Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: N9HmFzfePXyuKdYfDjSGAnD8nMGUWrAbFKMlitcX/rE=
Subject key identifier: 64:FE:AF:48:DB:2D:36:9A:49:22:9C:9E:86:77:77:49:F5:C2:29:3D
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 0199FBEBEA27CFC81908243716B795AED4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 0393
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: vxlqAlFNo4fhlOT5nFrpEEsGNs419495sV13V9+ITFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ea:27:cf:c8:19:08:24:37:16:b7:95:ae:d4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=64feaf48db2d369a49229c9e86777749f5c2293d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:6e:b9:d4:8f:55:ba:c0:c4:02:6b:28:44:
4a:51:3d:55:d8:e0:cd:4f:8a:c1:9e:38:80:56:9c:
86:a1:70:94:af:7b:37:52:c5:e5:e5:6a:07:07:00:
8a:54:05:1b:42:cd:8a:d9:13:ee:e9:d4:9a:a9:85:
4e:bc:ee:28:8a:26:2d:f4:56:7c:45:62:39:64:3c:
20:dc:8b:32:ec:c9:2f:fc:c1:1c:d3:17:79:5a:da:
20:1b:be:28:60:b7:d7:56:4d:fa:a1:81:ff:7e:74:
6e:c4:a9:9f:a1:95:db:ee:3b:4b:62:18:64:19:31:
48:b8:87:cd:04:23:93:9a:32:15:4c:ab:6d:dd:53:
41:7e:89:24:50:bc:47:f1:7d:ec:49:0d:24:ae:9f:
98:12:bb:c2:f2:bb:36:dc:86:00:5c:62:10:a6:69:
41:49:ac:99:bd:a1:f0:00:79:51:16:31:f4:c2:81:
77:be:e4:e8:58:89:c7:42:89:72:c3:1d:83:0f:3e:
96:79:9a:3a:99:12:9d:5f:0f:86:6d:40:5c:e7:f6:
a8:51:4f:8b:46:86:d4:9b:cd:06:5f:75:b9:c6:57:
4e:6f:10:89:0a:48:a2:38:a2:61:e9:66:a7:38:31:
66:87:d7:8e:23:49:60:bc:38:35:43:b7:42:c2:62:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:AF:48:DB:2D:36:9A:49:22:9C:9E:86:77:77:49:F5:C2:29:3D
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e6:cf:e5:3d:72:38:3d:2a:17:12:14:f5:19:6e:03:10:43:
80:2d:12:52:b7:68:50:51:58:a7:aa:10:19:b3:41:6d:78:9d:
6b:48:9c:d2:04:98:d8:dd:bb:5e:d4:8d:0c:45:70:ca:69:1f:
6b:f6:b7:a0:c6:83:5a:eb:5e:be:a2:39:8b:4e:c4:57:ca:39:
0b:11:d8:73:9f:ff:10:37:66:3e:ec:f9:57:c8:64:6b:be:10:
90:0c:c4:9e:30:99:3b:e7:be:cd:16:34:86:e3:cb:c6:5a:97:
49:5e:ad:4d:37:d3:eb:82:58:d1:cb:2f:29:d2:95:d3:24:f5:
a0:1c:41:04:26:a3:98:7c:ac:97:8a:cd:24:19:2a:08:34:81:
d0:48:e3:43:e8:46:5a:0b:ca:94:87:39:be:ae:89:da:97:d3:
9d:15:d5:0f:d2:27:b9:0a:c4:c2:70:48:e6:a5:87:25:e7:e1:
33:40:e4:0d:6c:c3:84:58:bd:17:78:6d:e8:87:30:31:73:8e:
52:3c:e0:5a:1c:af:e6:76:d0:c7:85:06:81:1b:4b:92:d7:ca:
ff:41:4d:9a:ea:08:f1:26:ad:88:15:6a:e4:f3:d0:b4:6e:f1:
85:96:90:17:e6:ad:fe:f2:ae:26:1e:18:cc:a0:ee:c5:17:2c:
60:1e:dd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:49 2025 by rpki-client