Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: 7VgP27ip+I+bD0W0WoGIM11MzSA4Rv3gSApsL+XE+wk=
Subject key identifier: 32:B3:C1:B0:14:14:7A:D7:4C:59:43:99:2E:FD:20:F9:06:2F:E9:D1
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 0197B9D9366D6BE064D70507B2DE2F4F491A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0D51
Signing time: Sun 29 Jun 2025 04:01:49 +0000
Manifest this update: Sun 29 Jun 2025 04:01:49 +0000
Manifest next update: Mon 30 Jun 2025 04:01:49 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: OOyfrFHC0B6c6oQYSfUMhoEhJ6wCyRDEDYX5P7lZBCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:36:6d:6b:e0:64:d7:05:07:b2:de:2f:4f:49:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Jun 29 04:01:49 2025 GMT
Not After : Jun 30 04:01:49 2025 GMT
Subject: CN=32b3c1b014147ad74c5943992efd20f9062fe9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:4d:38:f0:01:ff:29:e1:f9:6f:3a:57:a0:
2d:02:87:76:61:eb:9b:53:66:64:eb:7c:cd:51:78:
9b:9d:ee:7b:b0:88:63:b2:25:d5:e7:93:61:b8:aa:
da:d8:6c:21:db:ef:d3:f1:c1:c3:06:b3:e0:f2:5e:
09:c3:26:75:b4:a2:51:a2:af:6e:ca:fd:65:53:4c:
e6:c1:af:9b:b2:8f:75:e6:cc:a8:b9:7f:ee:1c:2e:
c8:51:73:bd:a8:c2:96:59:55:60:db:95:e3:43:00:
2c:47:af:39:b3:40:47:2f:1e:54:5b:f0:72:80:1c:
b0:be:2b:0c:4e:18:fb:9c:28:12:bc:b3:66:55:49:
03:bd:91:76:e5:be:d9:31:53:78:d1:a7:30:d7:7c:
01:31:bb:ea:5c:e1:fe:cd:58:c4:bd:12:5c:47:25:
10:df:25:fb:db:33:b4:e5:2a:7f:e9:40:ce:cc:45:
25:b9:0a:dd:31:92:4a:f5:49:08:e6:0a:9e:e1:e6:
c4:b2:02:78:b7:a7:4d:e2:6e:57:ef:36:50:e8:38:
25:cf:b8:fd:05:d3:13:77:dc:a6:c9:56:a4:d5:2a:
e1:92:0c:2b:7c:0c:00:f0:62:04:21:e1:24:74:40:
cc:da:5b:e8:47:4b:c8:42:3c:0e:70:16:8d:46:ce:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B3:C1:B0:14:14:7A:D7:4C:59:43:99:2E:FD:20:F9:06:2F:E9:D1
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:05:b1:85:ae:42:c5:8f:7b:8b:54:d6:aa:79:d7:51:57:
be:e1:52:7e:d3:13:cf:d9:b7:ff:6f:16:4e:6c:ed:14:5d:90:
18:4b:41:b3:e9:b0:f4:95:15:9c:c1:92:9e:73:7b:49:9f:a5:
2f:2e:5f:ed:b8:d0:9f:12:84:c9:e4:be:94:28:b0:dc:b0:c4:
67:0c:d0:6b:00:89:9b:80:3a:7c:1d:c1:b7:34:df:a4:37:4a:
03:59:b6:65:02:e1:ea:54:88:9e:f2:82:11:7b:c6:16:47:16:
5f:5e:f8:87:e5:cf:77:6f:b7:fd:12:0b:f8:89:5c:4e:c5:b9:
ba:fc:be:bb:3f:1d:e6:b9:2a:8d:1d:db:55:fe:ef:b0:63:7c:
4a:31:d0:e9:53:34:d4:0d:24:43:5d:98:9f:6e:fa:2f:a1:44:
bb:c6:2b:32:ce:b6:85:e9:fd:00:fd:34:d0:c6:a2:2a:64:ff:
92:3a:0c:d4:1d:89:2b:7d:e8:31:fb:38:5a:17:45:9d:b8:b4:
61:97:20:1b:ea:71:c2:d4:fe:d6:33:07:de:29:19:d1:21:ed:
8e:60:68:aa:b1:05:65:e2:b7:e7:ac:1c:81:a7:ba:90:bb:2a:
6b:e4:f9:b1:53:82:52:3c:a0:72:82:95:6f:ad:bb:6d:43:3a:
6b:ae:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:10:53 2025 by rpki-client