Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: yvGp14C46domdkY94l1eA87PqRBwwZQRmgsBwSjtjhU=
Subject key identifier: B1:FE:88:61:4C:C9:7A:00:F8:9F:2D:AD:3E:9B:04:DD:78:E9:4D:56
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 0199228D0A90E62D4A09885104CA2DE25F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0D41
Signing time: Sun 07 Sep 2025 05:01:32 +0000
Manifest this update: Sun 07 Sep 2025 05:01:32 +0000
Manifest next update: Mon 08 Sep 2025 05:01:32 +0000
Files and hashes: 1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: 7PJHCVR47v1tXWdDdsGeHzHB2fQcmwRglEtb0J5FvrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0a:90:e6:2d:4a:09:88:51:04:ca:2d:e2:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Sep 7 05:01:32 2025 GMT
Not After : Sep 8 05:01:32 2025 GMT
Subject: CN=b1fe88614cc97a00f89f2dad3e9b04dd78e94d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:e1:d0:25:bf:18:23:6d:bd:c3:64:e5:41:
5e:b3:d2:81:4f:8f:c8:a3:40:93:1b:0d:dd:1d:d6:
7b:1f:5b:74:7c:3a:40:8a:40:3e:38:2e:63:8e:91:
a9:f7:f6:f8:cc:cd:11:f5:2a:72:20:57:0f:c0:52:
36:97:03:1d:84:02:19:28:37:d9:c1:86:cc:50:39:
cd:00:23:fc:27:9c:50:11:4a:9a:cf:63:8e:13:02:
06:47:c5:04:03:35:af:40:78:ef:c5:c2:d1:84:1f:
bd:5d:3c:a7:e6:77:90:98:cd:ee:36:b5:f6:65:07:
78:06:5d:a6:f5:d7:3f:b3:0b:52:15:63:f7:8a:97:
b0:38:d0:38:f5:69:52:c6:82:04:45:42:94:f3:ab:
0c:8a:43:60:3e:a5:73:f1:76:28:20:e6:f3:65:e5:
18:53:d1:df:b5:ec:33:b3:88:3f:81:34:91:49:0c:
cf:fc:90:7b:43:62:c0:2c:73:06:3b:0d:52:44:1f:
d1:05:fd:ec:8a:93:83:3c:c8:eb:2c:27:2b:1d:8e:
9a:be:6e:fd:a8:b4:d6:1a:f6:8b:4b:c5:17:0f:bc:
f1:fe:60:83:4c:69:c7:92:07:35:70:10:aa:21:7e:
85:0c:bd:e4:be:fa:00:aa:fa:23:90:f2:77:0c:f9:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:88:61:4C:C9:7A:00:F8:9F:2D:AD:3E:9B:04:DD:78:E9:4D:56
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:03:d1:17:65:b0:c8:ba:6c:33:db:f6:65:f9:4b:cf:01:8a:
25:ce:f7:a8:4e:8d:42:ee:87:fa:9f:65:e9:dd:30:ce:4f:a1:
1f:9a:47:0b:d0:c1:d6:d4:46:0f:eb:a1:95:02:9d:1b:d9:5e:
33:7e:94:76:db:3c:7c:27:3b:74:24:ee:3e:6f:53:07:4c:06:
95:8d:bc:b3:8a:16:19:c2:bb:44:11:91:ff:2e:2d:6d:31:00:
75:48:7c:d5:7e:62:29:5c:b1:ca:11:38:e9:45:b8:bf:99:be:
a0:6d:42:1f:08:45:e1:ca:25:68:08:7f:45:4c:3c:41:b2:47:
c5:0f:4c:41:c9:4d:82:a0:37:fc:fb:87:75:eb:6c:44:63:8e:
30:58:5d:52:02:90:78:61:2e:10:15:44:26:ec:e5:05:15:a6:
f1:f3:42:13:d5:eb:7e:55:0f:d0:e6:10:b7:15:35:77:40:17:
1e:4b:07:cb:bf:df:26:4f:b1:b1:c8:23:4b:97:75:e7:ac:60:
39:50:7d:41:f1:44:b0:79:a9:2d:7d:66:c3:db:9c:8b:a0:85:
0a:a5:96:da:8a:6e:a8:da:67:8e:78:0c:65:bb:95:e4:3a:44:
f2:ed:21:2b:88:ee:dd:ff:b1:a3:84:fe:87:ec:ba:44:a4:f5:
d7:6c:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:29 2025 by rpki-client