Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: uIzqi8Y8XWCoKThbSlt9KburDuTiuRop43vKFkzESrI=
Subject key identifier: 05:68:BF:39:B5:CF:FF:42:2A:03:FD:49:69:43:CD:05:66:9B:4A:4D
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 0199FD346AC8656C38619A052D2150BFBF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 1311
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: 2mGni/2rJI7h0KCDt5ipgUTFok1EUDpiU1PkuNPw7QM=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6a:c8:65:6c:38:61:9a:05:2d:21:50:bf:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=0568bf39b5cfff422a03fd496943cd05669b4a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:f5:e9:35:09:ae:a1:51:53:ff:01:71:b6:
69:4a:fe:fd:1c:bd:52:89:64:96:c9:63:ff:c3:d3:
23:03:fa:ff:28:94:ec:64:b8:25:5c:c9:c8:e6:4c:
ae:e7:68:6c:27:47:4b:ac:d1:7f:b1:e1:53:65:ee:
69:2f:e7:11:ce:4d:d5:be:d4:e7:b0:5e:63:52:b4:
f3:4f:8a:00:e2:9c:f7:22:71:c3:f0:5a:96:75:4c:
ba:5a:2e:3f:81:4f:74:4e:72:e1:1e:ba:c7:43:2d:
8e:4d:f2:72:15:96:83:fd:6a:a1:b2:b9:c0:74:a4:
76:20:a4:ab:80:30:08:91:05:70:cf:65:71:9f:41:
ef:69:70:bd:43:64:20:96:04:11:ef:74:ac:72:18:
8c:61:26:2b:07:c9:b5:9f:0f:63:eb:f1:89:84:57:
55:3a:72:c7:34:7b:dc:03:aa:bc:bc:79:b6:a7:f6:
70:87:da:0d:35:c0:34:e3:44:d7:00:41:c3:ce:48:
81:4b:7c:d5:db:81:23:c3:ef:9b:61:e2:04:fd:84:
b2:7d:38:74:b4:c1:3d:34:8b:37:e2:b7:32:e2:24:
c0:f8:41:8c:8d:0c:c9:fb:50:a1:e6:0c:81:60:9b:
89:fe:2f:2c:54:6c:02:ab:ba:2a:c5:61:58:8e:2e:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:BF:39:B5:CF:FF:42:2A:03:FD:49:69:43:CD:05:66:9B:4A:4D
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5b:95:96:69:10:c7:ed:61:7b:44:50:fe:77:41:06:c4:22:
2a:34:6e:d2:38:a9:f0:04:ab:b0:5a:30:53:dc:bc:f8:a7:e2:
3a:92:5d:f8:14:be:41:24:be:f2:a7:9b:76:9f:45:b6:95:f9:
b2:b0:df:84:af:c8:d2:db:39:4f:74:db:ef:a6:48:bd:7f:b1:
61:86:18:0f:34:24:b8:a4:86:bb:23:2c:0a:76:d0:86:33:9a:
8c:55:0e:62:be:0d:ca:bd:1a:f1:b7:ad:cc:71:67:23:ee:09:
41:d1:22:b1:eb:53:c3:96:34:72:64:ec:15:92:c8:84:9b:55:
fe:5e:5a:cf:4a:3b:2b:ee:6a:9c:5f:d2:4c:c9:e3:1c:b9:2b:
61:9a:8a:9a:1d:fd:b3:0a:57:db:bf:25:1e:5f:cb:d4:1c:ee:
cc:aa:73:2d:6f:3e:8f:c9:2c:0d:1c:b4:21:f8:ed:26:a9:3f:
f8:11:cb:cd:fa:11:95:0a:cf:35:15:b6:58:50:89:91:40:42:
7d:c6:c9:1c:02:10:10:ce:d5:45:75:08:15:5b:0c:e1:07:dc:
9f:0d:ad:bf:a1:f1:1a:c3:dc:d2:75:f1:65:97:05:6b:00:77:
b1:2a:cb:a6:a8:34:09:fc:3b:9c:14:29:f6:de:7d:45:85:6d:
17:58:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:13 2025 by rpki-client