Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: 9NyJK79h34oE/2SuwB3KIrq29sSr4fgSnt0I7q8GhDM=
Subject key identifier: 49:7F:5C:DE:AA:0C:91:FF:D4:1E:DA:F1:9E:8E:23:61:09:83:23:50
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 019748FA189EA90607081D2CA0BD6C6B6237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:39 +0000
Manifest this update: Sat 07 Jun 2025 06:00:39 +0000
Manifest next update: Sun 08 Jun 2025 06:00:39 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: CFbTHDe/WrXXKK0zu4Bavm7p7lCxh3lBu5gdYlDddJU=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:18:9e:a9:06:07:08:1d:2c:a0:bd:6c:6b:62:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Jun 7 06:00:39 2025 GMT
Not After : Jun 8 06:00:39 2025 GMT
Subject: CN=497f5cdeaa0c91ffd41edaf19e8e236109832350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:6f:fe:c1:f9:16:14:db:74:d3:d0:ed:2e:
b9:74:dc:56:82:ee:d0:71:8a:8c:ca:7f:58:13:20:
f0:97:a6:3d:8a:bd:0d:49:2c:00:f7:9a:07:dd:df:
2b:b5:40:d3:3e:bd:04:49:d3:34:b9:c7:a2:fb:62:
1e:6c:9c:70:c0:88:bc:f1:11:d2:69:0e:c1:79:5b:
f8:34:21:13:77:f8:c6:da:30:28:3e:da:2b:85:e4:
95:0a:49:d4:1e:7c:1c:df:41:2d:ca:a8:f8:70:de:
e1:79:8f:84:5e:fb:2a:f5:16:2f:b0:5a:3e:09:3e:
0c:d6:29:95:07:c9:a5:67:b2:3a:1b:ec:23:5c:58:
23:30:20:74:47:c4:1c:87:e6:29:c1:7d:bf:cb:5b:
09:8a:a4:70:eb:2f:ee:d9:1a:5f:ec:ca:d8:bb:76:
18:8a:b0:3c:c6:45:f8:ae:3d:63:96:ff:bb:e6:3e:
73:0a:2e:09:05:86:d3:1d:a1:3b:eb:89:ee:a5:6c:
38:50:a2:d2:03:22:dd:57:24:5e:ff:d1:66:2a:04:
d2:78:8d:18:ee:c1:d4:d9:4a:d3:4c:1c:7a:b7:b8:
d8:b0:c7:45:54:63:af:9d:70:47:84:9c:7e:74:fd:
27:9f:35:4f:dd:58:d0:72:03:d6:d8:8b:40:2f:39:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7F:5C:DE:AA:0C:91:FF:D4:1E:DA:F1:9E:8E:23:61:09:83:23:50
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:49:0a:e5:b0:68:02:32:4d:63:df:e9:24:f6:81:c8:df:26:
c3:08:11:21:21:cf:c5:b0:f8:20:d1:e4:6d:fe:82:d6:1e:c1:
8d:95:5e:dd:dc:cd:b2:3a:4b:cf:a1:96:ad:56:82:a1:f5:ae:
a2:85:fa:f9:a8:6c:c4:e2:16:1e:52:0d:4a:45:f6:3f:b3:0a:
a2:cd:92:82:b9:08:57:85:26:ca:11:d0:61:76:34:14:7d:11:
83:cd:56:df:81:90:21:f5:8e:49:e2:a6:70:78:77:aa:24:18:
de:1a:a1:3a:3c:66:08:a5:49:c0:62:fd:d7:ed:f3:0e:17:15:
10:be:82:32:8c:e8:7d:32:e6:2b:2f:a9:03:13:5d:9f:25:02:
86:9b:34:14:47:f7:1e:c8:4b:d9:0c:ec:36:c9:58:4d:47:03:
f9:62:a2:61:cb:53:07:2f:3a:2f:e7:9f:e6:71:cc:e8:e1:a6:
7d:a5:5b:bb:a9:08:db:a0:85:4b:ad:76:c8:1d:a4:4c:cb:df:
57:2c:ec:0c:e6:c0:70:67:33:aa:93:0e:b6:61:4e:9b:56:36:
ec:87:49:fa:36:d1:5a:46:3c:ab:db:11:a4:b0:66:b3:c0:ce:
3d:0e:ff:40:ec:e7:d2:c2:28:5b:e0:16:58:73:af:7d:56:4c:
32:5e:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:56 2025 by rpki-client