Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json)
Hash identifier: Yh9PUE2aXz0G/EKlO/forAFwR9L8/pRbMdiWv3JSg6A=
Subject key identifier: 1A:A5:75:1E:50:75:0C:4B:67:EA:0F:8B:7C:86:1A:EE:40:D7:26:7A
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 0199FDD8C7EAA5974496CD6AD0F774157E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 19:01:06 +0000
Manifest this update: Sun 19 Oct 2025 19:01:06 +0000
Manifest next update: Mon 20 Oct 2025 19:01:06 +0000
Files and hashes: 1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=)
2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=)
3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: yPrnxXoPREDjnpUtEGoJGg4SyzrL11fDGl0LJO+qaDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c7:ea:a5:97:44:96:cd:6a:d0:f7:74:15:7e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Oct 19 19:01:06 2025 GMT
Not After : Oct 20 19:01:06 2025 GMT
Subject: CN=1aa5751e50750c4b67ea0f8b7c861aee40d7267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:22:8f:f7:65:e0:94:27:30:f0:cf:08:5a:
18:18:84:60:eb:08:1e:cb:4b:b4:c5:e3:95:3f:92:
cc:ff:7e:40:12:77:d8:ea:af:09:48:49:ac:1e:4c:
ec:47:98:39:08:bf:18:76:b3:7a:ac:8e:9a:fd:1a:
f8:7b:3c:59:68:46:ba:7d:34:97:bb:2c:e2:04:e8:
c2:ee:f2:c3:3d:27:2c:65:30:04:35:37:15:07:39:
99:4d:00:8e:d4:b9:e6:85:ac:03:34:31:5f:1b:f9:
2a:20:01:e2:9e:f9:52:eb:87:09:85:84:8d:c3:49:
6b:5a:40:6d:c5:54:af:b6:69:6a:58:f0:84:79:7e:
d2:8d:1e:cd:a1:67:2e:7b:36:2d:2b:fd:02:73:26:
14:cc:ad:32:bb:21:9f:d1:0c:07:2d:b8:d8:03:d9:
9b:84:7f:be:de:61:16:70:be:43:62:55:a0:e9:85:
4d:e6:1c:ec:b6:85:72:f8:a6:d5:5d:ec:0f:ab:b4:
b0:25:ff:cb:14:c2:1d:ed:89:73:02:67:9e:1a:e3:
a2:ee:e7:45:31:76:3d:6a:ed:93:2b:27:c0:40:27:
01:a5:b7:2f:02:a9:d4:a8:5e:ec:4a:ca:36:48:d9:
5f:98:54:85:6f:61:f2:ec:9c:c8:9d:2f:bb:e1:1b:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:75:1E:50:75:0C:4B:67:EA:0F:8B:7C:86:1A:EE:40:D7:26:7A
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8e:97:f2:34:51:7a:5b:42:73:87:64:0b:7b:bd:a0:c0:06:
5a:90:bd:5f:fc:58:6e:47:ee:25:3d:5e:a7:bb:09:3b:a2:ff:
72:dd:e0:8d:2b:ea:91:79:2a:72:c4:d6:f1:25:3a:f8:69:3c:
a8:3c:b0:13:27:b5:82:c0:b5:a4:5e:fe:d0:57:f2:c9:69:4e:
66:2d:47:d5:24:e8:9b:cd:4a:bc:e3:fa:cf:bb:a2:6d:22:e8:
aa:3a:18:16:4c:37:17:87:ec:af:67:26:a9:b7:4b:7d:b3:e8:
a2:5d:a0:21:d4:5e:95:13:c5:bd:70:84:7b:46:a4:4a:1b:d5:
1c:db:ff:65:12:21:b9:88:9f:03:ed:1a:df:ff:8c:c6:7b:89:
65:25:f9:3f:ac:74:ad:db:60:04:5c:3e:78:ec:b9:8a:22:e4:
ff:53:18:3e:24:12:df:82:cc:03:66:5e:d0:21:10:92:64:df:
4c:56:aa:76:37:3e:16:36:6b:21:c7:c4:18:66:c4:76:10:d0:
7a:8d:c7:53:3b:b3:4f:2a:df:d2:a7:b8:2c:23:3a:fe:6f:86:
c2:86:d9:e2:9b:f3:4e:79:ff:76:4a:07:ea:3a:95:fe:bb:d7:
3c:bb:07:0d:4a:d9:aa:9e:60:40:b2:2a:ad:ee:cf:82:1f:49:
09:a0:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:36 2025 by rpki-client