Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: rdQI1Z3P9TxDeRq3vmhy5/gItZfmL3oaONZh/2TQUfo=
Subject key identifier: 7E:37:16:F2:D7:F6:59:D9:9D:FA:D8:27:61:FE:CC:7B:09:91:E7:0B
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 019A7112F37EE342FD59F731B134B74D0C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0EB9
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: Gk9Q0m+3YPifhZswTCfGD8b4vSBPEmYUETqKpHA6GTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f3:7e:e3:42:fd:59:f7:31:b1:34:b7:4d:0c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=7e3716f2d7f659d99dfad82761fecc7b0991e70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:f9:ad:e9:7b:ad:ca:af:28:fe:29:ab:ea:
94:9f:f9:d6:f3:65:c2:2e:e1:8d:0a:6b:0d:f6:bf:
50:1e:25:a0:d0:ec:c8:51:3c:09:02:42:b7:7b:30:
cf:4a:af:7e:00:43:08:7b:6b:a9:b9:de:04:86:a7:
cd:a2:64:dc:e6:81:3a:89:5e:08:da:3a:63:88:26:
e4:0a:64:ca:72:a7:6e:14:4e:ec:75:e9:96:1e:37:
2d:d0:50:2e:3c:2f:47:0d:40:38:d0:83:fc:3d:80:
5c:9c:b1:1c:18:c9:43:9c:df:cc:ea:65:bb:3c:a9:
3d:de:a2:e5:7f:f1:79:35:44:a9:f7:5e:f7:82:b1:
ab:c0:21:c9:c2:d5:77:a3:4d:f0:40:f5:3c:8d:ad:
b5:41:d9:a9:d9:c2:8d:89:a1:30:cf:81:e6:e5:4d:
d1:b3:d9:ec:dc:1a:66:c2:33:6a:40:9c:7f:5a:99:
c3:4e:32:f8:0c:52:67:c3:d8:b2:d5:2e:3e:4a:57:
34:7d:76:58:33:8a:5e:2e:c4:c9:47:ce:81:63:94:
fd:92:c0:8f:fd:26:9e:e8:b1:4b:bb:6b:2d:26:47:
ba:bf:74:34:85:5b:5a:67:ce:fe:53:b7:6a:d7:73:
6f:c9:fb:61:13:3f:54:5e:90:19:9f:58:1a:51:cc:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:37:16:F2:D7:F6:59:D9:9D:FA:D8:27:61:FE:CC:7B:09:91:E7:0B
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:77:fc:97:f7:e3:21:db:24:ad:97:57:e3:81:5e:43:e2:3e:
e6:cf:82:16:77:a9:6a:db:9a:7f:79:29:dd:13:ef:a2:a3:8c:
d9:88:c3:9f:3f:87:58:80:05:d4:64:4b:2a:63:59:c0:f7:e0:
da:f5:87:77:91:e5:d1:33:26:4b:13:a6:8e:7a:59:3c:b4:a3:
2e:05:42:37:01:8d:35:eb:83:5e:14:a4:53:ad:8b:8a:8c:21:
57:78:05:09:34:21:8f:58:ac:3f:5b:aa:55:ad:ae:dc:0e:bc:
62:62:7e:52:df:49:a4:cf:6a:f0:03:25:c2:74:b0:c1:ca:1a:
a9:b0:79:15:d0:79:be:16:ea:97:8a:5c:28:e7:4b:40:8f:10:
e1:37:77:3f:de:9c:f5:5a:99:e0:e2:d7:8c:ef:c9:61:2e:50:
fc:2a:ca:91:81:71:5c:73:88:00:03:64:09:9d:59:29:ff:d1:
d2:b3:74:04:89:57:2f:30:7d:63:d4:14:86:00:17:a2:b2:55:
90:6a:9f:e1:a1:ad:17:bb:b3:05:7f:6f:4f:cb:3b:e2:68:6b:
29:f0:29:14:1b:56:3f:90:e1:70:2d:9d:3f:8a:21:9f:16:50:
46:96:53:c3:ba:8f:1b:25:a3:b0:ef:c1:b4:20:de:8a:ba:d4:
0f:dd:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:27 2025 by rpki-client