Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: lg6+V2pHB6yTZvp2ObN4FfN/pY925dfKEjj1el1Q4J8=
Subject key identifier: 8F:F6:4C:63:22:51:30:3E:0C:06:8A:C9:FB:5A:42:34:92:B9:32:2A
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 0196839110BD2EA8DA07B799795E1ECAE6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 01C7
Signing time: Tue 29 Apr 2025 22:00:44 +0000
Manifest this update: Tue 29 Apr 2025 22:00:44 +0000
Manifest next update: Wed 30 Apr 2025 22:00:44 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: 7Rkrr1BzdsiJRcsjS6Ay9oShVZb+dTUgKCHkWPtFVDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:10:bd:2e:a8:da:07:b7:99:79:5e:1e:ca:e6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Apr 29 22:00:44 2025 GMT
Not After : Apr 30 22:00:44 2025 GMT
Subject: CN=8ff64c632251303e0c068ac9fb5a423492b9322a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:7e:0e:eb:d1:98:28:69:68:07:6c:37:1e:
1a:31:d9:74:6d:26:44:67:cd:62:46:c1:e8:26:3f:
25:f2:52:e0:5d:b0:26:ec:15:95:cf:66:ad:c8:2f:
ee:42:40:a0:79:30:ae:c8:fc:70:23:dc:45:c3:6c:
70:95:13:60:fc:22:0a:5a:4b:fc:d8:08:0b:05:2b:
ce:ca:39:3a:9e:b6:63:d8:1f:36:99:9a:52:a6:f3:
40:1e:30:f7:fb:ec:04:70:0d:c2:f5:50:53:c3:12:
06:eb:03:92:8e:51:d1:22:bb:ee:79:84:e8:59:b8:
52:b2:8e:f8:dd:2f:71:bb:92:54:cc:cc:a4:5d:bf:
2a:d3:a7:c8:4f:02:b2:cf:e9:ca:5a:77:db:6a:cb:
76:a5:8b:15:44:a5:3e:d2:75:a3:db:96:46:d6:a4:
db:73:e7:5d:a7:69:7c:c1:9e:23:ee:6f:4a:e2:9c:
c4:38:39:bd:96:01:a8:d5:a5:76:b0:00:ca:38:11:
56:b9:98:8b:02:0b:16:1e:b3:07:8e:15:a6:f0:52:
56:7d:80:b4:dc:a8:f0:13:a2:d3:4f:77:95:ff:66:
49:31:3b:d9:00:e7:53:c3:19:6f:59:43:93:8d:bd:
78:af:99:e7:00:8b:b4:42:e0:c1:f9:8b:57:95:3d:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:4C:63:22:51:30:3E:0C:06:8A:C9:FB:5A:42:34:92:B9:32:2A
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:31:a9:99:ad:b0:11:f9:b7:9b:45:c2:fd:05:de:98:2c:
9d:90:55:76:8c:2a:8a:c5:58:57:e2:a4:b0:d7:1c:59:2f:2d:
50:b7:9f:8a:cb:2e:aa:91:f0:60:2b:f8:c7:1a:89:da:d2:cb:
4d:24:ce:b0:f4:d9:df:f6:87:23:7b:9e:9b:fc:d3:a2:58:37:
ff:5a:f5:ac:5b:d5:4b:b3:d8:07:1e:62:14:c4:80:00:e4:9c:
d2:42:ec:79:45:7b:83:60:1a:b9:ba:95:45:a0:03:c5:e4:c3:
b6:9f:10:5b:0f:1f:e2:7e:00:8a:79:c8:b3:31:e8:bc:38:ca:
5a:5b:e5:99:36:77:1d:5f:c3:d4:2b:2b:0a:5b:46:07:b0:38:
b3:37:0f:d1:20:fb:1c:d0:90:9c:a6:f5:6b:58:58:37:fd:49:
50:6b:d6:4d:d9:65:96:7c:76:5e:58:fe:e1:32:d3:87:1d:1f:
50:b7:6b:a2:54:ec:4f:70:2b:1c:ca:fd:d2:f5:1a:ab:79:74:
d8:34:fc:a2:7f:7a:39:43:28:bf:21:04:af:d5:5e:50:f2:27:
12:e2:92:04:70:ad:d5:de:09:ad:53:1a:75:8e:14:3a:39:56:
f5:ea:28:3d:21:df:06:0a:d3:6e:a9:8c:a4:4e:72:65:13:cb:
60:e6:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:28:22 2025 by rpki-client