Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: qr72fLrefIjZLlSEVhqeaT+BAGdvRYuZHYo6dk3crLM=
Subject key identifier: E8:EF:B0:C2:45:46:86:7A:78:08:C6:A9:E6:5F:97:C4:0E:02:02:5B
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 0198D5BB8053198E023568A2FC6075A05C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 1278
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: EPaitPI2UTUlpylHHKEc4YvfSB2AhkERBapKnxcND/M=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:80:53:19:8e:02:35:68:a2:fc:60:75:a0:5c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=e8efb0c24546867a7808c6a9e65f97c40e02025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:0f:c1:50:ad:5b:fe:f9:0e:ee:16:8d:a9:ee:
88:8b:25:91:35:89:17:42:65:61:f1:35:d9:d8:6d:
c6:c7:33:9f:a6:1b:66:2e:c5:9a:35:e0:3e:c7:5e:
af:47:d8:f8:cc:31:36:55:db:34:2f:d7:66:c0:94:
10:25:94:94:42:6d:3f:26:51:72:9f:98:22:53:94:
55:fb:ec:c0:5d:9f:19:43:73:20:00:bd:50:28:57:
14:8c:67:ff:fa:0e:55:af:07:4f:d8:51:50:58:28:
ab:83:78:fb:3d:9b:7a:b5:d2:d0:4f:b9:24:22:4e:
d8:eb:a5:06:b1:cb:86:52:bb:1e:97:e4:e6:95:0c:
9e:ed:02:11:ed:0f:ec:c7:0f:24:7b:ae:ad:03:ae:
d3:3a:cd:fc:a1:7d:13:a2:97:5c:ab:be:90:16:39:
e0:54:a4:4f:7a:54:99:f2:16:0f:ad:1b:53:f0:96:
8e:03:d3:74:23:c2:19:72:e8:b1:df:c8:64:85:01:
5c:e5:08:0c:3e:9d:de:c5:2c:9b:5b:ba:d6:b7:8a:
62:e9:69:27:1b:fb:ee:1f:a6:86:f1:9f:e6:3b:8e:
b2:79:51:8a:f6:53:3d:f1:62:18:b0:4a:07:8d:88:
ca:e8:57:21:67:89:c3:36:f3:5d:00:ec:83:9b:3d:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:B0:C2:45:46:86:7A:78:08:C6:A9:E6:5F:97:C4:0E:02:02:5B
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:34:9b:fb:25:e7:5c:df:0d:f7:8d:a5:8a:3d:3e:90:6e:e0:
c9:7e:33:00:cd:ce:62:82:8a:0e:28:0f:cc:f8:39:68:e4:ee:
35:2c:bd:a3:cb:35:b6:12:29:a9:59:fc:69:d6:cb:58:80:a1:
90:31:28:bf:76:ae:88:d2:57:f9:57:56:f5:53:28:7b:a2:d1:
06:61:7e:42:19:37:a9:3e:69:ef:c7:ea:7f:c1:01:3f:f8:fd:
0f:11:16:2a:f4:f6:e2:7b:21:cb:9b:65:eb:b3:16:8c:22:7b:
14:88:a4:d4:69:ab:21:e3:b4:8d:fe:15:1b:6e:a7:cf:5f:fa:
ec:22:9a:7f:66:8f:78:47:bb:9d:0b:49:ec:31:e5:43:f9:8a:
10:48:b5:c5:31:1c:8d:1c:5d:a7:04:98:a1:07:09:01:83:e7:
fe:db:4a:d2:97:96:c0:01:3d:d7:8d:70:d4:7e:2c:88:85:77:
db:23:c3:17:7a:bd:d0:6b:c8:2a:59:1d:5c:d5:ee:44:bb:6f:
2b:a8:8a:a5:1a:76:84:6d:79:06:74:06:2b:86:5f:60:a5:25:
8c:b6:c6:1a:1b:23:0e:a3:d6:7c:af:4d:05:4b:d4:bc:70:b9:
19:e8:57:8e:b2:c6:81:25:b7:49:6e:47:8d:99:dc:07:22:37:
d8:37:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:28 2025 by rpki-client