Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: LizOiQqTppeZOEC0lHRwG6WmxBTlL/lxgPTbvqelim8=
Subject key identifier: 82:01:59:7B:C3:DD:15:11:53:0B:85:64:BE:07:62:33:EF:4A:D2:85
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 01974D447D0167B74772AE41C75B1C8EBAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0C4E
Signing time: Sun 08 Jun 2025 02:00:23 +0000
Manifest this update: Sun 08 Jun 2025 02:00:23 +0000
Manifest next update: Mon 09 Jun 2025 02:00:23 +0000
Files and hashes: 1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: C3ySLNqaa95fysOS5QgKwZy/NxI4xD3cTNdRjlXZGkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:7d:01:67:b7:47:72:ae:41:c7:5b:1c:8e:ba:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Jun 8 02:00:23 2025 GMT
Not After : Jun 9 02:00:23 2025 GMT
Subject: CN=8201597bc3dd1511530b8564be076233ef4ad285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:f5:e9:48:77:9b:2b:91:aa:f0:de:a1:35:
fe:14:03:a4:e6:94:14:db:62:7f:8b:9b:51:2b:72:
e7:31:61:8f:37:64:d0:2d:4b:04:36:66:a8:32:21:
3b:af:b7:b8:bb:7b:f4:9a:6c:9f:0d:7a:98:4c:41:
27:ad:eb:e2:a3:a9:0d:06:d5:91:d2:16:f1:5f:cd:
00:7e:ae:20:7b:1b:a8:89:67:14:fa:ea:16:5e:56:
5a:65:c7:09:85:c4:aa:a7:86:a4:f9:ca:13:7b:53:
e8:30:77:d6:c6:15:00:48:77:e4:66:25:05:97:83:
ea:e2:ef:36:eb:25:c8:98:0c:6f:c8:e1:af:e1:1c:
89:e9:d6:dc:ab:be:45:88:74:f2:fc:db:dc:70:4c:
08:be:71:e1:a5:c0:9a:f6:ee:5b:a3:64:47:d8:05:
44:b8:b6:bc:61:3c:b8:2f:9f:cb:1d:5f:01:dd:84:
de:3a:e4:9a:d4:c7:1e:2d:7a:66:26:ea:de:81:f0:
72:bb:b5:10:25:3f:99:fb:58:a2:2f:17:64:87:ac:
d4:24:0d:f4:87:0a:4b:92:b5:04:87:a3:46:63:8b:
e1:34:02:93:cd:38:ad:b4:26:09:94:91:6a:9b:7d:
9b:a2:d7:40:a6:44:a5:20:40:ec:28:2f:17:73:91:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:59:7B:C3:DD:15:11:53:0B:85:64:BE:07:62:33:EF:4A:D2:85
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:9c:71:a2:db:39:8b:72:bd:68:a5:69:8e:2d:0d:04:65:
ca:88:cf:05:65:51:4b:98:ea:7d:f5:6c:93:40:12:08:32:5d:
8e:83:c9:4d:e8:7f:19:c1:51:5a:ce:34:d0:76:26:96:fc:a1:
09:53:7f:04:a4:a3:76:c1:60:be:fe:66:a6:b4:85:5e:99:8d:
64:e2:0a:59:10:ce:2b:59:a8:22:36:31:b5:63:1f:58:30:8a:
e4:25:f5:5b:77:0e:e4:a4:e0:c5:e9:4d:88:bb:b6:5c:04:b2:
5d:94:ab:d9:30:42:47:f3:f5:bd:a1:85:92:d3:67:e7:52:2d:
61:e3:9f:24:e1:6a:e8:99:af:35:7f:84:b0:ae:6b:e6:ef:bc:
c0:10:b9:59:71:83:bb:97:08:f6:fb:d4:e9:3a:ef:97:07:8b:
53:88:da:a0:80:e2:08:35:3c:d2:a3:ec:51:3f:5b:da:40:c9:
95:45:04:a6:05:cd:29:6a:98:ab:83:2a:33:6f:4c:4f:bc:aa:
27:4b:92:a6:c8:7f:1e:c7:a6:ea:43:df:c1:39:e2:af:6e:ac:
90:c7:b6:3c:9d:d2:5b:9a:40:42:07:b3:bf:7f:9c:aa:d2:73:
ac:81:97:62:1f:a4:ba:29:aa:51:21:e6:f5:df:1e:ea:f6:34:
43:4a:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:14:22 2025 by rpki-client