Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: hu6TM5E5ysvaSBpdu/9axQ98w789dUuQZsy74lFZ1GU=
Subject key identifier: EC:64:33:74:DD:71:2B:F3:FE:8B:93:31:9B:B7:E9:A2:2B:26:A0:15
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 019A72267194868A164F3977F5D07B08840D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 038F
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: 2KfPOqlS2G6Ee/u9XWC1LERdVtKccJHEePnau34iec0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:71:94:86:8a:16:4f:39:77:f5:d0:7b:08:84:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=ec643374dd712bf3fe8b93319bb7e9a22b26a015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:eb:89:b2:20:3d:21:7e:a7:80:09:4a:67:
2f:4f:2d:74:4f:17:d3:6b:d0:e7:98:95:71:4d:64:
2a:b8:60:2f:8c:50:69:3a:d0:3a:bc:2d:0e:31:58:
16:9e:da:f4:2e:1e:e3:6f:ee:5e:ee:61:59:41:65:
d6:4d:21:24:a0:62:52:e4:8e:7d:5e:7f:4b:73:2e:
5a:f1:63:fc:1c:50:83:f8:e3:84:c4:60:e1:82:3f:
93:56:bc:e8:fe:ec:2f:94:df:5d:0a:e4:80:cb:0c:
0a:51:44:f0:3b:a4:60:2c:57:d2:b1:32:4c:0a:0e:
52:84:b3:d4:a1:43:ae:3a:02:3d:88:6e:c0:a5:2d:
8b:01:89:cf:ab:d4:85:3d:ca:e5:b1:1b:db:1e:28:
bc:19:95:56:61:6d:70:18:48:4a:6a:97:c0:b7:df:
b6:8e:81:b6:ae:c1:d6:1f:a2:a7:ef:5d:31:63:c8:
cc:08:f1:c5:26:d9:97:cd:58:63:16:ef:9b:74:4e:
a9:54:d5:74:6a:2d:34:fe:89:a8:0f:dd:7d:15:de:
49:ef:8e:ef:54:b0:65:2c:38:d7:d2:f8:08:2d:5b:
65:06:9e:65:b3:d3:4e:ee:e6:36:90:f2:eb:ca:2c:
41:cd:2d:e4:e7:b4:c1:5c:c6:89:9d:fc:98:ef:9e:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:33:74:DD:71:2B:F3:FE:8B:93:31:9B:B7:E9:A2:2B:26:A0:15
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1e:d8:aa:79:4d:d6:b6:66:98:a8:e4:22:4b:86:60:fe:90:
7a:8d:89:5d:17:2c:68:53:7b:e3:32:bc:b3:54:ae:0b:6e:65:
78:e4:b9:c0:60:b0:b9:43:20:b1:0c:36:5d:ff:cf:02:53:61:
22:e1:65:ba:ed:3d:1a:d8:5a:d4:af:00:59:b6:f7:19:de:74:
97:e5:8b:02:98:b5:6f:c8:33:bc:16:2e:65:32:69:ce:b0:7c:
d6:40:2c:a4:05:15:71:47:4f:5c:79:c3:ed:15:ed:42:dd:fb:
28:ac:b6:76:06:76:25:cc:00:cd:6a:e0:f9:bd:d3:59:ef:2f:
91:ce:3e:65:0d:bb:99:f2:d2:fb:20:e2:f1:17:5f:18:4f:4e:
39:d9:55:f4:4b:60:38:1d:19:0c:64:1d:92:ff:44:a6:cb:4d:
71:f3:8a:97:90:fe:ac:63:06:ae:86:51:8c:86:e4:71:af:7d:
89:5b:d7:6d:df:02:06:9a:d2:1b:4d:77:26:a6:dd:63:1d:f1:
cb:53:da:19:e1:25:fc:c1:9c:89:ba:a6:4a:9b:b8:89:05:03:
65:13:e1:f3:26:8e:dd:95:5f:98:72:f9:6e:94:78:13:b9:4b:
83:ce:27:50:e6:0b:72:11:f5:0c:1e:6c:ef:9f:2e:30:b7:a2:
c0:24:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:19 2025 by rpki-client