Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: s8On1YQ2rsslD5iB+/Dg67NER34Sfh12AaBgkwuYM6s=
Subject key identifier: 0E:5F:31:3C:5C:A4:3D:99:8E:F4:4E:41:76:71:3A:07:F5:80:A0:EF
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 0199FB45D293950CEDB1D277ADDDF1DCB629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0E7C
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: LaQYRL+wogYlIE7J15ViqFoAbT/uv86z1PtMvq5NbL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d2:93:95:0c:ed:b1:d2:77:ad:dd:f1:dc:b6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=0e5f313c5ca43d998ef44e4176713a07f580a0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:f2:46:85:64:64:8a:b0:a2:c3:75:58:4c:
8a:65:1f:4e:c5:5c:fa:a4:7f:7e:6e:03:9f:cc:75:
23:aa:c7:d6:b7:b2:80:ab:2f:44:4b:d7:73:ca:ca:
b3:f1:8d:09:28:70:4d:32:c2:4f:aa:83:6e:5e:2c:
10:e6:c1:33:2d:40:44:9c:52:af:61:fd:46:57:5c:
ac:25:0a:34:3e:b8:6e:30:aa:b6:92:a9:10:1a:ca:
0c:3b:5f:f9:05:b9:d3:8f:fc:5f:42:ef:ed:2c:00:
e7:b9:d5:85:39:ab:24:98:0b:90:6f:18:64:31:8f:
50:64:6f:98:aa:c8:64:9e:46:ae:48:6d:83:55:26:
49:33:82:51:86:51:cf:71:c7:34:68:18:3a:c1:26:
c3:b1:aa:cf:3b:2e:da:3f:10:41:6c:8b:68:03:3d:
6a:3f:28:d8:88:86:4d:d6:f6:55:e7:20:49:20:74:
09:fd:a1:f8:7c:90:b0:2e:85:ff:ed:12:ce:bc:db:
c2:bf:77:c0:05:59:ee:2a:4e:5e:d7:6c:d4:52:41:
be:c3:7a:49:f4:1e:b2:47:b5:ac:84:a5:b7:40:02:
58:5a:14:f5:42:2c:dc:66:02:d3:d8:00:e8:dd:b6:
85:dd:28:b4:7d:fa:ce:1d:58:84:86:10:c4:38:7e:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:31:3C:5C:A4:3D:99:8E:F4:4E:41:76:71:3A:07:F5:80:A0:EF
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1d:c6:df:fb:60:c1:d6:fd:6c:a1:d8:4f:c9:e6:09:1c:b9:
42:d9:31:ca:33:85:85:2b:4e:cc:ad:c2:0f:64:5f:b0:f8:7f:
e2:3f:36:08:8b:32:ff:5c:7e:60:ae:ff:72:41:dc:a4:5d:f5:
c2:5b:d2:97:5e:40:cc:fa:02:e0:7b:f0:33:9a:13:2a:a5:c4:
ba:18:0e:45:fb:17:39:38:dc:35:e1:a5:4d:99:23:5b:a6:db:
8c:e7:14:09:48:9b:0f:30:3e:96:a6:fa:5b:2f:81:75:45:03:
f8:d1:4e:11:98:ad:54:86:f2:10:ee:85:72:71:7e:1d:05:ca:
b5:1a:fd:3c:b3:a4:bb:28:e9:27:3f:29:cc:e4:60:58:fc:ee:
20:1d:ea:c4:42:a0:fd:ab:4c:f6:df:ab:70:99:6e:54:93:f6:
f0:bf:db:e0:44:d9:ad:9a:61:e5:a6:dd:a6:22:85:53:87:64:
b4:9f:2f:22:27:c3:d6:90:a7:02:c2:2b:91:3d:e1:6f:20:e0:
f5:dc:65:93:1d:fa:c8:95:1b:99:f4:31:21:87:9c:28:07:49:
21:0b:d8:3b:2d:00:df:8b:1e:e7:14:14:1f:ad:23:12:a6:b5:
e4:31:06:a4:ed:62:34:df:dd:99:52:62:52:dd:eb:53:30:98:
42:65:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:57 2025 by rpki-client