Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: i/a4npooSPeFoPM3YLiyRqehWNh8Wj9TfgNMTNpvXhg=
Subject key identifier: 36:60:D5:1B:00:40:98:D7:25:DB:E2:32:19:11:4A:68:8E:30:BA:6A
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 0196AA9E6EE0CDF5F0BC472063066D468252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 12:00:31 +0000
Manifest this update: Wed 07 May 2025 12:00:31 +0000
Manifest next update: Thu 08 May 2025 12:00:31 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: bRC5fZqcFtHADBrkPyk1GxdYAHklbSqJlcbBoEZoWXg=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:6e:e0:cd:f5:f0:bc:47:20:63:06:6d:46:82:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: May 7 12:00:31 2025 GMT
Not After : May 8 12:00:31 2025 GMT
Subject: CN=3660d51b004098d725dbe23219114a688e30ba6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:39:88:74:40:e0:f0:bf:83:30:5f:46:ba:
ff:a6:2f:49:32:07:80:b8:92:77:0f:d8:2d:f7:6d:
4d:04:a6:8c:30:d0:db:5f:38:09:9c:00:e3:88:c2:
66:47:1b:76:bb:8a:a4:b9:49:4e:c3:0c:ae:9c:fa:
9c:ec:e2:87:3b:6c:32:5e:c2:2c:5f:54:90:c5:4a:
1c:63:bb:89:16:b4:9a:f8:78:f5:3e:c7:80:99:f7:
d7:96:90:1d:ae:9a:35:15:55:69:48:0b:a0:50:26:
07:b9:7f:05:08:12:71:cb:c8:a5:cb:e3:5c:e5:2a:
9e:bf:6f:3c:4c:14:5f:2e:85:77:79:c5:43:50:53:
95:e6:25:89:ce:3a:0b:9c:f4:ba:ab:86:bc:34:c2:
a4:c5:c3:89:db:30:69:04:34:d7:92:58:ad:7a:d0:
33:eb:18:a4:27:d7:55:2f:c1:e3:3e:f4:ac:01:f8:
e6:26:6d:2b:5e:16:c7:eb:91:2c:e5:6e:48:a7:6b:
21:cc:a1:8f:8d:44:c3:23:8c:bd:a7:82:8d:08:6a:
4c:1c:fb:99:f6:a1:97:da:4c:94:92:6f:7a:1c:3c:
e5:08:24:29:88:fe:07:15:e9:6e:4a:66:6c:33:84:
28:9e:17:7f:a4:8c:d4:a2:4f:21:a3:3d:96:97:04:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:60:D5:1B:00:40:98:D7:25:DB:E2:32:19:11:4A:68:8E:30:BA:6A
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ec:54:c8:08:e7:5d:bb:57:68:e5:78:15:77:59:65:02:bd:
14:ea:43:6b:b4:cd:db:26:11:16:ff:51:b0:aa:28:04:fa:29:
b4:f0:c9:5c:f0:da:7a:fa:e0:b6:89:88:58:12:23:f6:45:9f:
09:72:ae:e9:a7:ee:53:21:b1:5d:91:c3:a8:54:89:52:d2:b1:
85:a7:da:f3:6a:24:f4:4b:65:e8:1c:66:4e:78:4a:c4:66:73:
3d:bb:9e:6d:29:04:85:59:27:f5:8b:d3:d1:6d:d0:1a:04:42:
3a:e8:e3:b6:95:7b:9a:c3:52:5e:ff:a3:7c:db:12:c3:54:f7:
a9:17:98:3c:6e:55:68:05:3e:a7:04:79:6e:73:45:bb:c4:2f:
90:fe:4f:09:b0:3d:6a:6d:aa:ac:01:1d:72:4e:e8:b9:57:db:
a8:ea:54:18:92:5d:dd:a3:10:34:80:b3:41:9b:f4:13:ad:67:
0e:52:79:2a:a9:b3:2e:ff:c0:23:0f:96:38:de:5e:cd:a7:b7:
ab:50:78:04:92:ce:bc:7a:4e:a0:db:ac:2e:12:34:73:8a:2b:
bf:19:00:a5:f7:01:ce:72:f9:fd:36:8b:c6:50:58:b5:47:c9:
b4:7c:d8:98:cc:98:6c:a7:55:82:86:c1:a1:76:8b:89:f1:63:
f7:28:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:55:05 2025 by rpki-client