Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File: SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier: htMkdDJPulkNpR8pf9apFCK/aNGAxE3qB1WjDZzp1YY=
Subject key identifier: 5F:9C:4B:3B:A6:A6:F1:F2:8D:11:CD:4C:0C:3C:7B:B3:31:34:D3:DF
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer: /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial: 019A7301C9C13CF01C67199B9B0C5AB45965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number: 1118
Signing time: Tue 11 Nov 2025 13:01:28 +0000
Manifest this update: Tue 11 Nov 2025 13:01:28 +0000
Manifest next update: Wed 12 Nov 2025 13:01:28 +0000
Files and hashes: 1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: mXnKiVJjtfE0OFIp0L3mV4jwVpUGveDB16RhyKWbZz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c9:c1:3c:f0:1c:67:19:9b:9b:0c:5a:b4:59:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Validity
Not Before: Nov 11 13:01:28 2025 GMT
Not After : Nov 12 13:01:28 2025 GMT
Subject: CN=5f9c4b3ba6a6f1f28d11cd4c0c3c7bb33134d3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:4a:00:45:11:4e:2b:64:81:78:10:74:cb:
67:ab:bf:c8:a0:c0:ad:13:34:70:13:41:2a:01:bc:
3a:a0:6a:06:ff:15:60:d6:ff:ab:37:f5:95:8a:41:
9c:9e:a7:73:64:76:b5:a3:75:27:56:00:74:72:1e:
08:40:8c:71:03:c3:21:0a:5d:08:14:21:df:cb:45:
cf:04:2c:36:4a:74:08:38:e3:a5:a7:83:a4:8d:d4:
2a:8c:fb:12:32:35:85:21:6f:cf:86:c1:d8:72:a4:
cb:48:a8:ef:0b:d7:4f:13:1f:dc:34:d5:d5:04:89:
ed:36:a9:06:23:cf:c4:4e:02:30:d8:c6:68:56:60:
b1:f0:ee:7a:ed:29:85:0c:99:05:fa:e2:c0:2f:f5:
7e:fe:c6:63:f1:f6:2c:f4:1d:35:23:de:85:73:8b:
03:31:7e:e4:bf:c3:82:1e:56:8c:f2:a7:df:ec:aa:
ab:6d:5e:1f:4f:70:be:b8:2e:36:6a:2e:3c:3b:c3:
d9:27:c0:4b:4f:0c:35:a0:f7:a7:69:ac:da:99:79:
a7:06:eb:40:57:5e:04:0e:e2:50:72:03:53:d4:6e:
a3:96:96:2d:38:3b:28:95:43:87:7b:0f:35:da:c2:
e8:8d:e2:a1:f1:2d:23:3c:5b:6b:13:dd:72:a9:81:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:4B:3B:A6:A6:F1:F2:8D:11:CD:4C:0C:3C:7B:B3:31:34:D3:DF
X509v3 Authority Key Identifier:
keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f0:f4:4e:7b:c2:b0:29:98:ae:3c:d6:61:57:29:3f:0a:a3:
fa:0d:2d:7e:3f:44:5c:05:d3:a7:f4:f8:8e:a1:b1:be:a7:ef:
6e:b6:55:a1:6f:c9:48:c7:8d:b3:08:a4:c1:f1:4c:e9:3f:f0:
4e:a9:df:14:ed:4c:7d:ad:8e:bc:d5:17:2d:b9:c7:bc:14:5b:
ba:15:3f:cd:d5:50:bf:25:bf:71:69:53:bf:96:a0:24:db:c0:
2b:e7:9a:c5:45:08:07:f2:fe:83:8c:14:a8:1b:ea:9d:af:35:
fb:9f:c3:38:36:f1:ff:40:8e:37:ea:98:a0:92:41:cc:a5:85:
03:a3:47:f6:72:61:7d:a6:f7:4f:da:07:7e:2d:07:35:93:cd:
d1:8d:1f:08:f3:54:5b:32:64:cb:d0:dc:d4:43:0d:dd:48:7a:
dc:ca:51:c3:4f:fb:16:f9:bd:ab:f1:cd:52:9a:33:10:4d:ed:
c2:e1:a9:7c:16:d6:d7:45:bb:2a:a6:80:dc:cc:a9:ac:21:7e:
9e:b5:b1:dc:8a:9a:1a:60:f1:87:6e:58:60:91:a5:9c:ff:da:
fe:30:7f:2b:a5:40:5c:40:a8:2b:c1:72:37:c2:02:64:1d:1f:
bf:11:7a:94:ff:98:08:a1:2e:1b:35:2d:9f:92:1a:91:51:5a:
f2:a1:fa:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAcnBPPAcZxmbmwxatFllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMGNjYWUzYjExOTgyZDY3MWUzYWUyOTZiMjI5YjBhZmMz
NTliMDcwHhcNMjUxMTExMTMwMTI4WhcNMjUxMTEyMTMwMTI4WjAzMTEwLwYDVQQD
Eyg1ZjljNGIzYmE2YTZmMWYyOGQxMWNkNGMwYzNjN2JiMzMxMzRkM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz5KAEURTitkgXgQdMtnq7/IoMCt
EzRwE0EqAbw6oGoG/xVg1v+rN/WVikGcnqdzZHa1o3UnVgB0ch4IQIxxA8MhCl0I
FCHfy0XPBCw2SnQIOOOlp4OkjdQqjPsSMjWFIW/PhsHYcqTLSKjvC9dPEx/cNNXV
BIntNqkGI8/ETgIw2MZoVmCx8O567SmFDJkF+uLAL/V+/sZj8fYs9B01I96Fc4sD
MX7kv8OCHlaM8qff7KqrbV4fT3C+uC42ai48O8PZJ8BLTww1oPenaazamXmnButA
V14EDuJQcgNT1G6jlpYtODsolUOHew812sLojeKh8S0jPFtrE91yqYGPlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+cSzumpvHyjRHNTAw8e7MxNNPfMB8GA1UdIwQY
MBaAFEsMyuOxGYLWceOuKWsimwr8NZsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3d6SzQ3RVpndFp4NDY0cGF5S2JDdncxbXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mNjY2ZGUtNzdiNS00NDgwLTkyNDIt
YjI1NGI5OTRkY2RjLzEvU3d6SzQ3RVpndFp4NDY0cGF5S2JDdncxbXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mNjY2ZGUtNzdiNS00NDgwLTkyNDItYjI1NGI5OTRkY2Rj
LzEvU3d6SzQ3RVpndFp4NDY0cGF5S2JDdncxbXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/D0TnvC
sCmYrjzWYVcpPwqj+g0tfj9EXAXTp/T4jqGxvqfvbrZVoW/JSMeNswikwfFM6T/w
TqnfFO1Mfa2OvNUXLbnHvBRbuhU/zdVQvyW/cWlTv5agJNvAK+eaxUUIB/L+g4wU
qBvqna81+5/DODbx/0CON+qYoJJBzKWFA6NH9nJhfab3T9oHfi0HNZPN0Y0fCPNU
WzJky9Dc1EMN3Uh63MpRw0/7Fvm9q/HNUpozEE3twuGpfBbW10W7KqaA3MyprCF+
nrWx3IqaGmDxh25YYJGlnP/a/jB/K6VAXECoK8FyN8ICZB0fvxF6lP+YCKEuGzUt
n5IakVFa8qH6ng==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:40 2025 by rpki-client