Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: 30RLRTIaGuyN2OH4LCQe8FAecqi51JYLQGp4oM9/2XM=
Subject key identifier: FF:EA:5B:38:6E:B8:84:D1:72:80:9A:D8:FA:03:A1:F3:F8:50:C0:7F
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 0197488C52AA9294CB406D4A5E940151A98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 022D
Signing time: Sat 07 Jun 2025 04:00:45 +0000
Manifest this update: Sat 07 Jun 2025 04:00:45 +0000
Manifest next update: Sun 08 Jun 2025 04:00:45 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: dsnfWYaf32aSduDoC3PyWjOIz+Ro0fDr4JEqvFHrJac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:52:aa:92:94:cb:40:6d:4a:5e:94:01:51:a9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Jun 7 04:00:45 2025 GMT
Not After : Jun 8 04:00:45 2025 GMT
Subject: CN=ffea5b386eb884d172809ad8fa03a1f3f850c07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:21:21:ad:7b:4f:17:65:82:b9:30:74:6d:
d6:40:d8:c9:d0:fa:35:d0:f3:dc:a5:59:23:bd:38:
9b:db:f9:97:b5:64:83:b0:c4:dd:71:db:e7:88:2c:
31:3e:1d:e6:07:8d:87:21:e6:f2:a7:28:4b:cc:ef:
be:d9:c1:90:86:e7:81:3e:8a:76:91:26:0f:28:bc:
bb:18:ce:16:ad:5f:47:12:0c:05:7a:1d:7f:89:21:
bd:af:17:cd:0f:7f:fd:c5:64:ab:90:ad:be:ea:46:
0b:11:7f:1c:43:12:f1:85:ed:d6:19:00:e9:fd:70:
c9:48:fb:97:b8:7b:2c:19:40:8f:a1:c4:45:01:61:
b1:de:92:60:de:59:11:0b:27:60:9e:dc:8f:aa:dd:
56:19:13:f6:0c:10:6b:89:9a:1f:fe:63:6d:31:cb:
50:54:e6:5d:65:2a:ee:73:fb:66:ae:a3:2f:91:16:
26:ed:b3:17:8b:23:91:bb:2c:fa:54:9e:f8:7f:3e:
82:4b:76:e3:14:2d:c6:2c:11:d6:e0:1f:56:53:20:
1d:db:6e:ca:41:26:50:fa:a4:19:21:12:dc:6d:fb:
8c:87:d4:b4:30:99:1d:8f:37:2a:a6:3d:e0:f4:c1:
d4:7d:15:d5:86:d0:4e:aa:97:2c:ba:ca:a2:78:ba:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:5B:38:6E:B8:84:D1:72:80:9A:D8:FA:03:A1:F3:F8:50:C0:7F
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:33:5b:98:0d:b0:79:e9:d4:ca:d8:bb:3f:2d:12:51:5c:09:
1a:00:63:eb:77:c1:4f:52:61:0d:58:e1:b8:68:1e:23:53:78:
0a:ed:ed:cb:8a:e0:d2:48:4f:f6:04:1c:8f:3a:9f:e4:b8:0e:
c7:99:10:76:8c:e6:ca:a6:41:5d:2c:13:72:db:8c:67:7f:db:
1c:62:33:dd:7c:10:b2:30:28:9d:03:e3:5b:01:7c:96:a0:1c:
ac:03:ba:73:dc:85:97:1b:03:1e:63:5f:12:89:60:cc:94:f7:
e2:9d:0e:95:30:b0:cc:76:eb:db:8d:e0:1b:d3:83:7b:a1:e2:
b4:b5:24:7b:d9:c2:cf:47:b5:88:fc:92:3f:55:1e:11:59:c0:
fa:07:13:04:8c:58:fd:12:e1:76:89:b2:1b:56:50:bc:a8:94:
b2:09:3b:5e:60:33:cc:92:f6:5d:07:03:00:f5:aa:94:f1:c0:
98:f2:13:8c:cd:f4:43:dc:0e:e2:aa:8e:0d:ad:7d:54:4f:42:
13:61:a6:05:72:fb:d7:a8:c8:1d:fd:04:a6:06:b8:ee:43:c7:
d6:94:31:22:60:6f:64:41:aa:4b:8c:62:eb:86:80:9e:18:e9:
56:21:b4:aa:38:9f:70:07:e3:07:6b:a1:b1:10:42:32:76:b5:
af:57:50:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:33:09 2025 by rpki-client