Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File: SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier: o+l0M28dNj0L/KM8nvmMj7kCJn9v9EIJ+2w+3DFnf8U=
Subject key identifier: 46:CB:7A:2C:05:34:F2:1E:0D:60:C3:8E:CD:67:1E:69:D6:3B:75:59
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer: /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial: 019753B4CEE8394B22A305B9B0091E03F859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number: 03FE
Signing time: Mon 09 Jun 2025 08:00:47 +0000
Manifest this update: Mon 09 Jun 2025 08:00:47 +0000
Manifest next update: Tue 10 Jun 2025 08:00:47 +0000
Files and hashes: 1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: yGL5ew5Ds395TR2ZcfjK0WTqXXKZ3z/JaQ5izipDJ7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:ce:e8:39:4b:22:a3:05:b9:b0:09:1e:03:f8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
Validity
Not Before: Jun 9 08:00:47 2025 GMT
Not After : Jun 10 08:00:47 2025 GMT
Subject: CN=46cb7a2c0534f21e0d60c38ecd671e69d63b7559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:d5:8a:eb:76:7a:18:e9:99:75:ff:ab:26:
04:6d:c3:3c:ef:51:c2:50:71:79:55:ac:74:c7:7a:
d8:9d:b6:0e:c2:3a:8c:a1:d2:99:e9:8d:9e:5e:96:
17:6f:19:7d:33:f8:20:55:47:4f:52:6b:79:7b:c3:
65:09:57:c1:54:88:79:82:c9:a2:04:06:59:9d:ec:
54:c0:a6:35:17:19:e1:a4:b4:1e:80:8d:c0:bb:40:
ff:d4:1f:4b:58:f1:f5:0e:e9:a2:4f:33:11:81:d4:
a1:91:6a:59:3d:43:b2:36:c7:f1:3d:df:ed:4c:d0:
55:bd:ba:9f:ea:bd:85:23:3f:2e:a8:28:e4:b0:56:
ce:b1:11:2e:9d:ed:71:1b:23:92:6f:a1:9e:f4:87:
a2:7b:cb:6f:88:7c:02:0f:2a:53:4a:ef:26:12:6b:
93:0a:dd:42:bf:b9:ec:d2:f1:29:cf:65:a1:11:50:
2c:a9:0c:3d:15:10:50:24:14:45:20:cb:0d:67:18:
e8:e6:0c:d4:5b:e3:eb:48:31:f6:cf:7f:14:7d:35:
f6:62:07:a2:0c:79:47:36:6c:7f:c3:fa:b7:d1:cf:
1c:7f:35:8e:f7:37:d5:f4:af:5a:b2:58:cf:18:53:
93:6c:ba:a1:57:a9:a9:2c:f3:56:01:92:80:a7:3a:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:7A:2C:05:34:F2:1E:0D:60:C3:8E:CD:67:1E:69:D6:3B:75:59
X509v3 Authority Key Identifier:
keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6c:27:7d:84:7b:f2:39:53:0c:5f:4c:42:b0:ae:71:3c:4a:
bb:19:74:95:64:36:19:55:19:83:0d:53:25:bb:5c:37:37:c5:
46:45:72:d8:cd:46:a6:76:cb:c1:99:cb:df:e2:d1:ca:7d:12:
10:af:59:b8:1e:1d:2c:d2:9e:fa:9c:62:4f:0b:92:10:8f:ac:
f0:f1:c9:77:3b:0f:d9:00:0e:aa:99:4b:14:b9:15:39:56:39:
96:78:00:87:ec:13:a9:91:53:ee:9a:ab:35:ad:e8:73:01:82:
68:4c:a4:a0:b2:3c:c3:7c:c5:91:62:84:d6:3d:ec:41:6c:d2:
e3:09:56:70:90:4a:8e:7c:47:c3:07:eb:ac:85:4b:cb:9e:39:
94:80:13:3e:e0:a3:0a:fb:a5:93:3a:0e:e3:15:1d:aa:d1:01:
01:5d:ab:37:ab:3f:58:b4:0a:e7:04:a8:67:20:c6:34:b1:e0:
bc:d7:e5:31:3c:37:24:c1:40:52:b5:12:69:a6:b9:96:18:40:
e4:68:6e:e5:22:d9:a6:a6:a4:26:0a:79:a7:55:2e:b3:27:12:
33:b0:d5:9e:71:f2:ea:d1:b2:f7:f6:bc:74:92:c2:73:fa:9e:
1e:1f:28:27:2d:21:db:87:6c:d8:61:12:05:68:56:77:87:1a:
b9:3d:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:49:51 2025 by rpki-client