Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: IdG/1iK76YInSvZBS/O76gHKPqquiKXhIclzuIR+63I=
Subject key identifier: E6:A6:28:C4:5A:EC:0D:FC:99:D3:81:CF:C0:FD:C7:18:11:67:B9:71
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 01976D3DD76D450DAA5CABC86DBD80E206CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 0240
Signing time: Sat 14 Jun 2025 07:00:58 +0000
Manifest this update: Sat 14 Jun 2025 07:00:58 +0000
Manifest next update: Sun 15 Jun 2025 07:00:58 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: BXwR38mA6rJKoNPgJ+Q6aag4GV2+aHfkUV3f/8HeEe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d7:6d:45:0d:aa:5c:ab:c8:6d:bd:80:e2:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Jun 14 07:00:58 2025 GMT
Not After : Jun 15 07:00:58 2025 GMT
Subject: CN=e6a628c45aec0dfc99d381cfc0fdc7181167b971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:db:51:b2:b8:78:6e:ff:69:e0:71:a1:ed:
58:ed:18:71:7e:c1:92:16:75:37:9a:81:b7:69:0d:
7d:40:90:b4:8f:38:54:65:2b:5e:ab:29:fc:72:f2:
4e:8f:5a:2a:b4:c1:b2:84:d7:e8:c9:8d:db:6d:33:
dd:d0:82:e1:21:ce:cb:17:31:4a:d9:ea:19:87:f3:
5e:fc:16:0e:d7:a1:c5:46:57:7e:71:9a:61:e8:54:
4f:47:42:40:be:3b:2a:a0:f6:09:2e:7d:92:ce:0a:
b4:9c:17:85:41:2f:e9:19:ac:7b:14:6a:64:92:d0:
ea:ff:98:b9:cf:6f:5a:86:55:79:db:5e:7c:c9:ce:
e8:46:23:74:09:f4:8d:07:f2:ff:28:5d:29:29:fd:
d6:66:23:93:e4:c7:e4:a2:40:4e:ff:56:ef:78:c3:
d9:92:3e:7c:82:64:fb:8f:f1:27:95:8b:04:b0:7c:
48:ad:1f:43:fa:24:7f:c2:be:4a:72:82:f6:b4:a0:
28:96:0b:ed:e4:47:fc:5b:cd:24:79:f1:4b:5c:e0:
ea:71:47:bb:a1:20:f8:21:a5:6e:ec:a4:20:4f:4d:
07:10:b2:88:9e:e6:8c:10:87:3a:55:ef:bc:ca:e9:
2a:dd:76:e9:88:bf:85:44:14:39:f3:9e:84:ae:d0:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:28:C4:5A:EC:0D:FC:99:D3:81:CF:C0:FD:C7:18:11:67:B9:71
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cc:49:7b:27:7a:ef:a0:48:d4:26:c6:43:4c:22:8a:3e:75:
77:fc:e9:17:64:fc:38:11:22:9c:b7:2d:d2:df:e0:df:63:7b:
9f:bb:25:e7:b6:06:f6:dc:a6:7d:56:42:96:ae:f9:68:e6:5f:
1b:a7:4a:fa:99:71:d3:5c:ec:38:45:91:ed:e0:e4:e9:a9:db:
ec:9c:c6:8f:46:99:11:69:cf:a5:ac:2c:ce:bd:e9:9e:44:d1:
59:69:55:11:b3:ee:f6:0e:64:b5:85:f4:46:72:a3:3d:d2:d0:
a7:63:6c:2e:a4:2a:77:a0:fe:1f:7d:bf:5d:8b:3a:a5:e0:bd:
10:e9:e3:c5:88:53:99:4c:d9:bd:09:ea:96:7e:66:88:30:9a:
f1:85:b1:84:c1:1b:c3:a7:bc:72:dc:1f:e5:b7:47:a6:ab:8d:
3b:13:8d:26:9c:de:95:71:53:1a:22:b4:e3:a3:4a:c2:85:0c:
0d:17:71:34:81:00:82:08:ea:54:32:4a:fb:59:96:15:3f:65:
10:32:2b:1c:e2:8f:81:c9:42:c6:db:1c:32:b2:7c:08:7c:5f:
ef:2e:88:c2:32:fd:35:6b:a1:a2:20:91:e1:f2:3f:50:13:45:
ec:ea:1a:5c:f5:89:8d:86:f6:89:81:80:17:e7:6b:f3:cb:28:
88:8b:36:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:43 2025 by rpki-client