Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier: 2MZAzaW0axf7yQ5OTpJdi1PfkVUDpYOYPqsiym5cNfo=
Subject key identifier: C3:05:4C:0D:9F:58:1A:7C:D5:D8:8F:D5:E6:62:6B:C8:05:4E:46:6B
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial: 0198530E9BD3CAAD81C896D6FEC12E535BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number: 0CEB
Signing time: Mon 28 Jul 2025 22:02:02 +0000
Manifest this update: Mon 28 Jul 2025 22:02:02 +0000
Manifest next update: Tue 29 Jul 2025 22:02:02 +0000
Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: jC6eD0ZEIg9JmZaSdPk3LOyoFB7jDk8a6WD0x6/nEw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:9b:d3:ca:ad:81:c8:96:d6:fe:c1:2e:53:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
Validity
Not Before: Jul 28 22:02:02 2025 GMT
Not After : Jul 29 22:02:02 2025 GMT
Subject: CN=c3054c0d9f581a7cd5d88fd5e6626bc8054e466b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:74:83:6a:79:51:75:9d:17:91:63:e1:19:
41:b9:db:f0:78:21:ca:d4:a3:6a:5b:2d:8a:f7:00:
4e:f4:33:f9:e1:94:92:52:cd:84:c7:76:83:e0:f0:
d0:56:de:da:6b:b4:ea:f5:bb:7b:f5:3d:89:d0:ee:
0a:e0:62:57:ff:fc:60:eb:fb:1a:12:59:1e:e5:23:
98:ac:a4:15:4b:bc:97:3c:d7:62:cb:5f:0b:5c:d2:
a1:eb:19:d1:f1:79:e0:f1:39:bb:dd:2a:e8:1e:9e:
4a:eb:54:ef:29:54:4c:26:6a:92:02:f8:de:d3:7a:
13:5d:69:b8:59:42:9b:ba:dc:6c:26:2c:8b:8a:da:
e8:88:93:ba:b4:11:3f:87:74:42:1e:a9:ca:00:1f:
a5:1e:0f:0f:c7:37:f2:88:bd:97:26:3f:fc:14:ed:
2a:d5:eb:15:9a:f9:df:f7:02:7b:1e:54:2a:eb:45:
84:8b:de:fd:1d:7f:c7:9c:83:7a:f3:90:45:61:a1:
e0:13:b8:59:72:65:54:c6:89:47:e7:eb:56:bf:9e:
c8:f1:db:57:96:c3:61:e4:d6:e8:1e:c1:4b:92:bf:
e3:e2:b5:c6:fe:7a:f0:90:f1:67:dc:6f:a9:99:9a:
91:4f:a8:74:e2:ba:67:ce:81:21:eb:d7:10:ae:65:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:05:4C:0D:9F:58:1A:7C:D5:D8:8F:D5:E6:62:6B:C8:05:4E:46:6B
X509v3 Authority Key Identifier:
keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:27:d2:db:c9:0b:62:56:82:31:e1:88:48:f1:25:bf:a2:20:
fb:07:d6:a4:84:d4:94:c4:91:b4:eb:c5:89:5d:2c:d4:f0:cb:
6f:7b:23:fe:85:65:01:ca:f1:12:ef:16:35:83:59:22:45:c0:
26:84:ee:d6:1b:de:7a:7c:9c:61:d5:37:86:a7:eb:36:30:69:
2f:aa:90:c3:a1:de:50:f8:77:c2:ac:ce:06:d6:a3:10:78:44:
31:53:8d:54:af:39:3a:93:6d:08:b5:b5:b6:5c:e7:4f:d9:98:
40:e5:5e:d5:ae:56:e3:b0:c8:46:cc:0c:92:8c:96:8e:e4:a2:
c4:b6:cb:60:8b:82:1b:d6:1b:36:ad:c0:32:6d:f8:c0:24:d1:
a9:ba:e2:68:90:43:ef:3a:f1:0b:8f:bd:11:fb:f4:a8:d3:ce:
14:d0:85:31:da:19:6f:f6:8a:64:34:8a:ae:cc:3b:99:fc:f8:
58:db:00:7c:9f:65:ff:50:e8:8b:d2:25:83:45:06:31:a6:3a:
45:17:d9:ad:ee:a8:dd:b9:c1:10:5f:7c:26:38:7f:34:88:0e:
15:a6:b6:f1:21:a2:19:25:8e:31:f1:be:72:a7:8b:39:54:24:
62:15:92:9c:16:1f:71:35:49:0a:09:59:ad:58:4c:a5:5c:9a:
98:16:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:01:24 2025 by rpki-client