Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: t4T7FQ6C8zqYl4J1yxmmKHZv35jzQs3ck4x/cge2fJU=
Subject key identifier: B2:B6:A0:9E:46:B9:54:A6:71:92:70:9D:CD:CA:93:51:60:11:7D:5A
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 0197B70F22279614F6F8AE20A9C9AC9FAFD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 0225
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: LyjQhIiarnUPrUUtFSx/tNsRITiwwrVf8DrzP4lvCBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:22:27:96:14:f6:f8:ae:20:a9:c9:ac:9f:af:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=b2b6a09e46b954a67192709dcdca935160117d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:18:cf:46:bc:a5:04:86:4a:d4:31:8a:c1:
10:c5:b3:0f:f5:55:e9:16:8e:0f:0f:0e:c5:b4:a9:
60:a8:8f:9e:a4:05:da:cb:47:7b:83:ba:0a:56:11:
0f:e6:2c:50:a0:13:f3:d2:33:fb:84:d8:a7:21:c5:
4e:7b:fd:9d:c3:fc:21:dd:80:97:6d:da:4e:f4:7f:
f8:26:53:3f:7e:14:b4:36:8c:f6:81:93:6f:e7:ed:
e6:0c:b9:93:af:a6:99:5d:2d:a0:15:d0:d2:fd:fd:
cc:53:df:11:3d:ef:13:59:54:13:88:99:03:05:8d:
c9:a1:55:a8:cb:70:15:48:2f:41:ad:0a:ce:26:4b:
91:8d:ba:1c:5d:c9:17:a9:92:bf:a7:25:dd:73:20:
78:5c:0b:5a:1b:bd:d9:4a:ba:60:cb:eb:5e:3d:32:
d1:e6:0d:4a:89:92:65:48:69:07:3b:56:d4:44:52:
2b:90:1b:9f:cd:27:80:0f:0c:35:33:01:a5:d2:de:
c1:bf:43:46:21:5e:8c:b5:9b:06:09:4a:c6:56:c5:
79:e9:ea:11:1e:45:a0:9c:69:8d:d5:8d:b2:fd:ff:
a5:2b:bb:af:26:c5:84:07:e5:a8:62:0d:3b:55:2a:
e4:22:8e:20:8c:89:e4:ca:83:10:71:e2:8d:d4:69:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:A0:9E:46:B9:54:A6:71:92:70:9D:CD:CA:93:51:60:11:7D:5A
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:39:00:6f:49:a3:92:50:f8:78:dd:f4:06:b5:77:59:d4:06:
d4:09:74:cb:5a:b7:2f:16:25:a8:73:62:bc:17:38:45:84:4e:
20:cc:88:0a:e7:b4:67:3d:c5:1d:b2:0b:c1:3a:08:15:c4:2f:
b3:33:d9:37:5e:69:72:79:7f:83:ee:e5:af:7f:be:a8:9f:e8:
e6:fa:26:f3:ed:41:1f:dd:2a:b9:5b:f6:88:66:b2:25:38:79:
b1:20:ff:ea:7c:27:61:2a:99:56:3f:fd:fe:c4:fb:6e:78:1f:
37:59:74:c0:16:78:88:52:1a:21:de:1b:62:fd:77:f6:8d:01:
ff:dd:00:57:86:37:8f:ef:46:81:e2:db:71:cc:ef:35:02:4b:
a8:9e:9f:f3:ad:fb:91:35:72:b9:6c:df:9b:1d:46:6d:e2:d9:
ed:59:64:67:f2:0c:1f:83:fb:39:43:e8:c9:4c:40:8d:e9:dc:
87:34:d9:73:b7:fb:8e:32:9b:40:8a:e3:cc:c7:d5:9e:74:64:
74:b8:57:2b:f3:d5:50:0f:6c:19:b3:34:f9:d1:b1:2e:b0:97:
83:31:f2:1a:13:e7:f7:89:c1:8c:aa:06:3e:c7:10:6e:2f:29:
06:40:34:7e:ca:86:f1:14:fa:0c:69:8f:ab:fb:f4:e5:60:c3:
7e:ef:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:32 2025 by rpki-client