Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: 89xLV2bDIyWNdzteVCZTfQ3XbbM6GwDDOr5C9HYVFgI=
Subject key identifier: 34:5F:C6:49:43:AA:F7:BD:18:D0:90:34:C3:38:BF:80:9A:BB:73:26
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 019848C02D68C4E732CB3755083C6D0E4776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0D9B
Signing time: Sat 26 Jul 2025 22:00:10 +0000
Manifest this update: Sat 26 Jul 2025 22:00:10 +0000
Manifest next update: Sun 27 Jul 2025 22:00:10 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: rmLFcBQR3T4S1VSaMBHy/2VtV4iLE/MycS7CTuB/AwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:2d:68:c4:e7:32:cb:37:55:08:3c:6d:0e:47:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Jul 26 22:00:10 2025 GMT
Not After : Jul 27 22:00:10 2025 GMT
Subject: CN=345fc64943aaf7bd18d09034c338bf809abb7326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:16:eb:cf:4b:a9:07:23:1b:e7:ea:0a:b2:
18:5b:6a:58:bb:3f:44:8d:27:64:de:cf:7e:14:71:
09:61:e7:a5:ff:2d:9b:6a:8f:8c:26:f4:b3:92:46:
69:bb:d2:d4:91:54:34:53:84:34:2a:d0:b2:74:a3:
6a:fd:4f:be:c7:cf:26:57:80:14:93:76:e8:89:23:
cc:89:75:1a:a8:02:78:ca:19:5d:2a:55:54:a5:25:
0b:5b:f4:84:e1:6a:61:25:17:12:c3:65:d7:47:fe:
e4:31:f3:aa:46:45:eb:cb:98:39:b6:47:95:85:02:
5a:02:51:74:46:fe:b6:58:e1:b7:02:39:00:e7:2c:
0f:26:4b:85:fa:f3:5f:ed:8f:bc:fb:cf:09:30:c6:
7a:17:69:97:57:46:ba:45:72:ae:ed:85:98:ef:3c:
ff:0b:b6:1d:77:af:a4:79:65:09:14:44:ed:63:3f:
93:cc:ff:76:f0:88:e1:4e:eb:70:cc:d0:26:e0:69:
19:c5:13:f9:04:e8:27:89:dd:7c:0b:30:8b:5f:ac:
99:6c:41:c4:5e:00:16:dd:0f:cb:27:9d:e3:e8:33:
64:81:6d:0b:15:37:49:06:fa:66:97:4c:86:c2:a1:
25:f2:ce:b3:f6:26:fd:0b:3e:05:03:40:bd:95:88:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5F:C6:49:43:AA:F7:BD:18:D0:90:34:C3:38:BF:80:9A:BB:73:26
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:bf:ae:49:b4:d3:41:55:72:c5:d7:a0:ef:a0:52:3b:e4:
3a:c2:c4:4a:08:b0:db:80:dd:bf:b9:97:df:4b:12:0d:9d:ca:
43:7e:ee:d0:85:39:4b:15:d3:77:71:3c:77:ce:47:bc:dc:a7:
ce:14:b9:b3:64:93:b2:86:65:37:32:81:e9:aa:de:bd:ed:ba:
dd:5c:2c:97:ed:a9:ed:56:72:ef:66:3e:7f:55:9c:e9:7e:59:
59:3a:c0:35:ca:a0:11:78:f0:cc:35:d5:37:50:02:db:40:eb:
bc:38:2f:ae:a5:41:d1:bc:10:73:a7:91:1a:04:f7:fb:97:a4:
d6:2a:01:c7:bc:91:15:cb:62:66:1c:3c:3a:d3:04:c2:65:4f:
46:63:1e:bf:4d:2a:7e:0e:1f:45:e6:a2:3d:fb:fb:5c:40:6e:
09:fb:2f:48:4e:4f:9b:35:6c:58:d8:83:c5:dc:23:a7:18:59:
4f:8a:33:f9:3e:dc:58:d4:ef:71:ba:6a:5c:16:33:1b:0e:e4:
31:7b:28:6e:01:04:8b:5d:b4:f1:6b:b2:31:72:5f:aa:87:de:
4f:e8:eb:d6:d3:2e:ce:e5:ad:83:86:f2:3f:bd:71:7d:aa:c9:
d0:a4:aa:ca:33:54:4a:85:5c:c2:fd:78:83:a2:97:e2:42:ff:
c6:f2:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:53 2025 by rpki-client