
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: b5nupFymykFHj5qK/9DPdHMrllDtlAeTOdbOsg90aoI=
Subject key identifier: 28:2E:66:0A:44:74:93:D6:3A:7B:B2:34:20:4D:E8:EE:00:26:DF:2C
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 01964D7E65F9DDAE258594652E992848D3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 01AB
Signing time: Sat 19 Apr 2025 10:00:51 +0000
Manifest this update: Sat 19 Apr 2025 10:00:51 +0000
Manifest next update: Sun 20 Apr 2025 10:00:51 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: DaW+4y8zNW5+DGGgWbrqxU3g42omohRSxzD6atWTH/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:65:f9:dd:ae:25:85:94:65:2e:99:28:48:d3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Apr 19 10:00:51 2025 GMT
Not After : Apr 20 10:00:51 2025 GMT
Subject: CN=282e660a447493d63a7bb234204de8ee0026df2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:d0:05:97:70:07:ec:56:79:8c:2b:f0:40:
9c:ed:a6:ed:f4:63:09:60:a9:eb:30:cc:73:57:c4:
74:bd:76:00:e8:40:39:8b:b0:25:93:6b:66:45:13:
0e:75:6c:90:fa:84:19:39:ba:1e:36:b0:1e:ec:1c:
24:ef:59:6e:87:bd:48:20:ca:fc:48:35:45:a6:49:
b2:96:41:cc:2a:0a:ae:ca:85:0a:31:f0:d7:5b:0d:
d9:05:c1:8e:6b:19:a6:f2:53:41:24:8a:ba:c3:99:
71:6f:f0:e7:26:26:53:d5:62:13:97:e2:44:fd:f6:
bd:60:a6:33:b4:25:1e:e6:ea:27:af:d0:39:e3:7e:
0e:32:31:f3:ed:e7:3a:46:a6:2e:f9:e6:05:f8:bd:
c7:32:a4:b9:89:46:4b:44:c2:c4:9d:cf:3d:47:df:
56:25:74:dc:1c:5a:14:fb:b8:ba:fa:2c:52:eb:48:
a9:a4:bf:e5:fc:63:75:41:0f:3b:c5:d8:1e:b3:22:
2c:61:77:fd:9a:1e:3c:19:06:9e:1d:15:09:5b:9b:
f4:45:35:d9:9f:ac:04:e9:c7:d7:c4:6f:80:01:e2:
1b:bf:92:39:e4:54:2c:66:a8:a4:e1:db:66:8a:26:
51:9f:4f:e0:83:8b:14:cf:0c:44:20:40:93:73:46:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:66:0A:44:74:93:D6:3A:7B:B2:34:20:4D:E8:EE:00:26:DF:2C
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:61:5a:67:9a:b9:e3:6c:b0:6a:ac:2b:c1:39:df:4d:69:f5:
78:97:60:ec:2a:45:df:32:1d:81:49:f9:1d:23:61:df:e2:c1:
ff:09:0b:94:35:5a:e1:e5:c3:05:27:72:9f:6b:47:f5:cd:27:
99:b9:6b:16:17:50:39:21:c1:c2:e0:be:2b:1b:99:23:61:bf:
cd:6e:70:66:25:cf:a2:11:6a:c6:00:d8:be:2c:d6:11:6a:8d:
bb:0d:df:49:6f:c9:f5:f1:a3:39:5f:f3:b0:f5:d4:0c:de:cd:
f2:cb:de:a9:64:a4:3c:f5:d0:8c:a7:11:e0:38:bf:bd:75:40:
c6:8f:ef:ee:56:4c:7a:94:fa:37:33:92:3b:d4:a7:5f:84:76:
be:76:fd:b2:24:64:88:31:b1:1b:23:5f:48:44:2b:1d:bc:90:
81:d2:80:05:fc:c4:d9:fc:a8:07:3e:12:88:d0:d8:28:cc:f2:
0a:7d:41:86:ee:fa:50:63:a1:1e:23:b3:ac:ff:b7:d7:85:d4:
c5:9b:4d:ba:17:52:52:22:76:8e:62:bf:c8:59:fe:a8:bd:a0:
93:a7:47:37:46:47:47:ca:57:23:30:2c:49:16:d5:7d:c3:59:
5a:35:42:77:91:53:28:6d:c7:ef:f3:4b:59:b9:05:5b:1a:fd:
88:d7:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:50:41 2025 by rpki-client