Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: 2BJqspXnp3SCAePSZYuQ8069NLURdSw30WvzBzu3Rbo=
Subject key identifier: 17:58:C3:AC:2E:78:DA:0C:05:AB:B7:DC:B9:68:37:AB:27:F8:27:0A
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 019A4D0610DA7AC741403AC60731334BDD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 03BD
Signing time: Tue 04 Nov 2025 04:00:34 +0000
Manifest this update: Tue 04 Nov 2025 04:00:34 +0000
Manifest next update: Wed 05 Nov 2025 04:00:34 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: 572/uAAOdS6uCyJtNnIOU2+tpjcEhWuPlqzXmGWE8aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:10:da:7a:c7:41:40:3a:c6:07:31:33:4b:dd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Nov 4 04:00:34 2025 GMT
Not After : Nov 5 04:00:34 2025 GMT
Subject: CN=1758c3ac2e78da0c05abb7dcb96837ab27f8270a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:80:27:70:f8:6b:27:a2:d9:3a:11:76:21:
41:ba:55:2c:67:38:25:3f:cc:b1:c6:34:c5:8a:15:
96:b6:52:70:06:77:8e:4c:64:34:39:92:64:48:c6:
2d:27:80:34:e0:93:00:cf:24:79:fb:df:8f:16:ef:
ca:66:90:c7:aa:84:0a:97:e5:cd:17:2d:9d:8b:b2:
85:1f:5e:c0:c5:7c:2b:df:0a:c2:16:0a:e1:1e:df:
fe:2a:93:6c:46:92:c1:95:fc:df:cc:27:d1:f5:df:
98:1b:8b:f0:4f:4e:07:85:05:f1:f3:f8:4f:d8:50:
1d:75:c9:98:dc:67:3d:a2:32:5b:c1:37:6b:c1:81:
e6:9d:ea:56:3f:4d:0f:d7:08:13:19:91:a6:a3:3a:
a5:10:6c:ae:a9:24:3a:9a:92:0b:1d:f8:a6:95:da:
43:f1:86:ab:a9:31:e8:42:e3:44:87:bf:95:54:b1:
7f:74:94:9e:0c:3f:13:f8:b9:27:0f:40:2d:9c:c0:
19:f6:8b:73:0e:85:1d:a6:33:3a:2b:57:c1:c7:26:
fc:53:e1:4d:c2:e7:93:66:ae:e8:07:17:af:50:c9:
bf:54:a9:be:fa:78:52:dc:ae:f5:2f:74:9e:c0:0a:
fb:a7:70:9c:35:87:ff:15:6a:43:3d:bb:43:5f:ed:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:C3:AC:2E:78:DA:0C:05:AB:B7:DC:B9:68:37:AB:27:F8:27:0A
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ac:b5:ca:14:04:0f:1a:14:f0:13:52:2f:9a:d8:d9:5a:19:
99:59:ca:c3:e2:98:45:ab:69:2a:e0:f9:62:01:05:09:5d:f4:
c1:ee:ae:9a:90:0f:4a:46:cf:54:18:4e:91:38:5b:0f:88:6d:
9a:85:38:7c:ad:e9:e5:1c:0a:44:0e:cc:40:44:f1:ee:b6:74:
1a:82:96:68:9e:f8:c3:69:19:88:f8:66:0d:c2:3e:9c:69:d6:
8b:35:37:be:76:0c:fa:3b:b5:49:a1:e7:a0:94:91:b6:d0:b0:
dc:e9:36:1c:69:da:35:84:3e:c3:98:96:d9:7a:08:c8:ee:7e:
65:b7:f9:cd:3a:7c:d2:5c:65:2a:64:3f:89:8f:2a:79:65:07:
ff:04:c0:6a:9f:9c:ff:36:d7:e5:6b:9f:32:14:45:23:53:49:
6f:6e:a8:10:ce:25:8a:21:b4:f7:a6:a0:66:15:31:22:a4:5b:
cb:63:ed:2f:80:29:0a:78:d0:4b:2f:ae:a3:1a:69:da:6e:7d:
d2:68:c6:8d:9f:68:32:0b:bc:f5:09:7d:38:b0:87:7b:d3:0b:
50:8c:76:6f:13:f7:a3:04:69:81:c9:29:54:d2:49:63:80:60:
00:61:94:0d:c8:12:78:00:d9:6f:20:0a:36:cb:69:43:c7:05:
0f:5b:e5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:11 2025 by rpki-client