Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: ov++Q2tfAQs/kVkkaB7o2HjDbST2CZ5k0gpVFVyRX6w=
Subject key identifier: 85:2B:A1:99:50:D2:BC:9E:A5:8D:DC:25:D1:CF:FE:70:97:B7:FB:4C
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 019A7293D927DE40FB9A937F7B584F41FB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0DEF
Signing time: Tue 11 Nov 2025 11:01:23 +0000
Manifest this update: Tue 11 Nov 2025 11:01:23 +0000
Manifest next update: Wed 12 Nov 2025 11:01:23 +0000
Files and hashes: 1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: DAvBzMOLT8X7Yd5f31ErLF9/K9BD9HrEwqwYYZfs4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d9:27:de:40:fb:9a:93:7f:7b:58:4f:41:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Nov 11 11:01:23 2025 GMT
Not After : Nov 12 11:01:23 2025 GMT
Subject: CN=852ba19950d2bc9ea58ddc25d1cffe7097b7fb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:b9:7c:f6:c7:a8:55:09:94:ed:cd:39:ae:
d1:af:5c:89:c6:2b:ab:0d:34:b1:7a:70:b2:55:00:
c6:2c:fd:94:c1:97:3c:e6:a2:68:2f:c2:d2:fe:cd:
82:a5:2c:4c:d2:b2:ad:1f:8c:89:6c:d0:cc:7a:8f:
7e:5b:7e:60:1a:e1:0b:f2:82:7e:54:c4:8f:be:84:
7d:6d:f8:41:1f:cb:eb:a6:8c:1e:20:47:eb:fd:ec:
67:b4:4f:c7:50:43:e2:1b:19:44:2e:fa:f2:a5:99:
f0:70:7f:ff:d6:54:85:af:c0:81:7a:0f:6b:51:f7:
5c:21:93:85:a2:68:a6:aa:0d:ea:74:0b:39:71:2c:
61:86:7e:e5:08:52:f6:95:ce:da:22:f2:2d:5b:b6:
f3:9d:00:30:a0:f6:ef:fa:91:32:cf:de:3a:d2:0c:
60:64:51:e9:31:89:c2:e1:c9:5d:72:e6:f2:8a:49:
ac:10:af:a5:db:63:12:ae:d7:ac:ea:5a:0f:9d:c5:
ce:58:07:3e:1e:4c:8b:5b:e8:32:b1:a3:a6:37:3e:
bd:7d:34:b2:97:65:b8:96:dd:7e:23:84:18:92:70:
f9:04:f2:23:82:38:1c:b4:99:4e:94:4e:a2:7e:0f:
ac:3c:28:5b:8d:fa:e4:2e:63:51:b7:68:37:0c:a8:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:A1:99:50:D2:BC:9E:A5:8D:DC:25:D1:CF:FE:70:97:B7:FB:4C
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:77:e5:7a:c8:e4:c5:f3:dc:1c:63:02:65:a5:ab:63:44:
d7:bb:8e:3c:f7:4f:f6:68:46:ee:85:ef:8a:3f:75:9d:32:df:
6a:2c:a5:1f:07:77:22:b8:b2:28:92:5e:84:f7:63:8d:b9:03:
99:49:04:22:94:ef:82:7f:c7:2e:f7:ff:01:24:02:9e:89:fd:
72:51:22:13:1a:34:f0:02:6e:8f:d5:22:a5:6b:3c:22:16:af:
ff:01:69:07:c0:54:4e:f6:1b:f9:aa:05:6d:7e:34:55:39:a1:
8a:84:d4:1d:39:1a:39:cd:db:ae:cb:2f:d4:ec:26:d2:b0:78:
13:6a:43:f4:24:1a:80:3b:9e:d9:05:86:cd:4a:a6:7d:cb:18:
7f:3f:87:12:3e:66:e0:3e:a3:c7:22:9c:c0:c8:9f:60:18:93:
48:1e:b2:df:c7:18:ce:91:83:43:85:ab:33:fd:c9:2d:7a:81:
cb:cf:88:27:a2:ad:f6:b3:31:c9:8f:76:62:31:0e:81:81:df:
fd:dc:18:a5:68:85:03:7c:25:d7:96:19:d6:d8:34:41:ca:50:
fa:e5:09:4a:51:3a:c0:e4:ed:92:c1:25:6e:71:0f:15:24:3a:
eb:51:e1:6c:64:0e:3a:6b:9a:0c:0f:b3:be:af:dd:0c:0a:85:
17:b8:36:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk9kn3kD7mpN/e1hPQfuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMDQwYzdmNDUxYzYxNGQ3ZWViYTgyYzMyYTM5OGU4N2Rl
M2I4YzkwHhcNMjUxMTExMTEwMTIzWhcNMjUxMTEyMTEwMTIzWjAzMTEwLwYDVQQD
Eyg4NTJiYTE5OTUwZDJiYzllYTU4ZGRjMjVkMWNmZmU3MDk3YjdmYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV65fPbHqFUJlO3NOa7Rr1yJxiur
DTSxenCyVQDGLP2UwZc85qJoL8LS/s2CpSxM0rKtH4yJbNDMeo9+W35gGuEL8oJ+
VMSPvoR9bfhBH8vrpoweIEfr/exntE/HUEPiGxlELvrypZnwcH//1lSFr8CBeg9r
UfdcIZOFomimqg3qdAs5cSxhhn7lCFL2lc7aIvItW7bznQAwoPbv+pEyz9460gxg
ZFHpMYnC4cldcubyikmsEK+l22MSrtes6loPncXOWAc+HkyLW+gysaOmNz69fTSy
l2W4lt1+I4QYknD5BPIjgjgctJlOlE6ifg+sPChbjfrkLmNRt2g3DKispwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUroZlQ0ryepY3cJdHP/nCXt/tMMB8GA1UdIwQY
MBaAFLMEDH9FHGFNfuuoLDKjmOh947jJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NjZlNjctMTU0Ni00MTNjLWI2YTEt
NWE3OGJhNjA5MWMxLzEvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NjZlNjctMTU0Ni00MTNjLWI2YTEtNWE3OGJhNjA5MWMx
LzEvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjl35XrI
5MXz3BxjAmWlq2NE17uOPPdP9mhG7oXvij91nTLfaiylHwd3IriyKJJehPdjjbkD
mUkEIpTvgn/HLvf/ASQCnon9clEiExo08AJuj9UipWs8Ihav/wFpB8BUTvYb+aoF
bX40VTmhioTUHTkaOc3brssv1Owm0rB4E2pD9CQagDue2QWGzUqmfcsYfz+HEj5m
4D6jxyKcwMifYBiTSB6y38cYzpGDQ4WrM/3JLXqBy8+IJ6Kt9rMxyY92YjEOgYHf
/dwYpWiFA3wl15YZ1tg0QcpQ+uUJSlE6wOTtksElbnEPFSQ661HhbGQOOmuaDA+z
vq/dDAqFF7g2yg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:53 2025 by rpki-client