Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: E4CwiJeosDGR+GdcLG/HaPZLO+33gFkiDbaEJF8k6sA=
Subject key identifier: 4B:CB:7F:04:FD:5A:29:1C:41:87:83:23:41:BD:4A:5E:4B:F5:0B:5E
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 019755A35FCB99D84A7D56D0199E325F75FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 110B
Signing time: Mon 09 Jun 2025 17:00:59 +0000
Manifest this update: Mon 09 Jun 2025 17:00:59 +0000
Manifest next update: Tue 10 Jun 2025 17:00:59 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: fH0ukcrRRaEObctRW8LsGi8iI4n+hY7tBLD9PHu43Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a3:5f:cb:99:d8:4a:7d:56:d0:19:9e:32:5f:75:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Jun 9 17:00:59 2025 GMT
Not After : Jun 10 17:00:59 2025 GMT
Subject: CN=4bcb7f04fd5a291c4187832341bd4a5e4bf50b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:19:d5:55:d4:fa:96:a3:e2:49:65:4a:f6:
b4:8a:c6:f2:2d:1b:ea:29:d3:c0:42:dd:39:7d:ea:
ab:e5:d2:5f:c7:db:1d:75:62:42:94:27:19:e4:6e:
42:80:35:31:58:47:19:c9:de:15:43:10:03:4e:58:
2f:3b:99:37:0c:0f:d1:bb:a3:a1:25:31:24:34:d4:
e3:9c:b0:df:e3:e9:f4:44:e6:3a:29:24:18:b2:a4:
65:4a:00:77:b6:40:c1:17:64:bb:10:2c:0a:9a:25:
d4:0c:c7:c6:54:51:79:20:cb:27:0b:76:27:f7:5c:
0f:6d:16:25:2a:47:11:ef:ae:af:6f:c2:a2:1e:b3:
48:f4:e2:1d:25:c4:05:9e:62:71:1a:4e:0a:bf:0e:
d3:21:3d:83:a0:d1:1a:19:b7:a6:2f:ee:76:83:1f:
6a:48:cf:46:bd:7d:c0:19:ff:35:c0:89:a5:7b:a5:
7a:88:1d:e7:d1:78:ab:56:6e:d6:0e:eb:c5:38:b2:
c4:8d:1e:2d:a9:99:40:e4:d5:21:99:9b:ff:7c:9d:
84:61:7b:c5:8e:76:0f:af:b1:cf:86:cf:a5:8e:1c:
82:6b:94:55:9d:36:ca:6c:85:a3:83:7d:0f:c6:13:
22:44:e2:07:0e:30:d5:6a:79:24:dc:7b:27:69:2a:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:7F:04:FD:5A:29:1C:41:87:83:23:41:BD:4A:5E:4B:F5:0B:5E
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:06:95:c3:83:fd:e5:a4:f3:8c:4d:88:b3:20:40:87:f2:
71:5d:e2:fd:70:e9:aa:25:23:85:60:f0:64:d7:69:1d:8a:e1:
42:92:da:86:69:cc:34:53:dd:c6:62:be:8d:80:ab:9c:ba:0a:
df:7d:4f:e7:3b:61:7d:b7:89:e4:fd:11:c7:81:78:31:dc:62:
6e:fa:cb:26:1b:4d:c1:cc:45:69:65:69:de:d8:39:ef:95:8f:
19:27:ba:cc:16:a4:7e:ee:e7:49:62:ac:c4:45:ea:2b:59:2f:
9d:7f:3c:5c:5b:04:67:f8:21:2d:35:8d:35:75:16:1f:b7:b4:
c7:b1:0b:2f:44:b6:f2:28:c6:9b:f1:7d:3f:25:ed:fa:e0:84:
6d:69:2b:24:5b:c5:52:17:50:67:e1:73:54:4d:99:bc:bc:4c:
b2:08:3d:87:6b:b4:f2:72:1c:a7:b2:68:64:83:91:d3:98:ec:
fb:f2:27:ed:e8:72:b2:53:0f:82:8b:e6:90:14:77:08:72:41:
4f:29:24:45:25:aa:35:ea:94:19:91:e6:19:17:3d:1c:5b:0e:
ef:f0:83:7c:53:8e:5d:b3:b6:34:29:92:19:0b:6b:90:84:47:
1d:82:62:d3:af:24:b5:f0:7b:59:c2:8e:b4:e0:49:36:07:3d:
60:7d:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:32:57 2025 by rpki-client