
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
File: sWUjiWNgP2LB2SiRbtwbOacuOm4.mft (raw, json)
Hash identifier: cMtNM3nxULbhmAJ/vWe0do8vo+tBCEKAgAC+AASVxQo=
Subject key identifier: BC:BC:CA:FD:7D:A9:18:5F:36:A0:6C:6E:1C:16:77:EC:58:E9:7A:FB
Authority key identifier: B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
Certificate issuer: /CN=b165238963603f62c1d928916edc1b39a72e3a6e
Certificate serial: 019922FA6A84395CD7C4590E3D082B8653C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
Manifest number: 02CB
Signing time: Sun 07 Sep 2025 07:01:00 +0000
Manifest this update: Sun 07 Sep 2025 07:01:00 +0000
Manifest next update: Mon 08 Sep 2025 07:01:00 +0000
Files and hashes: 1: sWUjiWNgP2LB2SiRbtwbOacuOm4.crl (hash: ru2xH8fkUAxQVC814gSQ01ROomSCwGVh7zRRtYUEcTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:6a:84:39:5c:d7:c4:59:0e:3d:08:2b:86:53:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b165238963603f62c1d928916edc1b39a72e3a6e
Validity
Not Before: Sep 7 07:01:00 2025 GMT
Not After : Sep 8 07:01:00 2025 GMT
Subject: CN=bcbccafd7da9185f36a06c6e1c1677ec58e97afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:53:a6:97:11:85:e0:04:c4:2c:c5:64:2c:
42:86:17:fb:4b:e0:07:cd:a2:2e:ef:f4:de:dc:24:
d1:1d:f5:0d:6b:a7:f0:b2:a3:86:9a:9e:4e:7d:5c:
28:ad:11:12:19:11:10:90:cc:18:5a:a5:10:a3:b1:
cd:2f:82:b5:95:bf:96:78:fc:02:24:27:00:4e:1f:
c6:f1:9b:fc:3a:a6:92:00:18:c4:95:2f:c3:4a:73:
65:d0:9b:5d:d1:37:3b:80:dd:b9:80:2f:66:cd:3f:
7e:47:ec:8a:cb:c6:80:83:9d:dd:2d:b0:34:00:8e:
22:85:5f:3c:58:0a:27:f9:0f:62:04:d6:b1:2b:dd:
69:f1:e7:60:7f:c8:17:04:08:ef:7a:31:21:0d:7a:
54:f1:81:fd:4f:ba:96:66:4c:95:ac:df:86:ed:7d:
4c:d4:da:0c:1e:e0:4b:15:fb:51:56:ec:64:aa:46:
5d:fb:aa:7e:c3:e5:32:b1:cc:2d:47:78:0e:f2:f8:
58:f4:35:86:de:7e:61:8c:cc:7e:bc:fa:72:c1:b4:
7f:89:6b:32:56:5f:e3:2d:d6:7c:07:ea:46:13:f1:
6c:fa:e2:cb:ed:84:b7:47:6f:47:59:ee:45:66:15:
28:cd:2d:c8:90:86:58:ad:5d:19:4a:15:9f:3a:c8:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:CA:FD:7D:A9:18:5F:36:A0:6C:6E:1C:16:77:EC:58:E9:7A:FB
X509v3 Authority Key Identifier:
keyid:B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:ac:db:e5:04:4c:63:bc:9d:8c:80:2f:e5:37:f3:03:60:
cf:b9:fb:17:d7:ff:09:c2:8f:2e:4f:70:c6:b7:01:74:78:40:
17:99:2e:1c:bf:89:f3:9c:74:74:07:14:86:de:01:43:84:24:
5f:b3:8a:96:23:b7:2b:28:8a:ac:4d:d8:91:4a:0c:01:ce:e4:
b8:ec:81:82:bf:11:85:a5:27:69:7b:c7:64:4b:83:f4:c5:4f:
db:18:25:41:d3:7f:eb:e6:be:2c:3b:c9:c1:77:24:07:90:fd:
39:bc:17:71:c1:45:7c:bb:85:89:a6:44:58:cd:79:74:a2:65:
50:36:dd:fa:8f:21:40:00:60:b2:6a:92:dc:20:95:2c:f2:de:
71:c8:07:d7:02:b5:c5:f8:46:bb:8f:51:03:42:c9:85:f1:07:
e6:15:24:8e:ed:fa:c4:70:3a:e6:62:94:85:74:8f:be:91:8f:
2a:45:1a:04:80:47:25:d1:51:9d:a5:25:98:ff:b0:fa:ee:e2:
8d:35:41:cf:57:a6:33:00:57:35:c2:b2:9b:42:64:f7:ad:69:
7c:67:a7:e9:be:c8:48:72:33:cf:1d:4e:72:2d:d3:82:d9:30:
eb:7d:d9:60:e6:18:70:e5:de:0e:a9:a3:f1:c8:d3:f0:f6:60:
15:f5:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:28 2025 by rpki-client