritW4/g2HXkPisHiar7pBulaph+ZQ9COgxsgXe7c49dg/k0jZOvakfGJwIqXVL
GRPB1S/qu9YYBWJYv+pIyQ+swW8C0qi4pGaePKWA+bJB8/jjDBbvUbz1L+RGlIeu
vbPefLpYJn6lyyNP05tKAPxVdiE8TYWQ9QAAr7mmNP6ZpRnqI1Xex+DsDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnExFdHQkTz2AN4gE2Fgf19iiQZMB8GA1UdIwQY
MBaAFGXX8P1iKv1r1KLWzg8cvMB6nEHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYt
OGJlNGFkNTc3NzNiLzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYtOGJlNGFkNTc3NzNi
LzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEua8S3Z8
5FXncWWWAQCEhvqk8JdxqfEGgBbhQVV0fJAq0VFiLGIXArUUegnfRgfgvukVIUmh
cSkx8jnA0HpO3J5SrstE1kFc4tY5YYqbTsgV858sSWPjN+tVQmk66mLFXjkyFWcU
HGHuF6BphRCKpnhOj9TKscqT5nFVeMdlT4lBMBfR3SaoIa6B5jVEU9KAnVxrIsZD
WC+EzHGlyJ+gXwe61Bfs/nqbCueMal54AztEs2pp+ljXRqjTJp9rFbN3846EXJly
44YKZ8Kt3searMdP9wfyBUiGRg1OG7JEUKWNk/bsDMkNsz330TcFvjcUbD3V0zDC
1RGysgZiFFIlQg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:00:20 2025 by rpki-client