Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
File: SwGEomKzUJ4aumGpC-yrMrACVUw.mft (raw, json)
Hash identifier: IgXKqEQ0dknCSA2goZW0Hp/IhjTeJyjE+bFb/HZB8TY=
Subject key identifier: 2C:CE:2B:9D:59:BD:F7:F8:FD:21:0C:95:03:B0:4B:C1:82:CE:40:A0
Authority key identifier: 4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C
Certificate issuer: /CN=4b0184a262b3509e1aba61a90becab32b002554c
Certificate serial: 019A71B89EAA0E44FF90A9AEB1B83813C88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: SwGEomKzUJ4aumGpC-yrMrACVUw.crl (hash: 2qlF2COu4sJQ3a7SPgwP76XRlA4y1PuvW87FEGWc5TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9e:aa:0e:44:ff:90:a9:ae:b1:b8:38:13:c8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0184a262b3509e1aba61a90becab32b002554c
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=2cce2b9d59bdf7f8fd210c9503b04bc182ce40a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:cc:72:a6:ef:7a:ea:82:18:77:91:4d:d6:
da:6e:34:97:0f:29:9a:2f:c4:e0:88:33:7d:a4:54:
90:fd:46:1f:c4:7c:ca:2a:1f:61:8b:8e:99:c9:d0:
c0:1c:39:5d:01:a0:81:d4:7c:b7:7f:1d:3e:3d:06:
84:16:47:b7:4c:17:51:60:8c:f6:a5:25:1d:5d:03:
8d:f9:80:0e:cd:aa:35:96:04:eb:49:7a:2b:01:71:
38:d1:b1:ba:74:6b:a3:8a:3d:8b:88:fe:53:1e:0a:
62:51:2a:b4:ee:65:d7:68:a9:f4:1c:ae:9c:fe:a6:
c4:72:30:ad:b2:5e:94:52:d9:b8:af:b8:c4:70:6b:
e8:9e:55:a5:f7:7d:67:01:34:ae:c2:4c:f3:3b:c2:
66:f7:96:d8:34:4d:29:c4:c1:86:cb:99:a9:1a:80:
14:3d:a4:29:40:84:d0:68:8b:cc:53:e3:7c:5d:9d:
3a:ae:c3:b8:a7:0e:70:ca:76:74:65:bf:fd:88:6d:
6a:22:dd:e7:66:78:42:3e:b2:14:df:29:e9:ff:6c:
6b:65:3e:58:a4:a3:0c:11:86:0c:b6:83:6f:87:0e:
83:09:62:dd:af:80:49:13:77:16:43:81:ea:0b:17:
9d:67:af:d6:3f:94:21:c7:cc:45:f0:9e:29:aa:73:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CE:2B:9D:59:BD:F7:F8:FD:21:0C:95:03:B0:4B:C1:82:CE:40:A0
X509v3 Authority Key Identifier:
keyid:4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:a9:44:c3:4a:35:fa:69:c4:57:17:bd:0e:58:d7:2e:35:
81:90:8d:10:e8:32:80:b1:88:af:17:56:0f:6e:03:ce:b0:ea:
a9:41:d0:07:fd:3a:a5:b5:8f:4e:8e:dc:fe:ba:6e:b7:2a:57:
13:1d:0f:fc:34:9e:23:c2:01:95:4b:04:95:e5:0c:89:53:c0:
3e:d2:81:8a:f0:ef:16:b6:97:41:20:26:16:2e:ae:d4:b7:10:
b9:42:6d:25:f7:0e:82:a1:c7:3a:f9:9a:96:91:24:44:f4:7b:
43:2e:06:e8:8c:55:39:72:10:69:22:ad:46:36:54:ab:7b:24:
84:2f:2a:51:47:5d:fe:a7:50:fb:4f:4f:81:6f:6a:6d:7a:60:
06:d8:ae:c2:b0:72:d0:b4:aa:aa:b7:32:fa:3b:4c:76:d8:e9:
81:7e:1a:66:3d:d3:eb:95:e2:8c:3f:3b:65:50:be:c9:b2:5b:
c2:47:5b:55:c0:19:20:47:56:ee:08:fd:46:11:b6:61:db:ee:
9b:53:cc:d2:99:4c:fb:b9:bf:f0:30:bd:3b:76:66:58:68:7a:
bd:d3:13:15:13:c4:56:cd:dc:67:d4:56:a5:4f:b8:d4:ab:06:
7e:88:b5:63:6f:81:9d:73:e2:66:84:1f:37:df:e1:7e:3b:d1:
9d:80:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:58 2025 by rpki-client