Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier: /QE04eChNgAZ2MyA5JD5C2EDVhJwqkChEEbGQSYGTNg=
Subject key identifier: 81:C9:C6:DC:10:E6:5D:13:F7:A2:97:0E:08:B0:78:A0:E5:75:D7:5D
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 0198D583BBF10FA5B1A5FBC96CF3795476DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number: 135A
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: upLxtqftOvUgsnxTmYkE/0obt5lowqiXPivf7bZM5s0=)
2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bb:f1:0f:a5:b1:a5:fb:c9:6c:f3:79:54:76:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=81c9c6dc10e65d13f7a2970e08b078a0e575d75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:3f:f6:64:dc:ee:a8:1c:61:60:a6:d3:7b:
fa:e7:2f:1f:9b:f5:93:4a:62:13:f0:08:8f:79:8c:
e3:ee:d5:9b:42:b7:25:c8:26:8c:1e:e2:11:75:9d:
18:1e:94:e6:0d:db:e4:f0:5b:be:04:5a:dc:b5:81:
48:7a:da:65:01:c4:06:e5:cc:4a:bc:86:db:0b:f1:
33:80:70:c9:5d:2f:74:5f:81:79:ca:a0:59:a0:92:
82:e8:4e:5a:b9:e8:b7:64:3e:87:d5:94:f5:31:dc:
f0:e9:58:dc:2a:9a:32:a7:31:e6:ae:42:db:0a:52:
cd:e2:67:2f:fa:2b:fa:5c:50:af:aa:24:14:aa:0b:
63:52:54:7e:9e:71:7a:5b:ea:7d:d9:37:12:cb:77:
12:a6:f2:6a:e3:ea:6f:ab:3e:c3:09:9c:6d:e4:f5:
60:a6:fb:80:fe:8a:26:b9:15:b2:7f:c4:91:ad:82:
01:f2:0c:83:0d:fb:2c:0e:5e:62:fb:b1:2f:4a:a2:
db:96:43:6b:98:a3:6c:ae:de:fe:fe:94:18:4d:64:
f3:c0:08:5e:35:83:6e:5f:80:f7:e5:4b:e1:52:c2:
f9:63:dd:3f:35:a0:5e:02:d6:ca:9c:07:cb:09:60:
94:98:da:18:10:10:4b:54:07:58:4b:48:6c:07:ac:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C9:C6:DC:10:E6:5D:13:F7:A2:97:0E:08:B0:78:A0:E5:75:D7:5D
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:18:79:ed:bf:2d:a0:a2:38:fc:98:94:f6:33:1c:65:d7:c3:
65:0b:79:c3:30:21:d9:ff:2d:d7:15:f0:f4:8a:a5:e1:d2:a0:
5c:9c:19:67:bc:23:42:9b:c9:c2:57:f2:63:54:f6:a4:5c:9b:
8e:ab:7c:40:b5:25:18:6a:e5:ac:bd:df:a2:d7:1f:ed:bc:df:
a9:32:49:07:94:c2:e8:5a:76:01:9e:70:91:43:15:7f:7d:1a:
f3:9e:7e:d0:e4:a5:fe:99:63:d9:19:4e:b1:b9:9d:0a:50:e0:
39:4c:db:39:18:17:90:cf:47:0e:de:7d:0e:9c:5a:35:c3:9b:
3d:4d:33:2c:4d:4d:17:14:a3:5e:4f:6a:61:23:13:e2:f9:c6:
02:4c:20:b8:a6:0e:be:a0:06:c8:68:72:e9:6b:d0:4a:ff:0a:
a4:e4:7a:30:2a:f6:e1:92:90:7e:c3:3d:d6:bf:cd:12:66:5c:
e8:c0:24:a2:71:a9:97:d2:90:97:2c:9f:a7:18:f9:64:d4:25:
5e:7b:d6:4a:aa:1d:3c:cb:ae:64:8e:d2:05:33:bf:f4:14:27:
91:11:2a:28:c8:2e:16:53:99:f3:a8:81:e0:4f:09:03:8b:a4:
d7:d8:17:7d:d4:64:17:30:92:ac:7e:b1:42:4d:13:63:85:f8:
d3:8e:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:44 2025 by rpki-client