Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: SuMv0QqXdAeOGrKUQzu/qHddahoPl49RIDZjph2BhUE=
Subject key identifier: 38:42:17:41:A1:45:5B:62:D6:AF:ED:96:AF:CC:5F:F3:5E:DC:EC:77
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 019A71B7FDC242DC98F9858D9BF89F5F00EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 03D0
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: 0e3sS9CozbiQb6cxzll4NxVcU4WA1kRby86NqJ90Uqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fd:c2:42:dc:98:f9:85:8d:9b:f8:9f:5f:00:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=38421741a1455b62d6afed96afcc5ff35edcec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:d3:c6:18:3c:dd:25:a4:a3:c7:07:2a:11:
e7:00:2d:21:58:06:41:8f:4a:2a:84:db:e7:40:0b:
01:b6:01:67:03:50:66:89:d4:40:a3:fe:5a:6a:ac:
3a:20:3f:bf:a7:7a:56:1b:9b:9a:51:41:93:fb:d7:
20:70:5d:05:2d:8d:52:e5:b5:ec:6e:c1:1d:94:a2:
ad:88:18:4d:e1:e4:84:40:2d:9c:84:5e:ab:ba:33:
ca:31:43:2d:be:99:e4:cd:17:db:07:ce:95:96:ca:
74:1f:cc:62:e7:9c:ad:c8:2c:de:2b:60:5e:d5:e1:
a5:e2:98:f9:3e:e4:a7:c1:ec:78:11:12:39:3a:43:
ef:fd:5f:37:b1:03:37:a6:ee:4b:35:ac:48:16:42:
4e:b5:03:63:f4:75:9e:d8:5b:c7:e7:b1:82:23:6a:
a2:a5:74:12:59:c8:e8:42:3e:aa:8e:f1:37:8f:7c:
41:bb:7c:43:cb:21:8f:9b:de:78:0e:06:6a:75:e3:
39:89:d6:16:59:6c:e4:8b:16:03:33:e2:4b:90:24:
da:54:69:d4:92:d3:73:dc:bd:45:cb:91:f6:f1:af:
65:c0:fe:6d:bb:31:89:07:cd:be:9e:30:51:ad:ad:
d0:70:6c:af:98:cc:7a:0a:84:8f:25:15:1d:f4:44:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:17:41:A1:45:5B:62:D6:AF:ED:96:AF:CC:5F:F3:5E:DC:EC:77
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:15:c0:60:a9:6e:70:2a:36:4d:4e:36:4e:c5:64:52:c9:fb:
ad:52:47:4c:da:c5:f2:9e:6f:56:6a:4d:69:2d:d7:be:47:fa:
da:da:64:6b:d5:60:97:6b:72:a1:d1:12:21:dc:ee:29:68:62:
05:5a:d6:fd:67:e7:db:96:ee:82:c9:f0:62:5d:f3:3c:ae:bc:
eb:fa:c3:83:bc:bf:b4:c5:1c:53:70:98:eb:90:28:fe:bc:e9:
58:a6:ed:00:85:16:e5:d5:a4:81:ef:be:fa:98:7d:f2:54:3c:
f7:d1:d5:ef:33:ee:d3:77:e8:f3:79:78:fe:1f:bb:3a:1a:ff:
fb:dd:53:53:e7:60:b1:a5:b5:26:2b:48:ba:96:48:cb:ea:9d:
9f:32:fa:a1:28:06:a8:14:10:10:6c:55:25:16:6f:43:0b:59:
2b:68:f2:e3:a9:0c:19:73:5f:1d:ef:75:24:91:29:c1:32:5a:
4b:4e:29:6a:6d:4d:83:e8:78:a5:49:fd:f1:13:4e:fb:80:a3:
dc:6e:45:e2:3c:a3:39:a4:6d:4f:8f:33:ae:21:b9:7a:e7:4c:
89:87:ba:75:1e:c2:c4:70:02:84:57:de:3d:5e:04:43:5f:31:
96:66:90:16:df:53:5a:17:02:40:da:fb:66:e9:93:79:67:f8:
3c:ee:a0:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt/3CQtyY+YWNm/ifXwDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4M2ZiMzdkMWZiMGNjZDIxNmRhZGVjNDAwMDk1NjFhODQ0
YWE4M2IwHhcNMjUxMTExMDcwMTE0WhcNMjUxMTEyMDcwMTE0WjAzMTEwLwYDVQQD
EygzODQyMTc0MWExNDU1YjYyZDZhZmVkOTZhZmNjNWZmMzVlZGNlYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh7Txhg83SWko8cHKhHnAC0hWAZB
j0oqhNvnQAsBtgFnA1BmidRAo/5aaqw6ID+/p3pWG5uaUUGT+9cgcF0FLY1S5bXs
bsEdlKKtiBhN4eSEQC2chF6rujPKMUMtvpnkzRfbB86Vlsp0H8xi55ytyCzeK2Be
1eGl4pj5PuSnwex4ERI5OkPv/V83sQM3pu5LNaxIFkJOtQNj9HWe2FvH57GCI2qi
pXQSWcjoQj6qjvE3j3xBu3xDyyGPm954DgZqdeM5idYWWWzkixYDM+JLkCTaVGnU
ktNz3L1Fy5H28a9lwP5tuzGJB82+njBRra3QcGyvmMx6CoSPJRUd9ESMsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhCF0GhRVti1q/tlq/MX/Ne3Ox3MB8GA1UdIwQY
MBaAFEg/s30fsMzSFtrexAAJVhqESqg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQt
ZWUzY2E3NGJiYjc5LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQtZWUzY2E3NGJiYjc5
LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRXAYKlu
cCo2TU42TsVkUsn7rVJHTNrF8p5vVmpNaS3Xvkf62tpka9Vgl2tyodESIdzuKWhi
BVrW/Wfn25bugsnwYl3zPK686/rDg7y/tMUcU3CY65Ao/rzpWKbtAIUW5dWkge++
+ph98lQ899HV7zPu03fo83l4/h+7Ohr/+91TU+dgsaW1JitIupZIy+qdnzL6oSgG
qBQQEGxVJRZvQwtZK2jy46kMGXNfHe91JJEpwTJaS04pam1Ng+h4pUn98RNO+4Cj
3G5F4jyjOaRtT48zriG5eudMiYe6dR7CxHAChFfePV4EQ18xlmaQFt9TWhcCQNr7
ZumTeWf4PO6g8w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:23 2025 by rpki-client