
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
File: swLy7pS0Qh7qX5jsD8SRdbubtDY.mft (raw, json)
Hash identifier: 2s36EiW2LgV9cpfOvXR9Fyj0LWiwAVELjvYm8E6Ekrk=
Subject key identifier: 9E:9D:24:B0:0A:E6:CA:5C:0D:71:69:4A:DB:89:8D:72:AB:7C:30:37
Authority key identifier: B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36
Certificate issuer: /CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
Certificate serial: 019A71808378AB7FE6E5C6566C86F2E6E016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
Manifest number: 95
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: swLy7pS0Qh7qX5jsD8SRdbubtDY.crl (hash: 2pWEniQ+8nASifnscNlBWP3xykoV1A+ns+F077/E44U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:83:78:ab:7f:e6:e5:c6:56:6c:86:f2:e6:e0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=9e9d24b00ae6ca5c0d71694adb898d72ab7c3037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:24:ba:ef:1f:de:e6:04:8d:82:7c:53:41:
c2:d2:95:75:04:1e:d4:11:52:b6:1b:e6:2d:9c:16:
b5:7b:9b:d0:f6:db:ea:db:eb:79:f9:29:6f:36:f5:
5a:33:0a:4d:23:ac:41:7e:1e:98:c5:e9:6b:f7:ba:
13:c0:f5:a1:16:4d:e7:37:74:7d:bb:7c:32:53:99:
97:bb:3a:dd:73:71:52:de:f2:33:21:c9:70:ee:87:
15:ef:28:89:68:0d:a0:00:8f:67:26:dd:af:6b:6a:
96:bf:c0:c8:53:46:da:49:3d:af:88:c3:dc:9b:2b:
a2:c7:28:b2:40:67:17:72:cc:f0:a5:f4:db:19:88:
ab:e5:d6:b2:62:4e:e4:9d:73:a7:ac:b9:8d:a4:ae:
1d:53:6c:e8:0d:e8:35:49:11:b1:d0:8b:a4:79:0a:
67:e7:cc:e0:86:52:f6:c4:b4:7c:81:e0:a8:8d:d6:
58:93:e5:4c:c3:74:0b:cc:0a:c0:37:a5:43:f3:a9:
eb:26:b1:01:66:b9:d5:97:61:18:7b:ec:66:6d:d3:
2d:4a:4b:d2:1d:23:4d:f3:43:2c:d2:70:38:45:a5:
79:48:2a:64:9c:1a:c5:31:c4:59:c7:4f:bb:b4:e6:
49:4f:c9:e4:98:cb:4b:16:e0:e0:cc:54:1c:5e:98:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:24:B0:0A:E6:CA:5C:0D:71:69:4A:DB:89:8D:72:AB:7C:30:37
X509v3 Authority Key Identifier:
keyid:B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:88:30:96:23:61:85:8c:d6:5d:89:56:22:63:c0:53:7c:9b:
07:ae:a7:46:b7:99:16:52:b0:15:7b:cd:bd:99:c4:56:a8:34:
12:b6:0a:6c:02:e9:a8:45:fd:fb:a8:3e:a7:62:6b:3a:9e:20:
14:27:b8:2d:3d:24:8e:a1:3b:4a:b5:37:8b:c2:29:ed:40:78:
bc:fd:93:9b:42:8e:3d:ae:40:1a:95:1b:79:51:7a:79:dd:4d:
2a:16:92:e0:4d:f1:17:87:50:2d:2c:7c:15:67:2b:d5:3c:3d:
40:4d:97:0e:ab:fa:2b:65:c7:3c:fa:8a:26:4b:25:f4:1a:62:
5b:f0:b1:cd:2d:5f:e7:5f:e4:3b:7a:34:1e:67:d7:7e:61:2f:
8b:c2:cd:e4:35:0c:f3:be:6c:b4:47:a9:d5:39:dd:d7:e1:67:
60:93:fe:9c:ef:a3:05:49:17:5a:ca:bd:09:f8:15:ef:f5:85:
c4:23:bd:0e:bc:c9:b1:b7:6f:42:34:e5:4b:9b:1a:2f:00:29:
21:fb:59:61:e5:4e:39:dd:e8:cb:9e:9b:cb:79:dd:86:9b:08:
1f:09:83:81:cf:c3:a4:12:06:63:f7:2c:5c:8b:d2:b3:05:76:
aa:f7:d4:e2:7a:f4:63:f4:97:9d:c4:62:1f:fe:f1:f4:c2:d2:
b0:ab:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:52 2025 by rpki-client