Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File: SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier: TzQ5zV2UBFdlONaRvyMLYpt+c/iK/CRTUNOqLm9znok=
Subject key identifier: EA:93:A8:DA:58:41:F3:5D:1A:6B:2B:4D:D2:3E:AB:34:6A:C9:5A:85
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer: /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial: 0197CB3A489B0AB61F3A02B2D5D4C3DADC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number: 0FB8
Signing time: Wed 02 Jul 2025 13:01:23 +0000
Manifest this update: Wed 02 Jul 2025 13:01:23 +0000
Manifest next update: Thu 03 Jul 2025 13:01:23 +0000
Files and hashes: 1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: ZzG3Dmzfe6/AZ02iOKLTtK7/hSS6g2Y1wQpXEpPkRMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:48:9b:0a:b6:1f:3a:02:b2:d5:d4:c3:da:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Validity
Not Before: Jul 2 13:01:23 2025 GMT
Not After : Jul 3 13:01:23 2025 GMT
Subject: CN=ea93a8da5841f35d1a6b2b4dd23eab346ac95a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:9d:11:e0:a5:12:38:7b:e4:87:70:f2:1d:
59:6b:22:20:af:46:67:12:17:19:da:50:ed:88:85:
cf:fa:59:cd:bc:4d:2f:43:49:d9:73:8e:5d:d5:1c:
a4:62:57:fb:d4:79:66:a6:c6:69:58:81:8d:ba:e2:
d0:ab:19:15:6e:4b:3d:89:68:e0:3c:6d:30:68:9c:
a6:cd:28:96:ea:a0:eb:50:db:a3:55:54:56:07:bf:
3b:fd:c7:4d:d7:e6:56:1c:9e:da:d3:4d:a2:98:6d:
25:3e:7f:c6:89:79:06:0d:e0:7c:93:72:d9:50:39:
0d:aa:a6:4a:56:46:aa:66:8e:7d:5f:d6:7d:14:91:
a2:95:15:cb:ff:22:55:65:a9:d7:c5:66:9d:1c:f6:
0c:98:7a:c1:2e:f5:2a:bd:a5:b9:7f:cc:23:0b:29:
1f:97:a1:63:c7:e4:9a:2e:67:e6:d7:28:8f:14:c4:
75:4f:e9:13:2f:2a:90:b5:19:10:8f:3c:9f:4b:44:
25:96:03:39:3d:93:ea:16:4c:9d:43:b7:06:53:8e:
b6:f4:cd:7b:e0:8c:4c:54:4c:ce:bd:d7:08:a8:99:
12:e6:e6:6f:4d:48:08:93:c5:fc:7b:20:ac:a5:7c:
7e:bc:c8:9d:ad:be:bc:c5:22:f9:75:e6:f6:71:39:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:A8:DA:58:41:F3:5D:1A:6B:2B:4D:D2:3E:AB:34:6A:C9:5A:85
X509v3 Authority Key Identifier:
keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:51:ab:33:96:56:e7:0c:89:73:bc:6b:b7:7d:44:17:58:ed:
5d:76:34:15:4f:80:66:1a:87:40:a1:ac:f9:2f:a1:c0:c3:99:
30:ff:d9:8c:42:5e:33:d2:88:42:d0:9b:62:5c:23:9e:f8:2e:
d3:f0:e6:a8:8b:48:0d:50:28:a1:33:48:cc:5f:2d:23:08:f8:
7c:e5:09:dd:3f:db:92:2e:ae:47:8d:98:c1:7a:8e:20:21:2f:
52:dc:1a:34:72:41:1c:07:55:b3:a6:cd:88:9c:3e:1f:6f:61:
47:3b:59:1d:57:dd:48:e2:1a:ed:a3:de:a0:b3:9e:dc:c2:c0:
f6:21:11:be:39:78:a2:a5:18:e0:01:71:b7:c1:75:77:e3:30:
ef:df:9a:09:66:99:10:41:c1:24:cb:a7:2c:86:41:10:aa:30:
e4:79:12:84:e0:72:e3:21:24:ff:86:00:e7:d5:84:55:99:e3:
5e:ad:50:23:51:b7:2a:4b:73:5f:a2:f2:7d:81:d4:8e:23:d0:
48:53:93:ca:a6:c6:d0:e1:66:f7:21:bb:f3:e6:cb:79:40:9a:
d5:33:dd:d8:2b:b0:d8:b6:2c:05:82:6a:89:5a:e7:9f:1b:39:
cb:6a:1f:8f:fa:81:4c:ca:2e:c3:68:f1:ab:32:ca:df:fb:9e:
53:fb:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:14:18 2025 by rpki-client