Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: 2Y6SUOgX7gzU9ecoQL26nR5GXEZXj9ZkyMEuP/Spg8A=
Subject key identifier: D1:B7:29:B8:38:F0:8F:6A:7E:1A:BC:15:0C:8C:08:DF:4C:66:A2:7B
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 0196BEC9E2144556376FB872EBE2634653F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 1163
Signing time: Sun 11 May 2025 10:00:23 +0000
Manifest this update: Sun 11 May 2025 10:00:23 +0000
Manifest next update: Mon 12 May 2025 10:00:23 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: cwbMVvbdyDr92S8G7Va9EWR3xJxFKb4nql5jVYxgT18=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:e2:14:45:56:37:6f:b8:72:eb:e2:63:46:53:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: May 11 10:00:23 2025 GMT
Not After : May 12 10:00:23 2025 GMT
Subject: CN=d1b729b838f08f6a7e1abc150c8c08df4c66a27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:80:e0:50:8d:f6:51:3a:f2:99:67:03:97:
d3:85:72:9f:e4:a8:00:39:87:37:46:c0:ea:06:14:
8d:43:e8:92:fc:76:23:40:17:d2:6c:12:99:38:83:
70:cd:1d:02:74:9b:db:8f:f2:85:02:93:d3:cc:15:
29:21:3d:52:bb:c6:f5:0c:a4:31:fb:e3:d9:43:6e:
21:a3:ba:94:ef:39:cd:6f:41:3c:a3:c6:22:6e:16:
74:8e:ff:dc:87:c0:9d:52:98:7c:06:3f:15:26:b4:
0d:c8:22:37:08:cc:0a:be:18:dc:7c:26:97:47:03:
e1:08:45:9e:50:43:b9:7e:d4:c7:f7:75:90:41:af:
a8:3e:3f:8d:bf:02:38:95:a9:d0:7f:aa:b2:cd:5c:
5b:3f:44:a8:f3:94:f1:e9:20:2f:86:cd:31:e6:e4:
f1:08:97:13:27:9e:d8:ae:f0:ca:77:b1:15:4d:9b:
ae:38:4e:42:1b:d2:2a:59:d2:09:23:2c:43:91:bc:
81:bc:10:e1:7a:0c:82:4b:79:01:b6:6d:4a:68:16:
61:c1:ad:1a:8f:73:15:62:f6:d4:7c:ef:80:52:61:
fe:d9:e5:87:38:c9:89:53:52:54:58:c9:fd:05:ab:
7a:91:93:b7:22:71:32:7c:47:dc:18:8a:69:bf:3f:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B7:29:B8:38:F0:8F:6A:7E:1A:BC:15:0C:8C:08:DF:4C:66:A2:7B
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:36:e3:6c:ce:bd:dc:e0:77:83:e3:d2:90:b5:97:c5:e4:07:
07:4f:e4:ad:02:cc:5b:b6:ec:5c:50:13:4a:14:0c:24:bc:87:
a3:da:3d:23:f5:20:8f:42:d7:55:eb:93:8f:63:e9:62:a9:e8:
5f:b8:b9:12:dc:2f:d4:b4:dd:88:6c:5d:9b:a7:7e:51:99:81:
38:d0:2b:07:45:9c:19:17:65:75:6a:15:47:0c:60:93:44:98:
a1:5b:1d:81:28:03:a3:99:b5:39:f2:17:51:0b:34:82:8c:6f:
1e:e0:6b:a1:e9:f5:e0:91:e5:d4:66:b5:e7:88:8c:1a:0b:ce:
ea:55:3d:4c:b0:f6:84:a8:c2:5b:9f:2a:cf:29:6f:4c:8f:95:
90:f6:cf:13:f9:d8:f3:57:f1:02:04:fd:99:c7:61:e1:4e:3f:
e0:69:f5:08:19:9c:4f:38:fb:f3:42:a3:7d:0f:33:83:20:80:
5f:12:72:14:af:8e:c5:04:4c:c7:53:20:12:b0:e2:eb:6a:a8:
64:13:c5:6a:f9:b5:da:bd:08:6f:49:b1:37:a9:bc:47:0e:f6:
1d:50:e1:49:1a:34:ee:34:06:bc:7a:0c:ae:45:d9:cd:84:c5:
ab:75:a6:ba:67:44:14:4d:f0:8e:d4:58:1f:37:98:ff:83:90:
99:22:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:39:56 2025 by rpki-client