Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: FfXiYtssIgFBKKCvYkreryS7Fhsn0OIldB3zN1lDAP8=
Subject key identifier: 40:2B:C3:DD:EA:2D:6B:51:EE:BF:AF:FE:0B:88:21:6C:67:A9:96:93
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 0198D6CD753274DD4DC9C483A9FD2F1CDFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:45 +0000
Manifest this update: Sat 23 Aug 2025 12:00:45 +0000
Manifest next update: Sun 24 Aug 2025 12:00:45 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: QkDn4/3dQTDpflLfqzTvwJosN+vPuRuqGuAsDLyAAHs=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:75:32:74:dd:4d:c9:c4:83:a9:fd:2f:1c:df:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Aug 23 12:00:45 2025 GMT
Not After : Aug 24 12:00:45 2025 GMT
Subject: CN=402bc3ddea2d6b51eebfaffe0b88216c67a99693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:58:59:5a:96:bb:9d:08:07:9f:70:9b:4a:
85:03:d4:ec:30:f3:eb:a4:96:ab:81:3a:2e:1b:3d:
97:c5:1a:33:c6:44:11:82:b1:ba:f8:2c:80:08:ca:
dc:9c:10:87:68:cb:88:1a:8e:dc:4b:e9:48:e5:5d:
d8:8d:82:45:d1:13:56:9e:d2:65:a0:2f:a3:b2:66:
42:45:f4:0b:4c:f4:1a:d6:33:2c:53:10:0a:83:e7:
e8:a8:98:07:df:45:12:ae:1d:cc:87:d9:83:cb:0d:
7f:ce:83:f0:fa:6a:90:96:b9:48:d6:28:11:46:58:
c5:ca:7f:c1:b9:4a:ad:91:1f:25:3c:1c:ac:30:9d:
a8:bc:be:41:e2:b9:35:73:6b:5f:77:42:a8:bd:d1:
e1:d4:46:1d:29:da:18:7f:74:cd:98:38:a8:a6:7c:
d3:4d:ea:36:2a:13:7e:6c:f9:fa:28:af:ba:5f:19:
4a:cc:d8:bb:96:33:4b:13:2e:3d:58:ea:e4:2e:13:
d9:b3:24:7e:b1:1c:cb:db:3f:96:ea:4f:c5:5b:06:
5e:b2:36:a9:13:ed:de:6c:6d:10:54:61:90:11:c2:
0d:89:b5:82:06:e0:ee:06:5e:e8:ae:ba:66:a4:a6:
dd:58:d7:a2:3f:2d:22:99:6b:f2:a8:45:3d:00:61:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:C3:DD:EA:2D:6B:51:EE:BF:AF:FE:0B:88:21:6C:67:A9:96:93
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a2:12:8c:c5:11:24:69:95:6a:5a:2d:fd:a0:fd:55:7f:6c:
a6:87:ed:49:76:b3:a7:29:a5:69:b2:cc:9c:03:b9:be:37:20:
50:e8:3d:2b:bf:79:b0:8c:64:23:85:34:bc:11:ad:ae:5d:18:
94:09:36:7b:75:63:df:8c:8d:6d:32:dd:f2:b6:8c:9d:e1:93:
f3:e7:65:01:10:6b:03:8f:3c:07:22:3a:77:1b:73:e9:df:1f:
54:df:10:5c:00:db:8b:1f:fa:35:59:0e:8f:89:66:ba:f0:a8:
0c:5b:56:d3:35:35:e9:4a:15:30:b3:ec:83:47:9b:75:78:54:
25:ab:85:21:dd:83:ea:d0:bb:45:a0:60:54:37:93:ba:6a:5f:
d3:a4:99:70:38:34:66:a1:54:d0:e2:41:e7:2b:38:2a:f2:09:
10:d1:ec:5b:db:95:0e:5b:61:d5:d5:cf:07:e6:5d:74:67:85:
11:7e:5b:9d:76:5a:f4:59:01:be:3d:86:7e:1d:48:ee:6c:a5:
ef:4b:32:50:cf:df:4d:0c:9f:33:b9:c4:96:c7:33:fe:22:9f:
fd:95:a6:48:d7:9f:f1:13:0f:e4:7c:fc:d0:1a:1d:fa:23:ad:
b0:1b:7c:fb:fa:fd:cd:2b:56:e5:f9:01:3a:dd:f5:53:a1:79:
3a:2e:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:55 2025 by rpki-client