Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier: TaxDZKQAyPrJ5lD90YY/hWTGNPzfHB6/WW5g9KJTOj8=
Subject key identifier: 16:66:82:41:A7:F9:21:72:CF:45:36:64:DB:DD:78:5B:A6:AB:6E:DA
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 0196BDB7600301DF4CB8771130528D811912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number: 0804
Signing time: Sun 11 May 2025 05:00:33 +0000
Manifest this update: Sun 11 May 2025 05:00:33 +0000
Manifest next update: Mon 12 May 2025 05:00:33 +0000
Files and hashes: 1: RpILInX8NStLNGo-i8gOsmzL6zY.roa (hash: FpLee9KVIm2tnuSw+HOBh77bwO/f6Y21iVU1yWYIf/s=)
2: bt4jZ_Fg1p7_W1scNCt1lEzJp-I.roa (hash: NTiQWaRJGSQ8lYqtebC2mqNAEmw3CSrzTGYD0GLgxFA=)
3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: SFqr29dQ2TlZUqPZbN/nQ2zLNP8ba4SLMgfq1luUhkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:60:03:01:df:4c:b8:77:11:30:52:8d:81:19:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: May 11 05:00:33 2025 GMT
Not After : May 12 05:00:33 2025 GMT
Subject: CN=16668241a7f92172cf453664dbdd785ba6ab6eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:73:9e:36:be:ca:7e:6d:cb:f2:8e:09:43:
54:d5:be:72:d6:55:20:6e:3d:43:06:e5:c8:4f:74:
40:b1:e6:5f:1a:1f:01:c0:5c:0a:41:e3:d1:47:89:
8a:04:71:84:3b:a9:aa:91:c3:f2:42:18:b7:3f:a1:
0c:98:c6:c5:99:a8:1d:f6:7e:8e:0e:1a:24:5b:61:
c4:c6:b0:dd:9a:3b:2a:62:96:b9:06:32:7b:5c:42:
06:c6:9f:6f:07:f2:77:53:aa:74:52:c4:be:8d:fa:
da:dc:5c:9c:91:c0:2c:23:f2:b8:85:6c:80:ef:4d:
e0:53:52:d9:b9:73:c4:fd:4f:1d:4e:b2:00:aa:67:
2a:30:69:b2:2d:cc:af:48:8f:6f:d1:24:c0:b0:27:
25:9c:29:c6:ba:ad:e2:88:49:5a:72:89:ef:5e:8a:
c3:af:5c:5e:a9:06:69:5e:5a:4d:f8:e6:90:90:71:
45:02:b3:b4:d5:1f:c3:55:b5:36:61:c3:95:a6:1b:
f9:c6:ea:62:34:23:40:91:62:d5:b3:36:d3:1a:cd:
87:05:2f:54:4f:b0:76:25:96:a7:74:d1:02:df:11:
61:a1:95:98:66:8b:11:f9:db:ab:ed:77:86:83:74:
c7:e5:f3:d7:fa:dc:a3:5c:f1:1e:c9:96:b6:fb:07:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:82:41:A7:F9:21:72:CF:45:36:64:DB:DD:78:5B:A6:AB:6E:DA
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:87:44:d3:28:46:f1:d8:8e:a9:10:37:15:2e:50:ef:f5:f1:
5d:e7:a9:de:47:45:32:50:54:04:34:49:1f:48:22:95:52:bf:
fc:37:11:f6:ca:af:8f:75:71:9e:a9:1c:81:17:ae:89:61:34:
72:df:64:42:8e:00:2c:6d:8a:56:e9:d3:d0:32:ed:88:7b:81:
50:71:12:85:6d:e9:c0:3f:58:6d:94:40:04:29:34:53:09:46:
54:c6:3f:eb:06:fc:7a:f2:a0:8e:08:b2:fe:a5:ef:81:c0:86:
ef:1d:f7:08:08:21:65:48:d8:ad:70:73:67:82:44:f5:dc:b8:
f1:bf:96:f2:15:e4:12:4e:ca:fd:42:ab:2f:e9:de:cd:d7:f0:
6e:42:3f:ca:a4:07:9b:5f:4c:27:1e:74:b4:07:95:d7:0b:a3:
c5:37:6f:23:2b:ca:17:98:65:e0:a2:d2:c6:14:3a:53:a7:0d:
03:99:57:7e:04:50:9e:a2:42:82:42:73:6a:b1:fb:a5:91:da:
bf:28:e7:1b:10:09:cd:d8:ff:59:90:5c:08:11:ec:50:c4:60:
49:20:05:d7:37:4c:73:c6:67:e7:22:d9:b0:0a:b4:3f:72:c8:
a9:26:59:d2:24:b2:b5:9b:12:db:93:f8:03:c5:ed:f7:ad:56:
0c:6b:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:41:12 2025 by rpki-client