Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: Bk2YkfWF9fLfJdn0bJ3kW05vXCjU3DkQ2RsN0t65/5E=
Subject key identifier: F1:1A:C6:1E:E9:57:AD:BD:75:AE:4F:3A:F3:A9:27:26:AE:70:07:BC
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 019875D0EE7E9DB17B34BD8CC5B343B86A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 02C9
Signing time: Mon 04 Aug 2025 16:01:23 +0000
Manifest this update: Mon 04 Aug 2025 16:01:23 +0000
Manifest next update: Tue 05 Aug 2025 16:01:23 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: SdV0d4jOoLG/sj/VzG4C0o6VAauGxhhtcJe0SDhPwg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:ee:7e:9d:b1:7b:34:bd:8c:c5:b3:43:b8:6a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Aug 4 16:01:23 2025 GMT
Not After : Aug 5 16:01:23 2025 GMT
Subject: CN=f11ac61ee957adbd75ae4f3af3a92726ae7007bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:1d:e7:a6:7d:b7:a0:b0:87:b7:e3:d9:c9:
d0:4a:60:d5:f2:51:f5:03:a4:a7:1d:71:e8:6b:3e:
90:55:6d:9b:32:f8:40:12:cc:a0:be:0e:a5:63:42:
b4:bd:fe:5f:28:47:e0:01:bf:7c:55:da:c1:2a:57:
d0:98:c9:bf:fe:d4:f7:fe:79:73:55:e4:8f:62:d8:
7a:7d:7d:7b:73:db:b6:74:2d:38:9c:5c:94:d5:99:
85:53:1c:05:5a:cc:3b:8e:20:d2:2a:f8:bd:b3:72:
fc:b5:07:d2:eb:ff:78:b8:fa:da:c7:27:13:33:6b:
14:0e:06:6f:2d:88:50:69:4d:a4:2b:a4:22:a6:8f:
17:99:6d:e1:9a:95:00:ea:57:37:af:ea:c7:42:e7:
2b:bb:1b:dd:9c:af:4b:a5:de:6a:21:02:87:bb:63:
1b:2b:e0:7d:ac:9d:b7:e1:d7:a5:bd:95:d1:0b:38:
a0:fe:86:42:48:00:1b:60:9e:3f:2f:91:07:5e:0a:
54:b8:75:1a:fa:0c:29:c4:72:c0:4b:6b:c1:12:06:
03:ad:fd:ff:d6:51:1a:ea:74:2c:54:91:7b:44:72:
0c:46:88:5a:8f:74:58:8e:fc:e4:aa:53:fc:9c:83:
56:b4:62:c9:cf:df:f8:8e:08:6e:1b:e4:d0:54:75:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:C6:1E:E9:57:AD:BD:75:AE:4F:3A:F3:A9:27:26:AE:70:07:BC
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c5:79:c2:15:6d:3d:c0:93:e8:63:ab:6b:bc:10:89:71:d5:
f4:36:74:dd:d1:1c:f8:46:3c:bc:53:13:47:87:bd:4a:c2:6b:
b4:93:01:92:98:93:59:18:3b:a3:07:1f:e5:c4:c8:d3:58:4c:
ae:fe:22:fd:ec:b4:36:13:be:9e:3c:bc:9c:ec:96:3d:01:2e:
6d:97:f1:9d:ed:23:e8:c0:97:6b:d7:37:38:f0:d9:d2:7c:23:
00:48:93:ff:36:a2:0e:bb:e6:96:b5:87:0a:71:12:ae:ec:9c:
8d:b7:13:59:85:03:f3:9b:8f:da:bd:e8:f1:18:99:71:81:6f:
c6:63:a7:60:5b:7d:15:9f:d7:c2:03:fe:e4:b7:9d:43:53:98:
4c:34:07:cf:92:f6:a4:38:a9:98:c0:b7:7d:f2:fc:de:b3:c3:
59:78:33:a0:41:6a:3a:4c:c2:ff:f9:d5:97:c9:ac:c1:54:6f:
d0:8e:65:0c:bf:e6:5a:26:f1:eb:d7:74:c8:31:58:1e:2d:c5:
5e:2a:4c:0b:29:90:ea:2d:52:e2:66:5a:f8:08:85:1f:85:2c:
87:1b:5e:fb:1f:72:20:25:a9:57:7f:43:da:7d:18:2f:87:d3:
e7:86:4a:30:9d:6b:85:cd:f1:7e:5a:db:ff:a2:c1:35:83:a3:
05:ec:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:21 2025 by rpki-client