Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: vGyqXf7hcFYFPv4X/AUjylksKpCBRuMv9EKlKV0wc34=
Subject key identifier: 58:4C:46:D8:0B:FE:14:7E:46:31:2E:C8:44:2A:F3:6C:70:61:08:A3
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 0199239F7F4E876D53ADCC3512B3961BAAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 0323
Signing time: Sun 07 Sep 2025 10:01:19 +0000
Manifest this update: Sun 07 Sep 2025 10:01:19 +0000
Manifest next update: Mon 08 Sep 2025 10:01:19 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: Gjwyby5hXB7KSEYXbeWeTDP/I2OuQmyJcyz4jhupqkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:7f:4e:87:6d:53:ad:cc:35:12:b3:96:1b:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Sep 7 10:01:19 2025 GMT
Not After : Sep 8 10:01:19 2025 GMT
Subject: CN=584c46d80bfe147e46312ec8442af36c706108a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:45:86:6f:72:86:1d:7a:28:6a:ac:78:e6:9e:
49:36:01:f6:22:ea:30:80:60:9d:e1:99:e4:9c:91:
e5:84:53:4f:0d:f3:3b:63:6c:0c:22:9a:cc:f6:81:
34:2f:16:30:15:db:1e:bd:f0:5a:74:bd:7d:cf:88:
f8:fa:34:d7:43:30:7d:32:7f:8c:38:c4:9e:c3:76:
35:d1:de:6c:d6:b4:66:8d:6c:5a:5f:14:69:ad:5b:
1f:d8:19:92:37:49:75:75:ab:af:16:69:59:9e:49:
77:1e:63:e0:0d:b1:a7:5c:3d:3b:fb:7b:5f:8d:95:
e1:20:97:17:00:7b:70:65:d2:44:fc:3e:e7:bf:3a:
62:65:2a:ff:20:13:ce:1c:4b:45:0f:97:4c:19:9b:
e3:9e:17:6b:6a:0b:8a:5a:9d:1d:6e:4c:eb:78:ba:
27:dd:28:6f:5b:aa:76:d3:f3:bb:3b:8c:4f:34:38:
0d:08:bb:88:6d:a7:7e:08:77:9a:f5:c6:7e:4c:ac:
e1:40:e2:37:ba:31:22:af:65:2d:01:00:5c:b0:6a:
f5:b1:5d:11:cf:60:57:bb:9d:ea:be:f0:8a:3a:3b:
aa:f8:eb:c9:93:c9:33:45:d4:d5:8d:53:9c:f2:0d:
bc:b8:b0:42:9e:49:e1:8e:8e:60:35:76:6a:e0:84:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:46:D8:0B:FE:14:7E:46:31:2E:C8:44:2A:F3:6C:70:61:08:A3
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5e:44:ce:aa:23:bc:a7:ad:ea:77:06:6c:5a:c7:2a:d7:f5:
15:5b:ae:c2:9c:6a:29:45:d1:ed:f1:cb:f6:bf:a5:79:6c:29:
45:22:75:c5:c4:51:f5:31:93:4c:4c:21:d5:6e:08:58:b5:79:
64:57:a6:bd:65:84:1e:75:c9:5e:b6:08:2e:ca:a8:68:cd:39:
7e:64:81:c0:b8:05:6e:1c:b3:cf:1d:5a:9d:c3:f5:f4:62:ac:
07:5c:a7:d0:e7:9d:6f:24:af:6c:96:ad:49:3e:0e:68:cc:a6:
b5:1d:ad:e4:0c:5b:a2:f9:8b:cb:49:ce:51:a9:bd:be:aa:92:
9c:94:a5:2a:15:9b:6b:6e:1e:da:b3:63:c4:a8:d9:b9:1b:91:
dc:66:4a:36:06:fc:2a:2b:25:68:15:80:02:4d:c9:6b:1e:d9:
79:3c:15:a2:c0:0a:e6:03:3c:57:4e:fd:1e:05:2e:40:c3:35:
b1:ee:4e:d4:99:20:54:ef:cb:f4:29:b4:1d:91:27:c8:26:88:
bb:a2:d6:89:ad:be:f4:49:b4:1a:48:c7:39:c9:94:25:dc:e6:
82:05:ca:e8:51:2d:84:96:3b:b2:2c:e7:90:22:b8:95:4f:3b:
94:a8:66:b8:88:cc:1e:01:e0:2c:8c:5a:b0:60:bb:f0:91:94:
17:a6:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:15 2025 by rpki-client