Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: yIx9pIZf0zXl5R7XHtT2nrWpX4uzgTg3/I4JacSm0DI=
Subject key identifier: A1:5D:EC:12:D8:F1:0F:1D:AB:4C:FD:94:D2:BB:64:54:57:70:A5:FB
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019A1E0843B6F2BA40500A5452E535C40BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 1322
Signing time: Sun 26 Oct 2025 01:00:49 +0000
Manifest this update: Sun 26 Oct 2025 01:00:49 +0000
Manifest next update: Mon 27 Oct 2025 01:00:49 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: yR09LaZW45Sfacq75MFvpiBY9fuVFQV12tf2OQ02GKc=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:43:b6:f2:ba:40:50:0a:54:52:e5:35:c4:0b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Oct 26 01:00:49 2025 GMT
Not After : Oct 27 01:00:49 2025 GMT
Subject: CN=a15dec12d8f10f1dab4cfd94d2bb64545770a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:39:df:6e:ac:7d:3e:ed:ed:14:e5:af:42:
95:8b:5a:d5:0f:53:c9:1b:e0:44:f5:0d:c9:a8:5f:
e0:f0:79:b7:5a:d5:10:7d:3d:3b:55:4b:24:fb:48:
fd:e2:bf:42:bb:f0:bf:a5:19:d1:91:5c:2a:48:1d:
c6:44:14:1f:bb:29:70:68:d0:66:0d:ff:20:6e:f6:
58:e0:c3:30:82:84:4f:75:2b:65:77:64:f2:99:cb:
44:cf:05:49:d8:74:b4:96:85:fd:a1:c7:0b:63:38:
91:9c:07:81:20:a4:12:43:66:88:e7:4c:f0:65:5c:
81:a0:07:1c:e1:47:67:97:da:f7:7d:12:4c:e3:5c:
c6:9d:d0:b8:ba:d2:5d:64:42:d5:ff:36:1f:77:7f:
38:24:26:6b:3b:03:f9:4f:c2:27:1c:5b:2c:dd:6c:
98:70:cf:e7:8c:ad:3b:3b:19:28:e4:2b:16:b3:27:
2c:21:b0:13:be:33:f9:d5:e3:61:3d:d8:80:6d:f6:
eb:c5:20:bd:3e:1b:bd:13:c4:37:6f:da:54:0b:15:
f9:20:84:b7:9b:ab:f5:09:5a:77:6a:34:22:c6:b7:
17:00:a3:6a:e7:91:1c:90:56:ce:5a:cf:1c:de:9b:
ec:77:9a:f1:8a:fb:2e:f0:c6:72:7c:29:29:19:74:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:EC:12:D8:F1:0F:1D:AB:4C:FD:94:D2:BB:64:54:57:70:A5:FB
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:46:73:04:02:2c:72:8e:85:8d:06:07:20:13:80:29:15:6c:
30:3b:e3:1b:ba:3e:75:eb:1f:d6:9c:f1:e3:09:0a:35:f1:c5:
21:b3:87:90:cb:e6:9b:00:5f:67:34:94:3a:de:e4:64:07:f2:
7a:c5:b3:27:c4:7d:95:2d:6e:f2:c9:8e:98:88:52:41:ef:7e:
1b:fd:5b:0e:c1:e2:f1:57:ee:66:f8:97:0e:b5:a2:10:32:a8:
0f:bb:e6:8b:8b:50:7e:2a:63:41:9d:ad:89:43:f3:aa:b8:dc:
14:4f:82:33:5b:e9:85:97:82:64:88:db:1d:7f:c9:24:5b:48:
eb:87:6d:b0:8d:7e:8c:76:d5:05:80:13:8c:e0:48:d4:5d:ce:
bb:63:8a:36:cb:0c:6f:c0:21:3e:ce:6b:91:9c:46:6d:77:44:
0a:5d:d0:a8:70:84:88:79:91:ef:2b:a9:16:a7:12:02:bd:0f:
7f:86:2b:dc:60:1a:28:02:51:43:06:be:4b:8f:4d:38:75:6e:
24:07:c5:7a:00:56:8d:35:43:bd:b3:b4:a7:25:e7:4b:bf:97:
1d:56:38:1c:d4:9d:02:25:2d:e3:c4:00:48:3d:4f:cf:de:10:
aa:92:ba:2c:0b:bd:66:e7:2b:67:fc:91:19:22:85:3c:15:2c:
63:dc:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:17 2025 by rpki-client