Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier: jbQATdjMdkAnTIRdM2DioH6/u3QdoHi6b11t2q1DtJQ=
Subject key identifier: 1F:FD:D7:5D:6A:F2:97:E5:E8:BF:FE:38:6D:A6:FC:10:80:94:A6:42
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial: 0198D66063FC554D168BC7E2FD373518D3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 10:01:37 +0000
Manifest this update: Sat 23 Aug 2025 10:01:37 +0000
Manifest next update: Sun 24 Aug 2025 10:01:37 +0000
Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: NqSuJbR2muPwm0uvLQ6gaaXPSKCti5RWKzOX0CFAXz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:63:fc:55:4d:16:8b:c7:e2:fd:37:35:18:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
Validity
Not Before: Aug 23 10:01:37 2025 GMT
Not After : Aug 24 10:01:37 2025 GMT
Subject: CN=1ffdd75d6af297e5e8bffe386da6fc108094a642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:32:d1:bc:1d:69:be:9d:cc:be:a9:30:5c:
e6:53:97:76:ff:ab:7b:84:93:1e:91:b6:9a:ec:7e:
38:33:c6:25:97:ea:66:37:99:19:d7:bc:59:72:ce:
87:9a:e6:56:6b:f5:b2:b2:bc:f6:0e:be:e4:7f:3f:
19:45:ea:78:66:04:91:c0:00:ce:21:8f:57:ad:1d:
6c:bd:80:49:a2:90:74:25:7b:13:17:83:44:51:f7:
f6:10:c6:78:ef:ba:cf:3b:fb:86:76:39:ba:a3:91:
1c:e7:d7:8b:79:33:99:d1:90:1b:b1:e0:0e:50:ee:
28:3b:60:db:dc:99:a8:d8:20:e8:c0:c5:17:31:e4:
86:52:a2:b3:54:97:2e:d2:ad:bd:1d:db:2f:eb:a5:
ad:d3:83:e3:6e:a9:7d:74:03:55:d1:7f:3f:a1:53:
35:83:18:6d:7e:a0:c3:ed:aa:cb:4a:a1:db:c9:88:
3e:fe:96:69:8c:89:65:34:a5:66:9c:ea:c4:c6:aa:
d4:aa:e6:ef:01:3b:f5:fb:4b:34:77:fc:49:11:ce:
6d:40:3f:bb:11:46:da:d3:18:96:32:b3:23:21:42:
89:68:d7:79:18:01:ba:8d:f2:a9:d4:fb:16:a6:04:
a6:db:fe:78:bf:34:70:35:d2:9d:59:3b:33:74:81:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:D7:5D:6A:F2:97:E5:E8:BF:FE:38:6D:A6:FC:10:80:94:A6:42
X509v3 Authority Key Identifier:
keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c6:22:54:86:37:47:b5:06:b4:b1:2d:82:a4:bc:a0:bf:f6:
18:6a:0c:e9:dc:83:c5:d0:38:f1:07:e6:ec:2f:5b:4a:20:ba:
55:45:2e:9d:d4:e5:16:89:82:84:b8:7b:d6:0e:d0:7d:4d:9e:
ec:71:01:ee:71:9e:ab:7a:7b:d2:1b:8a:63:af:68:4b:9f:1c:
14:bc:2d:2d:3c:98:77:e1:ff:c7:20:c1:65:76:18:8d:f0:b2:
c7:2b:21:dd:2c:1d:fd:42:e5:23:1f:41:6c:1f:7b:a7:a1:a7:
86:b3:7a:45:ff:84:a6:ed:27:2a:62:0e:6f:73:81:94:5b:cb:
bc:63:a0:d7:ea:5a:b1:de:74:24:5d:81:14:3f:b5:5f:e0:cf:
dc:b1:e0:dd:13:a5:2a:48:82:a8:0f:56:49:10:2b:4d:15:14:
12:b8:9e:1a:96:2b:e5:83:86:9c:76:e9:8b:08:60:34:dc:f1:
e8:ac:3f:68:90:2a:be:c1:5a:32:60:1f:21:e4:c9:1e:54:18:
b5:cd:1b:01:46:02:bd:52:e9:a1:df:dd:3f:be:ff:5d:9e:98:
1f:12:0a:b9:63:d3:e2:6f:3e:2a:2b:b4:04:83:bc:fc:40:12:
c3:ce:6f:2d:9c:ba:b9:72:93:01:fd:64:a9:0f:82:16:92:9a:
b2:0d:2b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYGP8VU0Wi8fi/Tc1GNPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NmQ1ZmIwOThjNDMzMGViN2E2NTE4ZDkwMzY0MmRhMzYx
OWIwNDcwHhcNMjUwODIzMTAwMTM3WhcNMjUwODI0MTAwMTM3WjAzMTEwLwYDVQQD
EygxZmZkZDc1ZDZhZjI5N2U1ZThiZmZlMzg2ZGE2ZmMxMDgwOTRhNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B0y0bwdab6dzL6pMFzmU5d2/6t7
hJMekbaa7H44M8Yll+pmN5kZ17xZcs6HmuZWa/Wysrz2Dr7kfz8ZRep4ZgSRwADO
IY9XrR1svYBJopB0JXsTF4NEUff2EMZ477rPO/uGdjm6o5Ec59eLeTOZ0ZAbseAO
UO4oO2Db3Jmo2CDowMUXMeSGUqKzVJcu0q29Hdsv66Wt04Pjbql9dANV0X8/oVM1
gxhtfqDD7arLSqHbyYg+/pZpjIllNKVmnOrExqrUqubvATv1+0s0d/xJEc5tQD+7
EUba0xiWMrMjIUKJaNd5GAG6jfKp1PsWpgSm2/54vzRwNdKdWTszdIGR/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/9111q8pfl6L/+OG2m/BCAlKZCMB8GA1UdIwQY
MBaAFEltX7CYxDMOt6ZRjZA2Qto2GbBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzkt
MWJmMGE4MGYwOWM0LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzktMWJmMGE4MGYwOWM0
LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsYiVIY3
R7UGtLEtgqS8oL/2GGoM6dyDxdA48Qfm7C9bSiC6VUUundTlFomChLh71g7QfU2e
7HEB7nGeq3p70huKY69oS58cFLwtLTyYd+H/xyDBZXYYjfCyxysh3Swd/ULlIx9B
bB97p6GnhrN6Rf+Epu0nKmIOb3OBlFvLvGOg1+pasd50JF2BFD+1X+DP3LHg3ROl
KkiCqA9WSRArTRUUErieGpYr5YOGnHbpiwhgNNzx6Kw/aJAqvsFaMmAfIeTJHlQY
tc0bAUYCvVLpod/dP77/XZ6YHxIKuWPT4m8+Kiu0BIO8/EASw85vLZy6uXKTAf1k
qQ+CFpKasg0rhg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:48 2025 by rpki-client