Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: kQUqz8KYzDI4482To0f48T8n2SVFQEkkgo03syG1Iqc=
Subject key identifier: 41:BC:F5:3B:11:08:8F:3A:95:21:55:AD:F3:78:CF:8B:17:B9:03:C8
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 0199FCC68A5690A9DD141DC71DA4C6247E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0DB2
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: 7wdy9mcOmD/4P1zQKTzCIiYaE3eGHCcJ5joyFNQjo6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8a:56:90:a9:dd:14:1d:c7:1d:a4:c6:24:7e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=41bcf53b11088f3a952155adf378cf8b17b903c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:17:91:34:db:fe:65:7c:9f:ae:fc:7e:09:
6a:15:d3:66:a1:7c:b9:81:88:08:0f:a2:fa:93:fd:
39:0d:e5:e4:cc:29:08:ac:f0:07:50:be:4f:61:94:
d4:b6:c8:85:77:1c:80:4c:ea:f4:07:ac:9a:9b:49:
c2:b4:c5:bc:cc:4e:61:4f:65:bf:fe:7e:84:80:81:
d3:bb:5d:18:7a:13:0a:0b:31:09:ac:33:f1:bc:48:
64:1c:35:bf:10:21:bc:87:04:fb:a0:0b:cd:13:db:
5a:1c:bb:a1:74:e2:ca:12:c4:ae:d4:97:46:36:ee:
5e:76:6d:cc:16:1e:aa:88:18:a4:d8:1a:42:77:10:
dc:58:7e:71:d5:53:1e:74:2b:86:22:2f:5e:08:73:
84:0c:6f:6e:0f:d3:d9:b9:35:57:27:16:53:63:90:
c2:61:84:e9:a4:f3:9a:f9:92:ef:00:b5:ce:32:09:
4a:db:5e:06:3e:e4:f6:f0:4f:86:85:15:89:aa:62:
1e:18:20:ba:8b:e0:39:1c:1c:df:9f:7e:ca:a1:44:
27:e5:a4:35:53:6e:10:33:6d:cf:49:0a:bc:60:06:
ed:01:b2:68:77:3e:e3:ac:21:b7:55:8f:91:ba:0e:
9f:55:cb:b9:4b:5c:90:eb:38:5d:7f:f8:9f:eb:c8:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BC:F5:3B:11:08:8F:3A:95:21:55:AD:F3:78:CF:8B:17:B9:03:C8
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:84:8e:d3:eb:92:ca:94:38:51:78:e8:d3:4a:ef:f8:ae:e3:
9f:db:17:86:1b:7d:a5:07:43:13:93:ea:c5:ac:e2:66:76:f6:
dd:88:79:34:00:48:13:a2:1c:3e:23:4a:33:dd:65:5c:72:f1:
f2:dc:5c:6b:81:64:37:6d:60:6d:2b:61:66:cd:c7:76:9f:39:
f1:90:04:e3:3b:1f:c0:03:3d:a8:90:a4:83:81:77:0b:39:dd:
a1:94:95:b2:bc:20:ab:fc:5a:43:38:20:06:92:f2:e9:b8:79:
85:58:67:07:c9:2c:72:e6:df:f8:a0:25:cb:23:87:20:6e:50:
3e:39:68:27:17:d8:81:49:8d:74:a8:52:98:35:13:6e:cd:7b:
db:ca:bd:9e:86:da:81:e6:99:97:f2:2c:da:ae:31:6f:80:8c:
f0:7d:70:79:d8:ca:ac:3f:eb:00:b4:b1:39:4f:24:98:e2:d7:
b0:6b:21:78:9b:52:5c:1d:d1:3f:26:57:ab:12:7e:04:37:39:
6f:6d:b2:e1:ce:15:df:f4:33:60:6f:17:a6:ec:6e:34:57:7b:
11:a2:0e:4c:67:00:b5:e5:cd:d2:a4:e6:f9:c4:f1:e1:6c:a2:
79:58:9c:4d:27:21:1d:79:7e:3a:17:a7:1c:6f:09:e2:46:cc:
25:42:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:22 2025 by rpki-client