Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json)
Hash identifier: 3a7ZLn5W6kX8LvQpKUDmqIpR2sxmX87lu3vRhnjeDVc=
Subject key identifier: F4:B0:40:36:20:06:89:F0:34:1A:C6:DC:6C:3C:62:7F:EB:7E:47:24
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 019A4D05F4C3D8E88D6E9C538D3F5B69B88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 04:00:27 +0000
Manifest this update: Tue 04 Nov 2025 04:00:27 +0000
Manifest next update: Wed 05 Nov 2025 04:00:27 +0000
Files and hashes: 1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=)
2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=)
3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: c+zWf2O68hmk+NpQTYE8zpdTGpjIA386z7HiPGlkoTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:f4:c3:d8:e8:8d:6e:9c:53:8d:3f:5b:69:b8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Nov 4 04:00:27 2025 GMT
Not After : Nov 5 04:00:27 2025 GMT
Subject: CN=f4b04036200689f0341ac6dc6c3c627feb7e4724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:d4:23:65:61:ff:f5:2d:83:c4:d7:ef:f1:
c2:9e:77:76:08:2a:eb:0d:1d:2f:98:53:d6:17:5b:
b5:4d:fb:38:b0:0f:45:db:9a:13:c9:ae:6c:bb:06:
03:b4:85:c1:ca:6d:69:f5:24:00:a5:d3:78:a5:2d:
0c:81:13:17:7d:74:9c:a0:a6:0a:39:3c:d1:bb:e9:
f0:3e:76:59:a4:b5:9b:da:5e:f3:bd:1b:bf:a8:63:
b5:8f:d8:28:10:a6:b0:a6:63:1a:d5:0b:db:6c:5b:
b3:83:73:4d:26:f7:bb:5b:28:6a:81:6b:76:a8:c6:
a4:27:8e:e5:dd:2a:64:3f:41:87:68:2d:b9:d8:5e:
5e:81:46:1e:c9:85:d2:60:50:b8:b9:5f:54:e9:2e:
0a:6d:62:85:7a:cd:25:96:53:d3:be:18:35:be:cf:
e9:b9:09:c5:f7:8d:1d:15:e1:56:6e:e1:ff:61:1a:
29:e3:38:71:2e:ba:c1:2b:81:dc:48:01:4f:68:8b:
47:30:da:26:69:11:b4:dc:c1:be:bb:db:d0:67:a8:
b8:be:cb:ce:47:54:b3:f4:77:bc:78:8e:8b:d2:c7:
dd:3c:16:57:65:5e:82:60:7d:af:83:f1:00:44:51:
7e:10:c4:0f:e1:59:0e:e8:1a:b6:a2:93:20:22:93:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B0:40:36:20:06:89:F0:34:1A:C6:DC:6C:3C:62:7F:EB:7E:47:24
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c1:3a:1b:a4:a3:1c:75:a7:56:ca:a0:05:03:11:0a:65:0e:
64:14:de:20:68:c6:d3:46:f5:95:03:75:5a:81:b1:0a:11:fd:
06:88:b3:15:b7:d6:05:3a:9b:0b:6a:87:6c:96:5f:c0:97:d8:
97:54:2a:65:1c:b9:6c:c7:d2:a6:66:4c:e2:bb:c6:53:a1:e3:
1b:42:b1:0c:92:9f:e4:bb:5a:54:61:68:88:86:01:84:65:46:
6b:ab:20:fd:e4:c2:0c:0c:5a:8f:3e:54:1b:38:f3:c0:02:4d:
41:55:0b:a1:ad:96:ef:48:3d:b4:da:05:3a:44:19:0f:87:28:
7b:a1:d2:d0:cf:78:3e:3f:e4:3f:c3:9d:88:76:00:dd:51:0d:
e9:d2:e7:a8:92:40:d2:d1:5d:45:6d:5f:a8:b4:3e:75:9c:31:
91:9f:c6:00:93:1d:1f:65:4e:fc:4a:bf:a2:f8:24:96:7a:00:
0f:d4:8f:0d:20:72:84:eb:2c:2a:7f:c0:07:3e:b4:c8:57:b4:
0c:82:07:2d:e5:49:25:a3:b1:56:4f:b1:7d:3c:48:d4:7b:34:
c3:6c:14:82:14:89:ad:ac:5e:cc:2d:f8:f9:db:b3:88:6d:6a:
9b:05:1e:2b:84:84:54:f3:ae:ed:15:90:ed:16:e4:46:7d:ac:
4f:2b:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:49:25 2025 by rpki-client