Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: ovRi9t8r2OFW/8bsSwwTsveo2h1o365NEe7/SCpryqY=
Subject key identifier: 7D:5A:3C:C3:2C:F1:16:3C:BF:48:39:0C:0C:A3:15:C6:95:D2:7D:5E
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 0198D5BBB8AF8A1409B8B84DFE1BFA288C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0DE4
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: BgLJFbqf4USQ1cXlazbByee3aHxL1P3zeO3tIMgfq/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b8:af:8a:14:09:b8:b8:4d:fe:1b:fa:28:8c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=7d5a3cc32cf1163cbf48390c0ca315c695d27d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:86:df:35:a0:e1:4c:15:d9:60:d2:e4:17:
71:04:66:56:19:d1:71:3d:4e:78:be:e0:3b:0b:6b:
45:a0:9c:4c:b5:7e:0f:db:55:e5:86:be:f1:e3:ad:
0d:d5:0d:b5:dc:35:3d:d9:11:70:71:ec:f5:5e:03:
cc:ce:71:c9:59:86:91:84:46:50:18:67:9e:9d:38:
69:1b:8f:89:08:19:ad:08:ca:d3:95:26:5d:e7:f4:
3c:17:fe:73:a0:d9:57:e6:02:c8:f5:4b:e8:71:b1:
c5:02:db:19:f3:75:58:f5:61:a3:69:d6:ff:47:38:
84:43:62:c6:c4:91:e1:44:27:e9:87:53:a3:1b:e3:
76:47:a1:75:3e:10:76:3a:38:4a:34:e6:49:02:65:
c6:42:1f:bd:41:25:b7:fa:03:3e:9d:19:81:ee:ca:
55:80:a3:c5:67:b6:d9:38:b5:b0:0e:0e:17:9e:35:
4c:66:cd:b7:ad:65:bc:a1:de:ef:5f:ef:78:5a:5a:
b7:8c:4c:2a:b7:14:55:8a:80:a0:8d:3b:3d:1c:ef:
cb:90:6e:84:2b:be:0a:5c:b8:4b:9b:18:a3:02:e7:
5a:ed:df:ea:02:fd:ad:d9:90:4f:1e:1f:61:ac:b8:
76:17:99:6f:75:a3:95:e9:3a:5b:90:3d:20:e4:1c:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:3C:C3:2C:F1:16:3C:BF:48:39:0C:0C:A3:15:C6:95:D2:7D:5E
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:41:e8:d5:cf:3b:4e:45:b9:80:1a:b6:dd:ec:9f:7b:5c:d8:
c4:75:65:c8:43:97:f0:ac:e7:b6:00:67:22:7f:07:35:4c:99:
90:dc:0e:4f:cf:ac:11:e7:85:c0:06:d5:52:d8:51:8f:e7:df:
a6:ab:6e:d6:83:5e:6e:78:88:70:4c:d6:d0:98:74:23:ce:84:
5d:21:7a:47:87:2a:7c:54:7e:0a:85:8e:fa:4b:45:2e:70:77:
02:92:c2:ea:db:8c:a0:71:98:08:4c:4c:fd:ce:c3:0b:dc:4a:
7e:be:78:6e:23:a1:a8:93:2d:c4:cd:26:43:04:6c:a5:22:cc:
91:42:12:d7:7b:03:af:01:0a:2f:4d:33:d9:8e:d9:a7:a9:6d:
b6:5c:ce:e9:bc:e3:d6:53:f1:da:d3:e6:50:36:b0:ce:ff:4a:
61:30:0e:c8:31:e6:47:23:30:29:04:50:08:01:a0:e2:19:b4:
34:ac:cb:25:55:73:95:d0:21:1e:99:20:9c:49:08:ec:51:47:
31:81:70:13:fb:e6:11:63:a0:65:f3:2a:56:4a:8c:e7:b3:94:
a6:6a:6a:9c:db:f9:b0:ea:1f:d3:cf:1f:89:85:47:f0:60:9a:
1a:c4:e8:ac:93:e0:34:23:d7:b1:c6:53:10:c7:4e:67:11:53:
70:19:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:00 2025 by rpki-client