Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier: ZZLCizhfl3rNwLnynvn07gSyt5qyciUepMskbYUYsOs=
Subject key identifier: 50:A4:2C:02:78:14:1A:3C:84:79:EB:92:2B:34:B9:E0:C3:E6:4A:2A
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 01974CA024C28F16E013512EB8AD2EA89D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number: 084E
Signing time: Sat 07 Jun 2025 23:00:52 +0000
Manifest this update: Sat 07 Jun 2025 23:00:52 +0000
Manifest next update: Sun 08 Jun 2025 23:00:52 +0000
Files and hashes: 1: RpILInX8NStLNGo-i8gOsmzL6zY.roa (hash: FpLee9KVIm2tnuSw+HOBh77bwO/f6Y21iVU1yWYIf/s=)
2: bt4jZ_Fg1p7_W1scNCt1lEzJp-I.roa (hash: NTiQWaRJGSQ8lYqtebC2mqNAEmw3CSrzTGYD0GLgxFA=)
3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: ZqSOeQFfsYWG5N6W+IdF/pq5pm6bx7TJ4BeJHoMBXyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:24:c2:8f:16:e0:13:51:2e:b8:ad:2e:a8:9d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Jun 7 23:00:52 2025 GMT
Not After : Jun 8 23:00:52 2025 GMT
Subject: CN=50a42c0278141a3c8479eb922b34b9e0c3e64a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:f1:d0:f5:f7:de:0e:49:30:c3:8b:cf:dc:
6e:44:a8:70:3d:fa:32:a6:70:65:23:4b:34:35:8d:
ca:b7:41:77:0d:00:2c:9e:54:34:c0:e3:3b:48:07:
66:52:2e:41:0c:38:54:d1:6c:71:75:97:44:c9:f8:
fe:59:58:c1:7d:ad:cf:f2:65:c3:e3:67:eb:40:dc:
c9:96:37:88:b5:5d:76:28:7f:19:eb:a7:a9:fa:9d:
0f:78:97:22:2d:ea:68:bd:e0:41:74:31:71:a2:ce:
cc:f1:54:12:09:08:6b:35:7f:cf:89:1c:0c:42:d6:
6b:4b:5f:f8:d5:41:52:11:4b:3a:3b:e3:45:3f:d9:
ec:eb:e1:39:e4:6d:eb:79:50:e7:bd:ee:70:54:04:
46:4d:38:8c:1a:b4:4e:b5:4a:87:31:f8:98:58:dc:
97:bd:63:61:04:7d:06:a2:6d:22:84:df:26:14:b0:
6e:3a:54:1a:c6:c2:2c:ad:81:0b:ed:e0:59:9a:4e:
4e:4c:27:a6:80:fa:8f:4b:a8:e9:04:32:38:13:00:
7c:4c:c8:c8:2f:8b:fa:b9:0f:85:55:bd:45:b9:9f:
ee:77:3e:c4:26:65:3f:0a:61:ab:84:6c:65:9e:c9:
b2:be:87:df:17:1d:44:0f:44:01:71:54:16:d9:e8:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A4:2C:02:78:14:1A:3C:84:79:EB:92:2B:34:B9:E0:C3:E6:4A:2A
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:47:ad:39:7e:0b:16:b8:e9:61:0d:77:97:67:98:57:71:18:
10:a4:b5:91:e5:81:61:aa:8b:c5:a7:72:c6:79:7d:da:70:ac:
10:ff:ab:f4:e8:31:dd:80:b6:8b:e4:c1:c1:6a:35:ad:83:f9:
4c:6b:f2:5c:5f:25:41:f2:8d:0c:5c:a1:22:51:1f:74:71:79:
4b:96:a7:de:ec:d9:f3:dc:dd:03:b2:8e:f4:81:b5:30:3d:eb:
82:1b:b5:90:23:37:5a:83:ad:69:02:33:9a:7e:89:42:01:96:
d8:66:6d:aa:74:ff:bf:31:26:3e:ff:50:07:93:81:05:8e:16:
6f:8a:bf:56:62:7f:af:d4:b0:97:2a:b2:ff:95:4e:0d:2f:6b:
fd:b5:d4:17:78:73:92:a8:bf:65:59:53:28:88:81:84:95:62:
71:36:01:2c:81:1c:2e:95:7f:36:62:50:f9:be:d7:95:b8:de:
a9:30:00:6c:62:40:8a:8a:2d:80:49:58:47:fc:61:22:b9:9d:
a9:03:91:af:f3:2d:24:85:29:ba:f4:2b:47:27:5c:66:df:11:
49:fc:07:25:28:66:73:cb:3f:5d:74:84:e8:9c:c1:6e:81:f6:
5b:c1:5a:2b:60:87:0b:e6:2e:2b:b7:0e:68:1c:29:c7:25:ac:
99:60:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:11 2025 by rpki-client