Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: ZJbe4k89wHS51jdq0LgTQt6hpyVPXlWPNWa9bVczfWo=
Subject key identifier: A0:84:F1:E9:15:3F:FC:4B:CB:D4:6F:B7:45:99:DD:0A:FB:20:D1:6B
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 01989223DE64DF575B836FB10D1AE6B0DE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 04:01:20 +0000
Manifest this update: Sun 10 Aug 2025 04:01:20 +0000
Manifest next update: Mon 11 Aug 2025 04:01:20 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: 2JrWW8M+lL4O5PyGfFHE9gso1Mst41kNKCHzk0u16x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:de:64:df:57:5b:83:6f:b1:0d:1a:e6:b0:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Aug 10 04:01:20 2025 GMT
Not After : Aug 11 04:01:20 2025 GMT
Subject: CN=a084f1e9153ffc4bcbd46fb74599dd0afb20d16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:c3:60:c4:2a:7d:b5:8a:7a:9e:71:36:6d:
79:d2:6e:47:e8:68:e1:16:f1:92:4c:83:3a:2c:3b:
7a:0e:7b:8f:c0:99:a7:8a:77:3a:3c:82:18:40:fc:
1f:a7:bf:63:d0:e0:d8:ca:6c:ca:f3:bf:05:44:9e:
32:5f:a2:fb:1a:69:98:41:92:8d:1f:45:13:32:96:
71:05:4c:ed:ca:2d:ee:c5:17:e4:82:9d:e0:cb:c0:
ff:ee:1b:c3:07:89:76:59:82:77:ed:e4:15:40:97:
f5:8d:3a:02:09:fe:ec:50:79:a6:25:a5:2b:74:0e:
d5:df:80:d4:ff:6b:b9:f4:72:25:b8:89:b8:8a:f2:
93:d9:0a:1b:59:be:76:b2:d5:5e:44:70:fc:7e:4d:
80:d9:d2:f9:ac:7a:a1:a1:be:80:00:42:f4:c8:e2:
29:61:ce:20:c2:81:4f:b2:13:54:b5:2b:d2:ab:14:
f1:ee:73:3d:e0:66:84:72:e5:4a:ab:af:50:69:e7:
ad:11:ad:b3:5f:30:5f:5a:70:44:56:5d:1d:df:a7:
87:e2:76:99:b0:88:ba:ba:47:e7:2b:ce:75:bf:2f:
20:1b:08:1e:b3:96:0a:95:75:48:3a:6c:de:b2:7d:
96:33:c9:08:63:53:ef:4b:57:9a:b1:11:fc:ff:77:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:84:F1:E9:15:3F:FC:4B:CB:D4:6F:B7:45:99:DD:0A:FB:20:D1:6B
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:49:3d:98:38:0c:73:b1:ad:c6:5a:29:d2:ab:0a:30:dc:4a:
7c:5f:12:fb:17:51:3e:31:99:9c:bf:a6:4d:d0:a8:f3:44:14:
38:36:e4:fc:4d:5c:7e:e9:6d:63:4a:b8:6d:e2:ef:70:06:d4:
da:fc:25:99:8c:e7:e0:7f:4c:1c:1d:37:5d:18:4e:22:42:95:
b8:7c:c7:63:a6:97:71:45:e5:02:b8:7b:74:98:54:2e:6c:16:
58:4e:41:b0:b2:a1:f3:54:96:0b:61:99:8e:00:ec:40:d7:f4:
df:99:95:2e:8c:36:dd:76:89:4a:87:c4:f4:7e:b8:c7:58:b0:
36:5b:ff:68:a3:bd:0e:12:72:c1:a4:30:b7:e9:bd:75:93:4a:
40:b2:a6:fd:58:42:1a:60:60:36:52:71:24:20:ea:8a:5e:bb:
f8:8d:3e:eb:12:91:98:15:19:2c:31:3e:11:bb:f5:04:2f:8f:
c8:e0:af:d9:c0:c2:23:84:c2:4a:2e:ba:9f:ea:d9:94:72:7d:
a8:ae:77:71:77:69:c3:33:28:49:02:e6:35:d2:05:29:bc:ef:
ff:a9:51:8f:30:ed:8e:15:0a:09:63:0b:f9:e1:9d:f7:5f:79:
e4:bc:1b:9d:4e:fa:8e:da:96:67:3f:54:17:87:73:18:04:7c:
48:aa:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:40:51 2025 by rpki-client