Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: A571F5udgVZCpJwyCN3aGfjAv1wQthMkFpXy5BHm4Sc=
Subject key identifier: 03:4B:A9:F2:BF:E4:04:4F:61:F6:49:62:D8:CD:75:86:F6:32:13:F2
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 019A722652A8F1C141FFE4E9281C49CACAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: d085lBuH7X/x1C6QyzJL1O4ZGFp63MBYUFnYRaK55bU=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:52:a8:f1:c1:41:ff:e4:e9:28:1c:49:ca:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=034ba9f2bfe4044f61f64962d8cd7586f63213f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:9d:99:65:0b:12:cf:e3:0b:2d:3f:f9:aa:
b0:ed:83:6b:87:ed:19:33:9c:5f:44:b4:be:a6:9f:
d5:01:07:a6:6b:9e:0c:1e:bf:51:c4:be:d0:30:23:
ed:65:25:d7:e7:4b:b8:ad:40:08:70:d6:4b:10:a9:
f3:14:36:e0:aa:b5:e0:c0:39:a5:da:ff:d7:1e:30:
95:e6:77:82:64:d4:78:b3:fc:61:71:50:36:e9:c3:
29:87:8a:a1:f1:e8:4b:73:44:37:29:51:34:a6:e7:
05:97:8d:b9:1a:ad:15:7f:9a:58:a8:2a:36:0a:9f:
44:72:9a:70:3b:8b:e4:32:0d:f7:31:bf:02:94:18:
6d:fc:d7:fb:c4:88:3f:98:07:3a:ed:53:15:88:59:
0b:87:52:cb:f7:c4:8c:13:fa:a4:29:32:f0:1b:85:
b4:3c:d5:2c:48:e3:5b:3d:ad:22:f8:c7:2d:01:e4:
da:7d:0b:c9:44:ac:cd:07:3c:20:8d:db:ef:bc:9b:
a2:1d:20:b6:18:7b:a9:10:2c:e4:89:4f:91:0f:c7:
66:9f:fc:35:dd:a7:88:c6:0f:87:0a:62:fe:6e:1a:
53:b9:70:b4:72:d5:7b:3b:f1:52:ef:1e:c6:d7:1b:
d9:da:16:43:64:6c:06:27:d5:3a:e9:7f:8c:c9:8b:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:A9:F2:BF:E4:04:4F:61:F6:49:62:D8:CD:75:86:F6:32:13:F2
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6c:b5:cd:c0:1b:d6:59:99:b8:ea:38:ec:e1:d8:e1:c6:3c:
ec:46:43:b9:62:c4:7c:e3:e1:d7:6f:ca:0c:9d:b9:0a:d2:c6:
00:41:f9:be:0c:ec:e9:58:41:38:93:2a:b9:30:88:d8:98:ba:
77:28:25:f9:d4:d1:1b:68:1c:6f:78:ad:38:df:d1:d9:ef:a5:
79:70:6f:90:10:53:10:d5:05:b1:de:8a:f9:7a:a0:bd:cf:60:
de:9a:72:29:0c:ab:25:f2:35:58:1a:ec:93:6f:79:84:b0:da:
86:f1:1d:7f:ab:ed:a9:ad:41:4e:57:9d:07:a6:91:88:8e:fc:
3f:2d:34:9d:e7:7a:ff:01:9d:0e:b3:77:9f:ac:e1:7f:6b:c7:
da:30:a3:2b:30:19:a5:06:e3:95:e5:a0:5b:6d:9a:bb:b8:c6:
39:66:da:e1:e4:ab:c6:e0:28:89:06:51:68:50:00:23:69:46:
9f:39:2a:2c:fc:b7:ec:08:43:50:9e:a9:0c:aa:96:a7:dc:b1:
70:d5:de:bc:7f:29:0c:94:2e:21:1d:65:33:9f:f5:14:f8:ab:
59:e7:8c:39:09:b9:06:9b:33:8f:29:2e:96:c2:01:de:cb:26:
4d:17:93:de:bf:25:cb:f8:85:25:55:d9:01:14:79:34:57:0e:
28:a3:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:51 2025 by rpki-client