Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier: FrA3U34e8o4j5uuoMq/3P+1/pAwCjnjXrGT+9kefAn0=
Subject key identifier: DD:1F:E5:A1:FB:B6:AC:8B:53:C2:A4:ED:4E:E8:54:3D:B4:BE:C1:29
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial: 0197B6A07B75C4A1257B7E2804C2B2C044A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number: 0C9A
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: WBHqes0mJtC4xVywIXGVPb2SNEhSke0NjRebYNjKPuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7b:75:c4:a1:25:7b:7e:28:04:c2:b2:c0:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=dd1fe5a1fbb6ac8b53c2a4ed4ee8543db4bec129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:c1:8b:39:68:53:26:50:47:b9:d8:49:df:
89:d9:5d:72:98:d6:91:b7:b3:b8:bd:63:0f:42:68:
93:1a:94:ea:58:ad:7d:bd:1c:c5:44:1a:6a:a6:16:
7f:08:0b:aa:81:de:75:d8:6b:61:49:6c:a2:26:28:
2a:60:cb:a9:5e:7f:5f:78:be:bc:0d:bb:55:c8:76:
a6:c3:59:3d:c8:ad:2d:e9:93:51:61:89:bc:30:a5:
c9:a2:a3:b1:86:70:c3:be:5d:46:f4:4d:6f:a0:20:
09:7b:8a:5b:0f:64:1f:a0:0e:ef:7f:e7:11:1c:2c:
52:5f:ee:13:b8:ca:fd:35:ed:77:4f:be:31:02:3c:
3c:51:da:8e:37:1c:00:82:b6:57:41:78:c8:21:ce:
a2:56:1f:0d:da:d5:ae:c6:e8:67:05:93:76:e0:2d:
4c:fc:ab:3a:47:78:60:a9:be:5b:c9:21:33:8c:5d:
42:07:69:0f:19:89:52:f1:19:a4:9f:de:bb:ab:b7:
7b:3a:43:2c:be:53:e0:32:cf:9f:7a:9e:55:f1:61:
d3:26:16:f5:9f:45:c6:6f:2d:67:e3:f4:39:9f:36:
c2:01:42:59:a2:60:f7:24:0f:46:0c:91:f6:ca:6c:
7a:12:98:3c:67:04:ea:59:ab:5a:b7:65:00:01:a9:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1F:E5:A1:FB:B6:AC:8B:53:C2:A4:ED:4E:E8:54:3D:B4:BE:C1:29
X509v3 Authority Key Identifier:
keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:de:7e:58:21:10:39:26:d0:b2:31:7c:39:4d:78:01:44:
47:30:a5:84:7f:2b:a9:29:3d:f2:38:a7:14:af:10:7d:3b:96:
0d:55:55:16:f3:d3:62:ec:76:93:25:30:a9:9d:11:a5:f5:cc:
61:ca:ad:f0:b9:b5:67:6b:80:39:f5:16:e4:fa:43:53:e5:9a:
15:8c:fa:7e:90:cb:1c:13:95:a9:fd:62:3b:a6:29:66:34:77:
7c:40:c5:94:ef:95:71:60:83:e8:01:27:9c:36:bf:6c:80:2b:
e3:44:68:7a:e4:7f:14:29:98:ca:02:b0:5c:bf:c6:0e:8a:5a:
68:7b:c2:86:a4:ed:d3:a1:4f:08:a9:cb:71:68:a7:52:c3:ab:
ae:0a:5e:8e:c4:8a:cb:94:95:b0:c9:86:79:dd:7b:8e:e2:ad:
e7:91:5a:aa:dc:18:03:2c:8f:b1:ee:f5:68:f0:bd:87:fa:43:
bc:a2:11:53:7c:dc:c4:a3:b8:65:3e:26:5d:38:7b:57:15:47:
16:48:a2:51:33:cd:1d:95:21:60:bf:7a:86:7a:a1:74:02:22:
e0:f7:d8:a8:f7:6f:48:43:7c:b3:64:4b:39:2f:15:7e:16:40:
d2:b7:a7:4e:36:1e:8c:e7:1c:ea:bf:e9:a5:46:00:3e:53:16:
e2:d7:ae:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oHt1xKEle34oBMKywESlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NmQ1ZmIwOThjNDMzMGViN2E2NTE4ZDkwMzY0MmRhMzYx
OWIwNDcwHhcNMjUwNjI4MTMwMDU5WhcNMjUwNjI5MTMwMDU5WjAzMTEwLwYDVQQD
EyhkZDFmZTVhMWZiYjZhYzhiNTNjMmE0ZWQ0ZWU4NTQzZGI0YmVjMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBnBizloUyZQR7nYSd+J2V1ymNaR
t7O4vWMPQmiTGpTqWK19vRzFRBpqphZ/CAuqgd512GthSWyiJigqYMupXn9feL68
DbtVyHamw1k9yK0t6ZNRYYm8MKXJoqOxhnDDvl1G9E1voCAJe4pbD2QfoA7vf+cR
HCxSX+4TuMr9Ne13T74xAjw8UdqONxwAgrZXQXjIIc6iVh8N2tWuxuhnBZN24C1M
/Ks6R3hgqb5bySEzjF1CB2kPGYlS8Rmkn967q7d7OkMsvlPgMs+fep5V8WHTJhb1
n0XGby1n4/Q5nzbCAUJZomD3JA9GDJH2ymx6Epg8ZwTqWatat2UAAald0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0f5aH7tqyLU8Kk7U7oVD20vsEpMB8GA1UdIwQY
MBaAFEltX7CYxDMOt6ZRjZA2Qto2GbBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzkt
MWJmMGE4MGYwOWM0LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzktMWJmMGE4MGYwOWM0
LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT3eflgh
EDkm0LIxfDlNeAFERzClhH8rqSk98jinFK8QfTuWDVVVFvPTYux2kyUwqZ0RpfXM
Ycqt8Lm1Z2uAOfUW5PpDU+WaFYz6fpDLHBOVqf1iO6YpZjR3fEDFlO+VcWCD6AEn
nDa/bIAr40RoeuR/FCmYygKwXL/GDopaaHvChqTt06FPCKnLcWinUsOrrgpejsSK
y5SVsMmGed17juKt55FaqtwYAyyPse71aPC9h/pDvKIRU3zcxKO4ZT4mXTh7VxVH
FkiiUTPNHZUhYL96hnqhdAIi4PfYqPdvSEN8s2RLOS8VfhZA0renTjYejOcc6r/p
pUYAPlMW4teuZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:32 2025 by rpki-client