Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File: swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier: x5Rv5LYOvkIUOBHhWw6x0dv3/W8kNID9hQznWV1DuYs=
Subject key identifier: 08:9B:A0:54:56:E5:FD:8B:08:F5:24:C2:D7:0B:26:7A:04:71:62:EC
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 0197B6A06CA81AB082631D01B75897287FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number: 12B6
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
2: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
3: NzknDmn-TkBLhhCh3FNFS-0Flmg.roa (hash: s7se3/xdnMDjGZBCBbuaiotf7JHLKV6q0JTbfM402gw=)
4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: unqHn0naAQXKzlMC/mKGkYkupXxgzw3EBQlhCFO5tIA=)
7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6c:a8:1a:b0:82:63:1d:01:b7:58:97:28:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=089ba05456e5fd8b08f524c2d70b267a047162ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:bb:6e:d6:b7:d4:6b:a9:c7:14:94:57:58:
b9:d9:65:70:3e:f0:bf:70:fe:61:9d:7d:ac:a8:c9:
0b:f6:f0:74:cf:40:a6:72:9b:e3:b5:c4:c6:7e:74:
36:6d:e9:89:5d:a0:84:6e:56:9c:34:f6:21:a0:01:
b9:f2:64:0e:8d:84:34:0c:7f:a9:99:27:8a:c2:dc:
cc:a1:5b:25:84:4c:a9:ca:85:f8:50:e3:80:b8:78:
f2:3a:b5:1e:52:81:2b:08:5c:1c:d7:00:ef:96:16:
10:f2:fa:f6:6f:45:d1:3e:c9:0e:a9:cb:20:9a:5c:
65:72:4a:57:bb:93:80:c2:cd:02:6b:67:67:80:4e:
20:49:b1:20:5c:20:b2:e5:50:6d:02:1c:25:6f:c8:
76:99:dd:b9:39:e9:75:75:91:42:d4:7d:68:8e:08:
06:d3:9f:39:38:77:d0:77:fb:72:8a:07:6b:04:53:
c0:55:29:8c:35:70:69:46:83:3a:2c:56:37:d2:d9:
be:62:73:53:87:56:61:6b:19:41:cc:f9:4b:0f:64:
f2:6f:99:eb:a5:96:9b:38:2f:62:aa:20:94:1c:34:
32:80:cc:dc:10:73:40:67:c9:21:9e:c5:80:b0:42:
95:a0:70:19:26:15:0a:60:ef:1f:ed:e9:12:27:cd:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9B:A0:54:56:E5:FD:8B:08:F5:24:C2:D7:0B:26:7A:04:71:62:EC
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:90:21:86:89:e0:5f:63:f7:ae:8f:17:d6:f5:cc:21:23:40:
8f:c0:9f:df:af:0c:8f:f3:d0:ba:34:c4:7d:f5:79:1c:9a:95:
2e:00:8c:8d:ce:7c:cb:21:28:94:7e:dc:66:c5:6d:34:10:8d:
f1:b3:46:22:62:10:1a:05:01:2c:93:36:30:c0:47:9c:53:0a:
15:3b:b1:a4:64:f0:45:49:0b:49:5d:4c:92:b0:01:24:00:69:
40:79:40:cf:ae:24:6a:cd:30:f5:ed:41:e4:46:56:a2:84:2b:
5d:0e:3f:cb:4f:11:5b:2a:a0:c0:16:68:7d:00:db:33:25:d3:
47:56:f0:a4:63:af:a8:ee:95:30:6d:74:a2:89:08:90:06:53:
f7:c8:7c:0e:00:bc:df:2a:39:51:ce:d4:42:17:e2:d5:84:11:
bd:0a:36:2d:e1:f7:c4:a2:ee:18:27:db:a0:bb:55:89:25:ff:
5f:29:30:32:9c:76:ca:ff:69:72:58:8d:bf:a6:98:77:65:67:
98:d7:60:4d:1b:d6:a6:c9:b8:2d:eb:c9:9b:54:97:04:62:c6:
83:6a:a4:12:a7:25:bb:58:0c:22:d1:8e:66:7c:91:08:da:c0:
d8:dc:2a:65:14:58:5a:4f:a1:56:4b:30:68:5c:fb:09:50:cf:
93:6e:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:12 2025 by rpki-client