Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: EwAwQHLhaTcsZelOE4awkBpliylM0mbnCK6nNTZ/PDE=
Subject key identifier: BF:B4:E0:DE:76:6D:5B:1B:7D:AE:81:9D:32:56:AE:43:EB:72:F2:75
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 0196B7B5509B2183B3FA3C8A5E7E7824A954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 01E2
Signing time: Sat 10 May 2025 01:00:35 +0000
Manifest this update: Sat 10 May 2025 01:00:35 +0000
Manifest next update: Sun 11 May 2025 01:00:35 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: oowv3Lfpf/8a78dpbnobgYm5vJvMbwb3zS//AdfuY/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:50:9b:21:83:b3:fa:3c:8a:5e:7e:78:24:a9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: May 10 01:00:35 2025 GMT
Not After : May 11 01:00:35 2025 GMT
Subject: CN=bfb4e0de766d5b1b7dae819d3256ae43eb72f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:50:59:1d:c1:d3:f7:fb:b9:bb:2b:ef:3c:
e3:f6:8d:2f:cc:4b:58:e8:18:22:f2:c4:e1:29:e0:
4e:f0:e8:6e:f8:4f:b2:7a:37:c4:ec:c3:c7:09:a9:
82:1d:e7:e8:a1:c2:e4:69:f7:59:c0:50:b3:f7:9f:
cb:b4:31:a8:62:81:67:38:1e:db:e4:77:9e:0d:61:
ea:f3:84:b4:dc:03:5d:ee:a4:01:43:cc:df:23:60:
64:74:7b:86:d1:a1:6e:c4:4a:c8:e5:de:e8:c4:4b:
e2:7d:72:b2:2a:da:a7:48:63:67:77:96:ee:f9:70:
30:31:d4:d8:21:d0:63:e7:d3:f1:10:42:88:73:84:
c5:75:99:7f:ed:9f:85:80:dd:82:be:2a:4e:83:c2:
d7:68:f3:06:91:d7:d0:c4:f6:c6:fb:fe:44:85:ee:
69:63:60:a3:47:da:4b:d3:37:92:d5:1c:a3:e9:5a:
e6:63:2d:c1:6b:fa:99:d7:b3:cf:fb:a6:92:a3:68:
6c:00:21:94:43:53:c1:d5:eb:2c:d4:4a:14:2f:09:
21:18:28:77:35:61:0e:b9:ca:41:24:78:45:da:0f:
d6:1a:2b:62:5e:46:78:ce:05:d9:cc:00:15:79:23:
bb:33:35:aa:cf:47:d8:11:8c:11:6e:06:b4:8c:c2:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:E0:DE:76:6D:5B:1B:7D:AE:81:9D:32:56:AE:43:EB:72:F2:75
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:31:e0:7b:79:50:d6:36:c5:76:5f:73:c5:d9:69:fb:bf:42:
a8:98:23:01:67:88:ba:68:3d:6c:c3:62:cd:19:ed:d9:46:9b:
20:3b:1d:c1:6c:98:ec:e1:8b:ef:1f:85:ca:05:53:c8:36:ca:
f6:c8:f6:5e:2f:5a:7c:5b:e5:56:f2:65:50:6e:ba:0f:c0:98:
90:d8:e2:5d:45:b4:b0:ae:ce:5c:51:25:a5:99:d9:02:db:b5:
33:3d:5f:1d:46:f3:13:dd:d6:5c:26:b8:fd:fb:f7:10:ae:89:
d9:17:46:63:4d:ca:e5:ea:d4:1b:76:c2:f5:0f:35:10:7e:68:
48:64:2a:97:4d:cc:cc:bc:f9:f2:d6:01:1d:5a:b6:36:5d:a7:
72:b4:6b:fa:4e:29:4b:b9:72:4b:11:70:0c:9f:76:d9:9a:8f:
ec:10:0b:38:80:be:fa:54:64:b9:3a:a3:dd:7f:ab:99:95:91:
4c:c8:87:ea:c7:e1:96:82:6a:b5:7b:fd:70:dc:c1:79:d1:66:
78:a8:ea:5d:ed:9a:1b:5c:c4:8e:60:4a:0d:5c:ed:51:f8:54:
4f:49:9b:88:ba:03:f5:49:c2:90:1c:ea:3a:64:6c:2f:9d:8b:
76:ea:03:c1:93:19:7f:db:ae:56:fd:2d:25:04:aa:16:a6:f4:
41:73:c6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:14:14 2025 by rpki-client