Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: ahvxMpkUeejd1phDBE+XY9a3U/VfUN10jAVhKVNXeaY=
Subject key identifier: 38:B0:7D:DC:ED:AF:6E:E6:50:22:38:3B:F0:D3:F6:76:14:A6:D8:E7
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 0197B70E4D48C9C4A7F88BB5E968E8A276F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: 0rM+v3XFTcwAHjGrIsux/ddmBRmPT1rhjNb4Lzr0qa4=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4d:48:c9:c4:a7:f8:8b:b5:e9:68:e8:a2:76:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=38b07ddcedaf6ee65022383bf0d3f67614a6d8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:c2:7d:3d:9f:6e:66:a2:e6:57:df:41:dc:
5d:5e:c0:1c:71:5a:7a:99:3e:42:b5:90:8e:b8:d0:
1d:0e:c1:32:5c:78:19:90:f5:96:33:01:65:c6:5c:
81:12:29:db:5a:dd:e9:bb:de:23:bf:79:4f:71:ea:
de:45:87:2a:d5:a5:e6:6a:d2:89:e1:20:bb:2c:b7:
6f:27:06:3e:24:91:88:43:51:9f:e2:fc:20:40:66:
3e:51:43:ac:f0:fe:aa:96:48:98:17:e0:9f:a0:08:
c1:8d:bf:ee:d4:f5:cf:3f:cb:57:21:ff:06:71:22:
97:3b:5b:fc:e6:91:ee:e8:40:ef:28:22:05:c4:57:
d3:eb:03:06:81:ad:bc:d7:e1:a9:e8:76:b3:16:08:
d3:ee:d3:ea:54:f4:70:ad:f6:8d:d8:52:8e:44:00:
f3:a8:60:49:68:68:e6:61:b7:1a:5f:83:20:b5:57:
13:55:d7:4f:04:46:65:b6:22:cd:28:9d:ff:c8:43:
ed:7b:06:78:32:02:6f:91:d0:1a:57:4e:6d:f1:42:
c2:9d:ca:53:69:1c:e5:5b:3a:28:c7:fd:85:76:5a:
69:81:6d:39:96:80:f5:55:8f:ed:88:56:8b:a3:ac:
ed:d7:b5:4c:df:5e:d1:12:5e:3d:ac:f3:c9:a2:c8:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B0:7D:DC:ED:AF:6E:E6:50:22:38:3B:F0:D3:F6:76:14:A6:D8:E7
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a4:17:a2:fe:10:9b:0c:3b:56:8f:46:62:b2:e7:4f:0d:77:
4b:10:71:db:35:8f:ba:91:96:ff:16:30:c4:ac:6c:07:e6:42:
a3:af:1d:ba:37:41:c2:92:df:39:fd:e0:91:75:e4:c5:0b:bf:
18:51:ab:26:9d:7a:65:b0:f1:f4:95:40:1e:4b:e4:6b:e9:61:
d9:ab:27:81:7e:26:2f:51:6b:e2:5e:ca:94:ee:0f:d1:1d:5a:
14:21:49:e1:da:4e:c7:eb:44:13:18:a4:61:18:f0:81:f8:a9:
5d:0a:93:ef:d6:fd:ef:51:c7:3a:f0:14:e9:b2:b8:e2:c8:02:
bb:76:fc:99:97:51:33:1e:ff:77:67:df:a3:c2:61:0c:8f:37:
44:19:96:5c:c7:3a:10:24:96:b9:8d:72:f4:fc:b0:83:e2:cb:
91:6f:1e:5b:4a:f3:81:7e:fa:71:4d:8a:4a:d4:4b:fd:57:61:
de:d9:c1:87:5c:55:98:ba:23:87:58:33:88:15:77:ce:fc:e4:
33:3c:08:0d:71:1d:33:f1:26:85:0c:f9:14:b5:f4:e6:30:fe:
17:ff:ef:54:fe:04:7a:ed:b0:6c:10:bc:cd:09:ea:92:16:c2:
59:32:6c:d5:b6:6f:75:64:78:f0:f8:2d:2a:ea:87:c7:23:8a:
cc:25:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:26 2025 by rpki-client