Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: MMApaSogRCGmd3MwuZvt2X476s4+TFmRP4xNSb4RC+E=
Subject key identifier: 57:0E:31:4B:99:E8:B5:A3:1F:12:38:76:DA:62:2B:D0:93:9D:F1:44
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 0197B88ED1E33C7AB9FBBBAF2BEE517B9255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 0267
Signing time: Sat 28 Jun 2025 22:00:56 +0000
Manifest this update: Sat 28 Jun 2025 22:00:56 +0000
Manifest next update: Sun 29 Jun 2025 22:00:56 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: +VhDq3rvFYadoVWtvJzR4AVoDNNj8tHA2cjkj9H3ZPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:d1:e3:3c:7a:b9:fb:bb:af:2b:ee:51:7b:92:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Jun 28 22:00:56 2025 GMT
Not After : Jun 29 22:00:56 2025 GMT
Subject: CN=570e314b99e8b5a31f123876da622bd0939df144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:f6:b9:9a:e1:d4:f0:06:5b:86:85:22:4a:
07:4c:a3:da:bd:6d:e9:38:1b:cf:f2:3e:f6:4b:46:
9d:3c:96:56:56:e6:b7:37:de:94:1f:7d:9e:dd:71:
43:fa:9e:7e:f5:31:16:89:05:ac:e2:db:89:ee:5d:
ab:1d:98:1d:87:4a:b4:57:37:4f:0e:28:19:ea:14:
27:3a:7f:ce:85:d4:f1:78:59:d3:cd:f4:75:28:6a:
f0:a6:09:ae:fc:85:22:ad:20:14:96:b1:22:2f:b1:
ba:f2:4c:f8:88:0b:af:a4:d8:96:33:b4:82:ca:20:
de:f2:f9:d6:a0:8b:d2:4c:80:41:4c:f5:79:5c:d1:
ab:8c:5d:03:3c:ff:bc:c0:55:74:ab:10:47:6e:ed:
54:28:f0:69:87:95:d1:f7:99:cd:09:4a:4e:a1:c5:
98:62:0d:85:5e:43:13:c3:e0:27:7e:14:f0:d2:ac:
b0:1b:c8:e1:20:7d:5e:df:7c:7c:d8:d4:c5:af:30:
29:71:a6:d8:af:42:88:23:2f:f9:1b:fa:68:b1:60:
ad:44:69:54:0a:75:fd:eb:07:f6:9a:6f:5c:6a:55:
f0:fa:93:58:94:82:77:0b:42:ea:46:e9:89:c6:3e:
7e:d5:37:2d:75:06:ab:98:d3:ab:09:37:ac:77:c2:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0E:31:4B:99:E8:B5:A3:1F:12:38:76:DA:62:2B:D0:93:9D:F1:44
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a8:6d:b2:9f:ef:33:ec:f0:94:3b:26:48:8d:24:78:04:3f:
25:83:28:83:0c:8f:66:7a:50:73:26:df:9c:94:5c:cd:36:52:
3b:75:8a:e3:bd:4e:2e:36:20:18:12:e4:4f:d4:51:fd:f9:74:
1b:75:5e:37:aa:3b:cc:2c:03:43:d5:b6:70:b9:24:dc:96:f9:
2a:b7:b8:f0:ad:b8:b7:b3:b0:e5:0c:87:3c:cc:92:f8:14:6e:
1c:60:0e:7c:4f:6e:50:4b:83:be:17:3f:b6:d2:9b:29:1f:b7:
5d:f6:14:65:65:7c:86:cb:87:55:bc:a4:6e:06:cf:30:7f:04:
a8:bb:e1:d5:aa:f1:d3:d7:3f:b8:ca:c1:eb:fe:c9:a0:dc:7b:
c3:c3:46:7f:d1:9b:71:0c:cf:3a:a8:27:54:d6:1e:4c:99:a1:
38:c6:d2:57:0a:b8:59:d6:2a:f6:06:cd:5a:8f:f5:85:58:29:
20:53:78:b6:87:42:1b:a1:43:c5:b7:49:d0:b9:e0:e5:46:6e:
8b:29:42:f9:60:d5:31:ca:48:1a:da:ab:ff:4a:c3:40:49:aa:
b7:03:38:0d:5b:51:c7:09:03:26:1b:af:6c:05:2f:56:ac:04:
15:46:a1:ac:da:74:65:1a:4a:e0:87:81:3c:d2:6d:11:5f:ce:
fb:ce:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:22:46 2025 by rpki-client