Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: wh731OAEn5pk1ieTP5lDQr0uofeSDEjNUMNPvJKGT0o=
Subject key identifier: 9B:12:23:3A:23:05:5B:FB:78:BB:30:76:8C:CE:2A:66:0D:12:8B:4B
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 0198D5F160EB3F073986409BFA5E445AD65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 11D2
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: Fw03ygFL8XjagBSHv8zuAiO8vswRoiZ2VUzW65/aEXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:60:eb:3f:07:39:86:40:9b:fa:5e:44:5a:d6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=9b12233a23055bfb78bb30768cce2a660d128b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:e4:eb:4a:e3:1b:f0:ac:ec:67:59:af:72:
d3:60:84:3c:a3:41:d8:b4:41:da:91:12:2b:52:d9:
7c:1d:de:5e:57:3c:04:f5:8d:99:4e:ee:e6:f5:71:
7b:6d:74:41:f9:40:52:c9:7d:52:ba:5d:70:4f:c6:
9b:50:dd:fe:5a:1f:a0:2a:b9:2f:d3:9f:15:6a:30:
b0:28:6f:cc:d4:93:27:eb:22:3d:85:1b:47:47:b1:
1f:aa:a5:ce:f2:97:65:d5:65:f0:ad:e9:42:48:97:
d0:e3:c7:69:f0:e4:73:40:a8:52:0c:6f:20:15:69:
00:83:89:34:85:0f:0c:da:3a:e6:a1:d2:27:03:b7:
75:24:be:73:eb:2f:ab:e9:24:49:9b:04:fd:6f:c5:
58:93:d7:d8:78:e5:7c:cd:19:c7:99:b5:89:8e:c7:
ea:c0:6d:27:c3:58:03:c0:1b:82:f7:b7:c4:c8:31:
7c:a1:01:d2:d3:49:37:82:f8:3a:3a:8c:26:17:1f:
47:43:41:4c:4d:9e:63:b9:2b:82:90:6f:90:fd:cb:
54:25:e1:c2:78:d8:81:fb:c6:1f:ef:a2:57:42:e2:
bf:d7:14:81:13:85:f0:b7:67:8c:9f:eb:9d:10:d6:
63:f8:b1:5a:5c:7e:40:4c:59:c0:94:03:53:21:02:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:12:23:3A:23:05:5B:FB:78:BB:30:76:8C:CE:2A:66:0D:12:8B:4B
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9c:40:83:29:93:33:3d:1d:b4:21:a1:94:a6:21:f5:5c:88:
cf:c4:b5:0a:c8:7d:90:fe:bf:e4:cb:1a:b6:d1:53:29:15:77:
b8:41:fa:19:83:e2:ad:eb:66:b3:2b:7f:b4:91:95:2d:36:89:
8c:b4:00:e1:ae:35:c7:3b:92:53:a5:d5:82:e0:66:92:86:0f:
c0:8d:96:40:27:36:0b:46:5c:fa:aa:9d:02:1c:ec:15:69:37:
84:a4:7b:f9:cb:96:5f:4e:4d:94:7f:d5:d6:b1:88:be:05:56:
94:fe:81:88:b9:2a:a8:ce:0f:d9:a4:33:3e:f9:b8:bb:ea:a4:
e4:c5:d1:ef:9d:ca:fa:b0:b6:54:d6:f1:97:06:0d:88:8a:e2:
06:db:b4:4c:c1:6d:c4:3c:e2:25:ee:92:67:10:20:e6:8c:84:
48:75:2b:68:a0:9d:68:24:95:21:79:49:45:21:3f:d8:02:78:
f6:ec:7a:9d:f3:77:9a:9b:b9:1a:02:8e:c9:28:9b:51:48:b0:
a1:c5:7d:28:9e:42:be:4d:5a:90:ce:bb:da:3d:14:7b:83:be:
3a:43:ae:93:df:01:7d:33:10:5b:78:93:05:cf:b6:28:b0:f1:
8f:37:a7:1a:36:a4:a5:0b:2f:99:9d:73:3c:67:75:3f:5d:a2:
03:69:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:27 2025 by rpki-client