Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: sELghwL9E6Dhkw6C4sE6OSK1TntvcpCH027hHUALIqc=
Subject key identifier: F3:1A:CD:E1:66:90:07:AF:61:D8:D2:BE:A0:D9:F8:F9:7A:40:DF:AB
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 0196C49583A367005E52266558187F4553C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0CD2
Signing time: Mon 12 May 2025 13:00:54 +0000
Manifest this update: Mon 12 May 2025 13:00:54 +0000
Manifest next update: Tue 13 May 2025 13:00:54 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: XkIXe9Y37HpiwF/CPqUbSjbsibKndjOGHa2VbSMA5HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:83:a3:67:00:5e:52:26:65:58:18:7f:45:53:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: May 12 13:00:54 2025 GMT
Not After : May 13 13:00:54 2025 GMT
Subject: CN=f31acde1669007af61d8d2bea0d9f8f97a40dfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:25:fb:06:7c:aa:d8:4e:a8:4d:10:33:52:
1b:45:e3:f5:47:e7:b2:80:51:38:38:55:0f:e7:88:
da:47:19:5d:f7:f0:e8:eb:ef:2d:82:83:8f:70:cc:
24:c5:34:63:ce:9d:40:f0:27:a4:07:12:d2:8a:c4:
ea:44:a8:6a:33:6f:28:5d:61:dd:a6:f4:00:03:50:
9a:15:99:34:11:00:c9:2e:e2:c0:31:c1:e8:46:cd:
3d:2c:78:f9:9e:5e:8c:c5:16:26:8e:93:42:83:50:
e2:88:d8:0a:4b:60:78:2b:99:8a:5f:68:1f:25:3e:
af:9f:46:4a:f2:ff:b9:fd:72:5f:e8:6e:67:57:1d:
fa:d8:da:2c:61:c4:9a:38:0f:c4:66:b9:53:27:d5:
b6:ec:7b:bf:61:d8:1d:0c:49:f2:3a:aa:84:9d:bc:
b0:50:7a:21:c8:ea:1d:25:b0:1f:c2:d0:75:cf:46:
0a:32:33:a4:99:2d:63:e6:75:a9:86:06:f0:f9:e2:
d5:75:6f:58:95:d3:67:54:55:f5:67:d4:5e:47:11:
99:ed:ba:27:ed:fb:a9:2e:29:6d:f3:97:94:a3:2d:
f8:4c:8b:c1:16:f1:47:ee:a7:32:ea:1b:de:76:8e:
b8:60:2d:6e:34:ec:58:8d:7a:fe:83:17:72:df:8d:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1A:CD:E1:66:90:07:AF:61:D8:D2:BE:A0:D9:F8:F9:7A:40:DF:AB
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:94:fc:fe:66:68:61:9c:3e:47:0e:cf:48:88:b5:ae:6a:0d:
75:d3:9b:cd:02:2b:46:5a:90:c0:14:c5:c4:9e:7a:7f:f2:8c:
15:f7:c8:95:c9:20:50:6b:d5:af:39:a7:3e:d0:b3:a7:8f:46:
24:47:80:3f:00:0c:02:5c:14:0d:6f:c1:7a:82:da:5f:b5:14:
d9:bf:77:2e:cf:33:84:8f:7e:59:49:e5:1a:6f:a6:32:92:91:
3c:04:19:c6:fa:06:39:bd:1d:03:94:cc:94:5e:d5:b0:92:ac:
cf:74:5f:77:01:69:24:42:44:6d:7f:09:cb:00:85:3f:1d:ad:
ba:eb:4d:6b:1b:82:34:8d:7a:64:81:39:4d:c3:53:35:41:4e:
f7:6c:16:78:66:a5:fa:b7:45:6c:05:0d:be:39:2c:53:0e:2c:
d6:2f:ba:1a:f2:1b:02:cd:06:b1:3e:3e:ed:2a:49:42:7f:d4:
eb:82:67:43:a8:fe:9e:82:81:d8:8e:41:05:6e:66:78:0a:ea:
23:26:0b:08:b5:86:8d:56:7d:49:7f:d8:5d:71:89:8d:72:a1:
ba:d8:cb:59:e1:f8:e1:1c:b8:76:19:80:f7:25:52:ae:e8:5b:
87:51:17:aa:91:83:f5:b2:0e:cc:95:c8:b0:2c:8c:9f:49:0d:
0a:28:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:06:47 2025 by rpki-client