Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: BZQO1RZCDJmlJTgvaHCcicuYsBbtlpAZ/NCgsRDbb9E=
Subject key identifier: 9D:72:7A:31:3C:83:F8:E7:F8:0F:CF:3E:09:95:70:A1:AD:3D:11:CE
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 01965492FB3FB2FF53222E033371A3566BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0C98
Signing time: Sun 20 Apr 2025 19:00:40 +0000
Manifest this update: Sun 20 Apr 2025 19:00:40 +0000
Manifest next update: Mon 21 Apr 2025 19:00:40 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: mQ+ATbeldEZjxAaCrEQFBvojwG9n0RPRudlvVW2eiP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:fb:3f:b2:ff:53:22:2e:03:33:71:a3:56:6b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Apr 20 19:00:40 2025 GMT
Not After : Apr 21 19:00:40 2025 GMT
Subject: CN=9d727a313c83f8e7f80fcf3e099570a1ad3d11ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:c9:74:46:0c:da:8e:c1:bf:71:d7:b1:60:
85:9f:a8:93:69:c6:03:7f:34:80:62:92:c6:3e:01:
aa:39:96:9a:95:3d:62:6a:03:1c:39:84:df:cd:9b:
0b:85:ae:0f:00:29:c9:3d:c6:3b:69:76:52:4c:fe:
10:26:f4:08:34:bf:4c:3a:20:c8:bd:2e:6b:0f:d3:
4f:db:bc:a9:c8:67:b6:df:85:4f:de:a0:f2:7f:43:
ed:0e:1e:45:56:3d:0e:ea:cb:72:6f:5a:f2:75:71:
e4:15:ed:f8:de:4e:dc:83:d4:97:86:3f:9c:04:fa:
ec:1a:d3:85:15:60:96:35:e5:2e:64:95:15:06:ec:
bf:1a:c2:39:6d:1f:1d:ba:04:b5:fb:33:16:6c:ae:
87:9f:36:81:b8:3a:e9:4d:69:f1:02:fc:67:89:e4:
03:14:e1:e6:d1:13:01:f3:93:c4:5e:4b:f9:07:56:
8a:47:28:50:a5:ba:b0:18:ed:71:5d:bd:5a:ee:16:
03:3d:cd:22:9a:51:ac:6e:50:de:01:24:15:34:8d:
29:23:ed:dc:05:d0:a5:e4:c4:07:82:1a:6c:4d:2f:
17:4c:e8:e8:9f:de:5f:c2:46:70:00:b5:e9:28:aa:
67:08:06:9b:10:94:39:4b:dd:b6:d1:70:a8:af:6b:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:7A:31:3C:83:F8:E7:F8:0F:CF:3E:09:95:70:A1:AD:3D:11:CE
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c6:e7:60:3e:6a:b7:98:b2:2d:b2:4e:5a:a9:6b:fe:c3:3e:
a3:c6:f6:15:2a:b1:c2:38:3a:22:b1:32:28:86:40:09:4c:84:
a3:5f:fc:9e:1a:63:13:82:16:11:f2:c5:b7:ca:0c:88:ac:e1:
f7:9a:f8:73:54:23:65:3a:fd:46:45:77:52:a2:52:52:03:f0:
d1:a8:a6:33:3b:aa:12:82:06:83:95:9f:ac:da:f9:b3:52:e6:
76:50:4d:4b:01:5f:a1:07:2f:f9:4f:91:0f:35:1c:3f:62:02:
d2:cd:ee:8f:c7:ec:b5:79:00:d5:78:d2:03:2f:a5:8e:d3:9f:
24:88:25:06:be:8d:1b:10:b1:8a:1a:ad:73:5c:60:b7:49:4e:
20:3a:56:43:f7:66:3f:01:4a:37:a1:d8:09:65:5c:85:ad:58:
21:c4:12:11:1e:0f:68:26:37:af:af:b2:62:8d:b3:3b:db:f8:
73:4a:2e:8f:c0:e9:f3:c1:17:4f:ca:88:55:ee:ef:bd:ed:7a:
2c:62:f9:af:70:70:65:e3:6d:3b:9e:a4:48:bb:1d:e9:ea:0b:
5a:ea:43:e7:44:51:86:d4:6e:85:78:09:04:1e:40:e8:d5:9b:
5e:48:5e:87:c8:0a:bb:60:db:03:1e:45:b7:a2:57:3e:ef:7c:
3a:f8:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:17 2025 by rpki-client