Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier: irfJ4Q9cggb1gYoKEZXQM0llxfPREGFSNz45p8rgOZU=
Subject key identifier: C2:3C:79:10:31:16:B2:F6:36:DF:43:22:AC:6A:60:64:6F:B3:51:5D
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial: 019A71B7B293C5F42E6B2E38F3D31A1EFB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: ZEsj2V8/65uMwMEY4EyIYdCO0HGs57Dwh3bhQS1qI/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b2:93:c5:f4:2e:6b:2e:38:f3:d3:1a:1e:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=c23c79103116b2f636df4322ac6a60646fb3515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:cf:92:fb:e6:08:f4:c0:ee:25:9b:5c:c1:
92:86:ff:0a:e7:a6:6c:fa:55:4c:4b:86:4e:96:9c:
61:a9:72:88:fc:da:6f:54:0e:cc:28:7b:da:4b:bb:
37:c9:8b:6e:ed:e1:f7:8a:80:ae:31:e0:9e:ec:a3:
26:b2:c0:c9:b2:b3:ed:a6:9d:37:68:fc:5f:1e:9c:
4a:eb:c6:a7:61:a7:e5:aa:db:0d:fe:9f:95:d7:ba:
b2:dd:05:ab:f2:02:64:11:61:1e:42:9c:ba:37:fa:
96:dc:b0:dd:2e:22:ca:0f:9e:87:0d:64:d5:74:7e:
5f:d7:3a:ba:a5:c8:be:e0:58:e1:5b:63:8e:d7:fe:
23:89:30:80:aa:ad:86:22:2d:a5:9d:3f:27:30:c8:
6c:13:53:e7:e9:f0:0f:d2:98:58:86:ec:da:3d:7c:
95:9c:ed:d8:dc:a1:db:18:c4:9f:75:11:d1:77:82:
58:42:0b:ed:54:69:3b:8f:44:72:ed:c9:db:8f:56:
93:06:09:38:90:6f:59:dd:40:36:f5:89:5a:53:b4:
41:94:ff:31:42:fb:6e:d5:d5:78:76:4f:1a:fb:f3:
95:16:0a:ce:31:f6:2a:82:04:7e:39:19:64:70:f0:
4e:84:46:df:90:04:17:1d:e1:92:f1:ae:f6:34:6c:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:79:10:31:16:B2:F6:36:DF:43:22:AC:6A:60:64:6F:B3:51:5D
X509v3 Authority Key Identifier:
keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:95:14:4b:89:b4:d4:29:16:cd:e6:87:d9:07:fb:f2:28:87:
17:b6:4c:ce:30:ca:1d:1b:48:c1:24:cb:cc:38:a0:b1:9c:59:
27:dd:55:d8:b9:cb:d5:ff:f2:77:d5:0d:10:f5:e9:ba:64:c9:
e0:c4:bb:11:13:20:9a:d6:df:f5:2e:e6:c8:30:24:9e:6d:72:
90:0b:81:f1:5d:f7:7e:15:7a:9f:c2:9b:1c:15:62:6d:6c:ea:
cb:b6:50:ac:f0:9e:8a:b9:6e:d5:c3:57:e7:e5:e6:a1:d8:5a:
69:c8:05:1c:3c:c2:5d:c7:8b:8e:87:d7:30:44:7f:d4:36:6d:
03:55:91:1f:9b:ad:ca:90:7b:90:85:9b:5e:5d:09:ac:9a:d9:
a1:d5:80:6b:eb:b2:18:f4:a2:95:ec:4f:74:04:b0:4b:6c:22:
30:4a:0d:80:67:a1:f4:8e:fa:b4:5d:fe:2e:85:a7:a0:aa:51:
94:38:96:bf:1a:41:96:97:80:d5:fe:83:9a:58:d8:9d:a1:57:
68:5e:4c:66:a6:c6:c9:67:42:de:3a:52:a9:6f:ce:fd:f9:14:
a0:2c:f7:b9:b8:bb:b7:2a:b3:78:bb:68:99:71:f4:9b:09:6b:
1c:f9:4e:54:c0:34:49:d3:77:04:55:f8:32:31:e9:01:8a:71:
21:0d:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:49 2025 by rpki-client