
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: 17nC41fQD0RYDckstucSD5BxL1dO24G8qIkTeL+nt5E=
Subject key identifier: 27:E5:9D:A6:0D:13:05:F6:51:EB:E4:09:50:A0:3A:11:9B:B6:B4:73
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 0199221F00290EECFED69959EB59F6721A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:01:20 +0000
Manifest this update: Sun 07 Sep 2025 03:01:20 +0000
Manifest next update: Mon 08 Sep 2025 03:01:20 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: ZknCjfrhfqJs8GIZ5QKfJC+CA1OrHDDpUAFVC49UsAY=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:00:29:0e:ec:fe:d6:99:59:eb:59:f6:72:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Sep 7 03:01:20 2025 GMT
Not After : Sep 8 03:01:20 2025 GMT
Subject: CN=27e59da60d1305f651ebe40950a03a119bb6b473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:49:12:76:2c:43:0b:ca:de:f2:5e:bc:27:
26:ac:55:44:58:50:a7:fc:a0:c5:92:e6:33:43:e9:
b9:84:d5:72:89:4f:fa:14:2d:eb:37:94:d7:00:90:
5a:ad:ff:06:2a:e6:04:b2:cd:11:1e:2b:d8:d9:91:
b6:34:6a:8c:e0:e8:b1:56:0f:1f:f7:d3:20:6b:40:
33:08:14:5a:31:15:1e:e2:33:91:ce:f0:93:8c:fe:
b3:e4:ee:79:84:52:ac:bb:06:b5:27:f0:13:ad:7e:
42:ac:dc:20:29:03:31:36:36:f4:a8:0c:10:09:fa:
88:02:a5:a3:a9:0e:70:0d:ec:fb:ae:d2:49:84:46:
25:30:e6:7e:aa:e7:4c:7a:fa:fd:18:0c:84:08:ee:
43:22:f3:42:52:92:2f:86:fc:fc:fd:ea:6f:7c:30:
01:5f:77:47:93:0d:03:53:6f:d2:25:d7:f8:bc:48:
9b:24:ef:eb:f9:80:b2:4a:52:7f:fa:27:3f:91:65:
04:c8:59:40:bb:54:07:56:33:77:40:01:55:d6:4a:
08:e8:a1:18:bb:3d:03:1b:74:56:d8:54:39:3f:2f:
96:f9:0c:5e:4f:88:a1:f8:f7:fd:a7:9c:aa:8a:4a:
ef:a3:54:99:95:fe:d8:60:5c:18:e0:68:e8:76:a4:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E5:9D:A6:0D:13:05:F6:51:EB:E4:09:50:A0:3A:11:9B:B6:B4:73
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:04:0e:05:b0:48:7b:9c:94:38:ef:f0:b5:64:d8:f0:15:
59:6a:59:c3:5c:fa:f0:d2:5f:6b:8f:f9:91:f0:c2:c5:9b:a8:
61:38:0f:1c:74:96:e4:b9:20:53:76:20:e8:ec:38:5b:c4:4c:
fb:14:9b:3a:b1:9c:71:cb:1d:ff:74:ef:6b:3f:b9:e1:8a:1e:
0d:30:37:88:d5:93:f1:ea:ce:36:28:bd:b1:8c:1e:f0:55:d2:
87:20:0f:55:69:d5:f4:31:98:b5:3d:7e:48:1e:c7:8e:e8:2b:
96:4b:84:bd:5f:af:62:02:25:66:8c:a8:8b:5c:2a:0d:1f:6f:
ac:d0:df:e5:7b:77:7b:75:c6:60:02:7f:dd:ef:60:b6:ec:16:
96:44:f7:94:5b:ef:63:7c:a2:d1:43:ac:f6:96:0f:c3:33:02:
62:88:9c:1d:c4:3c:30:4c:5f:45:d6:ba:fa:a0:30:56:c3:4c:
eb:84:22:1f:c7:2d:83:94:29:bb:a9:4e:86:78:e2:7a:39:7e:
bc:a1:ec:5e:57:b1:aa:2c:dd:13:40:75:9c:18:e9:53:89:e9:
97:74:39:ae:e0:2f:93:70:95:99:4f:3a:64:37:45:0d:20:98:
48:26:4e:c9:13:f0:4b:38:d4:b9:89:43:cc:29:ba:88:51:f1:
71:26:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:41 2025 by rpki-client