Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier: f19BpQncshjA7O0Pnq8A75X7ya1bcxPtzBgHfBkUudM=
Subject key identifier: 8C:C4:78:12:40:CA:DB:29:0E:CD:BB:26:C6:36:4A:3F:0E:7B:72:64
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 0199FC21B7BADC6764703F85C450E76F4742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number: 09B2
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: RpILInX8NStLNGo-i8gOsmzL6zY.roa (hash: FpLee9KVIm2tnuSw+HOBh77bwO/f6Y21iVU1yWYIf/s=)
2: bt4jZ_Fg1p7_W1scNCt1lEzJp-I.roa (hash: NTiQWaRJGSQ8lYqtebC2mqNAEmw3CSrzTGYD0GLgxFA=)
3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: BL+egRN2rDjjliNEeOJ2d6WfIntAQd025yhcXxjfwf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b7:ba:dc:67:64:70:3f:85:c4:50:e7:6f:47:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=8cc4781240cadb290ecdbb26c6364a3f0e7b7264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:4a:6c:f8:93:1d:9d:86:fd:0c:1f:1a:b8:
0c:eb:da:14:ca:7e:83:f0:b6:68:75:78:b0:70:33:
66:91:2a:ac:58:20:44:ad:78:58:05:a6:db:6b:60:
d6:06:49:c8:cb:21:e5:5b:a0:63:fe:d7:9e:03:83:
e3:46:07:c9:c3:e4:47:42:42:85:a7:ef:6b:0e:b9:
61:b8:04:67:ef:ed:75:c8:ad:81:32:79:ac:45:54:
fa:56:f4:28:72:df:62:c4:e7:99:d6:e7:de:68:ee:
7c:18:a3:69:ac:d2:9c:12:3e:f5:94:b0:4e:d9:af:
bf:21:7b:7c:ba:81:c5:9c:f8:08:b8:74:40:56:62:
ee:2e:88:98:99:60:a4:ad:79:5c:85:9a:40:10:39:
4a:22:5a:e7:c9:71:64:3f:a5:c9:0f:b1:3e:23:72:
d0:23:99:69:9c:83:d8:0b:f1:e4:2d:95:b8:6f:45:
f5:f4:b8:9c:26:82:d2:d4:bc:f9:7d:6b:33:35:7d:
16:c1:4e:be:bf:4f:a4:e7:5c:5d:01:60:59:e1:01:
2a:a3:f8:00:83:48:01:a2:d5:a2:02:cf:4f:0b:79:
31:b3:8a:56:99:30:16:ae:28:33:25:c8:36:3d:90:
52:67:9f:ad:05:08:13:6b:58:68:a6:ad:8d:d2:28:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C4:78:12:40:CA:DB:29:0E:CD:BB:26:C6:36:4A:3F:0E:7B:72:64
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:b8:10:a8:e3:c5:43:c9:8f:69:8e:0f:f6:4b:88:df:06:
8a:3b:52:48:88:b5:76:7c:86:6c:3b:b7:70:65:33:5f:1b:9c:
f8:a1:a1:1e:29:77:12:61:0f:a7:af:11:05:89:b1:be:2a:36:
4c:c2:64:23:35:18:82:45:7d:34:02:33:6e:1f:23:18:0a:20:
1a:9e:6f:c4:d0:99:60:df:38:b0:5f:14:3c:99:33:5c:e2:2b:
6e:da:11:50:93:ea:41:a0:c8:ed:9e:e9:44:41:23:82:5e:c8:
09:91:86:2c:0b:a1:bb:f8:ac:ec:89:5a:db:53:92:e7:41:c2:
1c:d0:50:d5:98:49:59:14:c0:fa:aa:a3:da:6b:20:a6:e6:b2:
9a:12:f9:a3:6a:a5:70:e6:fc:ab:f4:a2:59:7c:84:d0:45:20:
63:65:33:0f:d6:61:4b:57:50:5e:f1:d4:86:4a:27:d5:ca:98:
f6:e4:fa:f8:34:41:82:5c:a8:4b:ec:d1:54:1e:df:2b:ce:e5:
50:f4:df:2b:59:d2:cb:21:bd:82:80:99:0c:13:73:ae:14:38:
9b:8d:b3:27:60:42:7c:47:2a:1e:3e:a3:ab:52:e9:d7:16:a7:
74:ba:14:ae:bb:2f:fd:a8:2d:7a:8d:0c:11:04:4e:5d:98:1b:
1f:69:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:03 2025 by rpki-client