Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: 8xEIcPyXfVZq620l3f6oU/nawWhmrk/okWMvpcbQ5rw=
Subject key identifier: C1:65:63:D6:1D:1A:47:71:56:7B:23:42:19:E4:50:85:A5:E3:79:7A
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 019748F9E4098ABA0D08F274F812F2DE1C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 01EC
Signing time: Sat 07 Jun 2025 06:00:25 +0000
Manifest this update: Sat 07 Jun 2025 06:00:25 +0000
Manifest next update: Sun 08 Jun 2025 06:00:25 +0000
Files and hashes: 1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: uvygbd1tf9JfPHC8HOEjZEow4OkwOSpEA7m8HjDbpm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e4:09:8a:ba:0d:08:f2:74:f8:12:f2:de:1c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Jun 7 06:00:25 2025 GMT
Not After : Jun 8 06:00:25 2025 GMT
Subject: CN=c16563d61d1a4771567b234219e45085a5e3797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:c4:86:5d:3b:57:a5:6f:35:ab:d3:0f:2b:
a9:94:c1:e0:60:2e:70:8c:62:c1:87:7d:36:e5:2e:
b5:7e:1f:05:f3:58:91:1f:69:69:78:47:bd:29:ae:
da:50:f9:61:9c:d4:78:74:19:68:f5:95:5c:83:2e:
3f:0f:01:97:03:d0:80:7f:57:18:7c:6d:25:12:70:
31:72:17:d0:93:a4:4d:1b:73:3c:05:a3:0a:70:29:
15:36:26:5a:86:4d:6e:80:ae:2a:0d:2c:d7:07:41:
13:f0:ac:17:d3:f1:c3:ed:1b:d5:d8:13:fa:1e:a5:
42:7c:9d:0e:fa:db:d0:9e:50:b2:7d:35:7b:09:31:
20:b8:0a:fd:b2:a0:5e:e5:33:e9:1b:06:9c:30:ac:
df:bf:7b:ca:62:25:88:54:26:08:ce:51:c5:03:7d:
28:b1:be:73:18:31:3e:1d:3b:7c:e9:32:26:40:bd:
ec:f4:13:65:c2:12:9e:70:c7:66:9e:f9:6e:21:4b:
c5:52:a3:3e:39:c0:2f:03:15:f5:ee:29:ac:6c:bb:
41:32:59:4a:4b:62:aa:5d:0a:29:25:d7:8a:ec:d0:
f8:b3:d5:9b:9b:42:44:cc:4b:24:06:ab:10:d3:32:
51:25:72:ad:1d:6e:c8:83:e6:ac:f9:40:89:2f:02:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:63:D6:1D:1A:47:71:56:7B:23:42:19:E4:50:85:A5:E3:79:7A
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:80:da:49:d8:83:48:ac:45:f8:87:7e:fb:da:44:a2:ca:c7:
dd:a8:6a:8a:aa:b8:83:03:29:5e:01:54:de:1b:0a:c5:57:df:
be:a5:4f:21:6b:b8:f4:30:70:67:21:5a:50:71:ce:d4:4c:7f:
5d:db:ce:6e:7d:24:b5:c0:3a:bd:66:2b:de:1c:e0:fb:25:7c:
e4:b9:d7:77:59:8f:78:27:bd:ea:b3:a3:87:1c:0e:7c:3e:85:
56:77:27:fa:91:75:56:45:9a:55:a5:1a:cb:a4:8a:a0:17:5b:
1a:21:40:a5:66:2e:07:ee:55:ba:ac:ef:a3:fe:9f:a3:90:84:
f2:89:16:6d:0c:ec:a1:b8:d2:ce:af:13:e0:a1:70:b8:a4:9f:
75:b8:c0:e3:4c:c9:a7:7d:5f:90:ff:55:f6:b9:35:36:99:b1:
88:30:63:a1:48:ca:9b:70:00:34:d4:64:a6:4b:51:cc:d8:f2:
09:1f:1d:02:53:cb:3b:89:54:63:fd:b4:3b:c7:e0:ee:1f:fc:
e7:bb:3b:f9:40:9d:a1:2e:1e:af:51:5b:1f:58:d1:9c:5e:0d:
b7:8d:fe:7c:05:41:e4:3d:26:ba:5c:59:25:c5:4b:a5:83:98:
0d:6c:d6:be:ef:1e:d6:2e:21:70:76:78:6d:cd:47:90:c6:f4:
ad:95:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:36 2025 by rpki-client