Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File: SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier: p71+Hd+LxW5mn8fBRywghgF2Mi6HQSeTWHrI7wnTt8U=
Subject key identifier: 64:7F:4B:6A:C0:FB:F0:97:C5:22:D6:80:9D:26:EF:F6:2A:82:BB:EF
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer: /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial: 01976327E3C74C60DBAB9365CDC5E586A300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number: 0406
Signing time: Thu 12 Jun 2025 08:00:47 +0000
Manifest this update: Thu 12 Jun 2025 08:00:47 +0000
Manifest next update: Fri 13 Jun 2025 08:00:47 +0000
Files and hashes: 1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: PySdm/IjGu0l3wF1D8wOWyx+jwuR/2wdIEppCyWVVtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:e3:c7:4c:60:db:ab:93:65:cd:c5:e5:86:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
Validity
Not Before: Jun 12 08:00:47 2025 GMT
Not After : Jun 13 08:00:47 2025 GMT
Subject: CN=647f4b6ac0fbf097c522d6809d26eff62a82bbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:9d:f6:77:dd:d1:95:e7:a7:1a:7c:1c:b3:
66:c5:62:8b:c8:a7:3d:55:46:4b:9a:8b:58:ed:0e:
e8:c7:f4:4f:8c:67:b8:2c:a9:59:81:47:39:02:e0:
af:18:4a:e4:e2:da:b7:ec:21:57:e0:14:e3:45:83:
06:69:e2:25:8a:96:6f:93:89:df:c5:d5:2a:5e:cc:
66:32:8f:73:76:ec:fd:66:4d:29:77:cc:29:a0:18:
ae:ee:8a:77:c9:07:fd:aa:ac:c9:9e:f2:a3:4b:1e:
80:9b:76:e1:cf:32:b6:88:f8:39:54:9c:b3:29:88:
b4:fd:97:83:d9:16:01:10:6e:42:18:4d:1f:ec:92:
5d:90:99:0b:c5:27:62:30:b5:77:ef:5b:99:69:3b:
a6:08:52:3c:46:57:08:9f:18:48:b0:9f:d8:b0:52:
54:52:ea:43:3d:9a:78:ec:55:09:4e:4a:35:9e:52:
0a:fe:29:0e:78:d1:c9:19:d9:f1:23:66:6a:e6:37:
b7:91:ce:58:63:84:23:a7:fa:31:13:f7:dd:32:60:
80:1f:2f:65:47:8e:bb:0d:d1:6c:3a:dc:6a:2f:28:
45:c3:d9:ab:9c:9f:58:f1:68:62:34:bd:11:b0:82:
3b:ce:4e:c9:32:fd:84:47:16:b7:bf:db:26:8a:c6:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:4B:6A:C0:FB:F0:97:C5:22:D6:80:9D:26:EF:F6:2A:82:BB:EF
X509v3 Authority Key Identifier:
keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:29:ab:f2:68:8e:b4:d1:77:e5:46:8c:d2:85:82:f2:91:f8:
b9:8b:4a:a7:6a:4b:68:9b:5b:cc:53:31:b4:fa:4b:99:93:2c:
31:ad:79:c8:b3:33:24:5f:82:7c:6b:66:46:7f:f2:1c:d0:60:
3a:1d:14:73:45:32:47:ce:b9:5d:39:7a:d0:a3:4b:2b:cb:65:
08:60:fd:ee:31:72:07:0e:37:0f:2d:fe:49:98:ea:e5:dd:7d:
47:11:1c:51:14:ba:03:64:d5:e0:1d:99:4b:59:c5:e2:84:ce:
50:69:32:ec:62:8e:be:78:b6:74:ed:89:cb:07:0a:f1:6f:b9:
dd:0a:da:56:b5:7d:9e:b9:60:55:29:27:06:f2:34:84:28:b1:
15:5d:39:f1:20:26:52:ec:02:26:7f:34:1f:80:ba:60:61:ed:
4e:01:27:72:62:10:9f:bc:7c:1b:56:1d:87:6e:9d:59:65:7a:
1a:7a:a8:b0:87:a7:3c:09:d5:df:da:46:c8:34:26:94:1f:de:
07:87:0f:5a:91:e7:f9:e3:a4:53:24:db:ba:64:22:aa:da:2c:
8f:cb:76:13:f2:ea:8a:fe:d8:42:27:02:42:eb:3b:9f:df:b1:
43:e5:1b:35:a4:d2:4e:21:c4:9d:98:01:e8:d3:da:9b:7a:a1:
68:4b:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:49:25 2025 by rpki-client