Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier: WK2QWN1C03nmZGDaH2GbneCcGWsz0PMYjaZZS0Y2Mcs=
Subject key identifier: 74:77:FA:24:46:A9:49:ED:D7:57:8F:8A:90:DB:7C:AF:D1:11:CA:2D
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial: 019A4E18F29ABCFDD08C0AC5D4EE99EAB93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number: 141D
Signing time: Tue 04 Nov 2025 09:00:49 +0000
Manifest this update: Tue 04 Nov 2025 09:00:49 +0000
Manifest next update: Wed 05 Nov 2025 09:00:49 +0000
Files and hashes: 1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: ilFsGxHK/5DecFhTky1LWhzohD9oNeeTG421XtUwb/c=)
2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f2:9a:bc:fd:d0:8c:0a:c5:d4:ee:99:ea:b9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Validity
Not Before: Nov 4 09:00:49 2025 GMT
Not After : Nov 5 09:00:49 2025 GMT
Subject: CN=7477fa2446a949edd7578f8a90db7cafd111ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:ea:6c:2e:f7:cc:69:33:cc:92:56:64:7b:
4e:84:05:e2:24:05:a1:06:9f:bf:1d:48:25:ea:9b:
12:56:20:e0:27:9f:90:e3:e8:c5:33:42:15:00:3b:
84:07:15:73:17:c9:da:50:76:ae:4c:ae:4b:d6:83:
5b:e2:00:0e:b2:f7:a5:1e:b9:c8:1b:f0:00:00:d6:
29:1d:ca:8f:9a:65:89:38:8a:43:f2:ce:ea:22:2e:
ce:28:a2:d6:a8:06:56:02:54:5d:4c:00:6e:26:ca:
21:f1:f2:42:3d:b2:53:07:f0:0d:e3:83:fd:da:c6:
3a:5d:57:f5:2f:61:7a:71:61:c7:90:ae:37:98:34:
30:18:66:30:2f:de:86:91:45:6a:ca:08:af:01:90:
16:76:49:6d:8c:a2:75:97:48:be:5a:51:c4:d9:12:
8b:78:72:dd:dc:7f:56:12:34:bf:eb:b5:ee:25:a9:
49:05:45:5e:7e:e0:d5:2b:8a:68:0d:9f:61:25:4d:
ab:b9:8b:9d:d6:55:f3:d8:83:de:0d:eb:d1:72:a6:
a8:2d:9e:db:9b:76:6b:e4:f6:c1:1a:75:e4:40:e8:
c2:c4:e0:47:41:84:54:6a:f1:3d:49:56:94:39:fe:
7f:88:65:09:93:08:5e:1e:4b:6a:f1:11:7c:e1:c9:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:FA:24:46:A9:49:ED:D7:57:8F:8A:90:DB:7C:AF:D1:11:CA:2D
X509v3 Authority Key Identifier:
keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4c:3e:0a:c2:2f:dd:cb:ac:33:07:74:e1:a0:9e:fc:44:31:
d8:65:39:97:22:d5:7f:0c:d2:95:0d:18:39:cd:56:b7:0b:5e:
4e:f7:e5:29:23:0f:a6:cd:98:17:91:b1:e9:d1:77:db:1b:57:
2c:57:6c:40:cb:af:0e:4c:88:91:88:1d:4c:2e:0a:80:d1:78:
82:9f:a9:6d:7e:83:63:07:45:30:bc:10:19:18:39:8f:d2:d6:
e6:d2:0c:b6:6a:0f:cb:7b:0d:18:a7:e4:90:03:f6:41:85:d1:
02:cf:38:5f:f8:9d:39:f7:77:91:10:73:2b:cc:e5:a4:51:75:
dc:a6:6f:6b:d5:75:99:1f:51:89:d7:f0:8a:46:9f:f2:06:4b:
0c:e6:c3:01:4c:f2:f7:02:f0:46:5f:1c:ca:81:43:8b:9d:bf:
24:71:37:e7:77:70:9c:97:49:0a:5a:ec:a4:41:db:af:15:df:
53:14:52:5b:11:f0:d6:ba:28:f7:d2:45:3f:4a:71:aa:00:4a:
b6:b1:50:0c:37:25:f6:8a:6b:67:76:09:4d:1a:78:b8:78:ee:
77:a0:02:fc:cb:30:c3:b3:fc:c2:6a:4d:c8:d7:a9:ae:67:02:
43:76:dd:2f:46:bd:22:be:a7:c3:a1:53:ca:08:68:5c:11:53:
b7:e6:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:01 2025 by rpki-client