Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: YX6yRdy6OFJStEW2Ds6npiVGSW5KJbXSdvoO7dh0EB4=
Subject key identifier: EC:B3:E5:3C:04:79:27:A5:99:BC:F3:6D:72:93:84:13:67:AD:BD:19
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 0197575AA6541AFFD3D8C8AC8A790053C38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 11B2
Signing time: Tue 10 Jun 2025 01:00:47 +0000
Manifest this update: Tue 10 Jun 2025 01:00:47 +0000
Manifest next update: Wed 11 Jun 2025 01:00:47 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: cOIVTjDDpyjQZUxWhTLMOMf4m8BQX/YydClphJfCWOE=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:a6:54:1a:ff:d3:d8:c8:ac:8a:79:00:53:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Jun 10 01:00:47 2025 GMT
Not After : Jun 11 01:00:47 2025 GMT
Subject: CN=ecb3e53c047927a599bcf36d7293841367adbd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:8d:c8:f9:0e:86:0e:74:ce:3c:ff:d0:0a:
bd:13:9f:6c:91:53:37:ca:c4:1f:ea:55:85:c5:ff:
be:c9:f8:45:9b:09:f3:a1:0c:1a:ca:9d:b2:84:71:
2a:9f:76:cf:1d:9e:69:1a:21:7f:c3:c2:5b:ed:e3:
a5:05:2a:55:d8:e8:ab:8b:c6:19:76:44:0b:a0:87:
4e:6b:b0:1b:39:76:e9:a3:69:0f:9b:7f:43:44:2e:
ce:1d:f1:8c:6d:81:93:be:e8:4a:94:25:c2:d8:84:
d7:2a:f8:4c:66:e5:7f:45:57:d1:95:94:45:33:8c:
ab:2b:7a:55:31:0d:4b:f0:38:1d:d2:71:2c:8e:dc:
9a:79:78:08:6b:4d:cb:84:df:e2:24:a1:91:e4:bd:
f2:ce:6a:6e:02:f0:db:2d:cb:4b:a7:68:35:f7:d7:
9b:32:a8:0d:23:bc:e7:15:f5:2c:f3:87:f1:63:08:
1b:75:e9:25:df:17:5e:66:46:33:bc:de:39:45:1d:
99:98:dd:92:1b:a4:43:de:67:45:9b:59:de:db:06:
78:a8:17:a0:35:68:43:b5:c7:fd:b9:6f:57:df:9b:
c1:25:2e:bc:e3:0f:4d:7a:21:99:33:40:9e:ac:47:
b8:67:54:46:d6:48:c1:17:89:a5:1e:27:d8:c9:d9:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:E5:3C:04:79:27:A5:99:BC:F3:6D:72:93:84:13:67:AD:BD:19
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:56:f8:5b:a0:62:16:fa:b3:c2:2b:01:a0:f5:1d:2f:ee:ee:
e0:6d:86:af:0f:b0:84:dc:75:5a:d4:e1:0f:83:ab:c8:9a:51:
5e:fa:0f:59:69:0d:71:66:08:45:58:c0:bd:37:40:18:d3:51:
49:32:20:83:ad:56:8a:2b:fb:d9:98:44:a5:f4:7b:ab:76:37:
6f:c0:f1:d4:86:32:3d:e1:65:12:11:2d:60:c8:e7:83:b0:e2:
e6:7d:2f:1a:ca:76:b6:29:a9:eb:8d:f2:2b:3c:26:e4:ac:4d:
c3:e8:b8:06:a0:34:8a:ee:ba:9c:af:ea:d1:de:d1:ca:d3:18:
e4:bd:30:f5:a6:ef:7a:19:63:99:86:6d:b1:33:95:27:ba:0b:
9d:74:3f:d5:ac:70:93:67:1b:c8:74:49:a5:fe:c9:b1:92:36:
e9:bf:46:42:95:41:a8:44:b9:11:b3:f7:83:80:50:85:bd:da:
87:14:8e:ed:bc:fb:3c:30:e6:05:58:83:b6:9e:80:2a:91:23:
2e:68:4c:e4:82:fa:ad:b6:4e:56:15:35:5a:50:46:90:04:f5:
3b:4f:1a:f8:e8:43:f2:dc:7a:fc:b9:55:80:b4:f2:66:b6:ae:
2a:84:68:7e:e9:57:cf:8d:aa:81:a0:ec:db:cc:8f:4b:9c:61:
21:84:26:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXWqZUGv/T2MisinkAU8OKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMDFiMDg1MWI3Zjg5ZWE0YmIxMzJhN2Y1Mzk1YjlkMmFj
YTFjMDIwHhcNMjUwNjEwMDEwMDQ3WhcNMjUwNjExMDEwMDQ3WjAzMTEwLwYDVQQD
EyhlY2IzZTUzYzA0NzkyN2E1OTliY2YzNmQ3MjkzODQxMzY3YWRiZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXSNyPkOhg50zjz/0Aq9E59skVM3
ysQf6lWFxf++yfhFmwnzoQwayp2yhHEqn3bPHZ5pGiF/w8Jb7eOlBSpV2Oiri8YZ
dkQLoIdOa7AbOXbpo2kPm39DRC7OHfGMbYGTvuhKlCXC2ITXKvhMZuV/RVfRlZRF
M4yrK3pVMQ1L8Dgd0nEsjtyaeXgIa03LhN/iJKGR5L3yzmpuAvDbLctLp2g199eb
MqgNI7znFfUs84fxYwgbdekl3xdeZkYzvN45RR2ZmN2SG6RD3mdFm1ne2wZ4qBeg
NWhDtcf9uW9X35vBJS684w9NeiGZM0CerEe4Z1RG1kjBF4mlHifYydn06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyz5TwEeSelmbzzbXKThBNnrb0ZMB8GA1UdIwQY
MBaAFEsBsIUbf4nqS7Eyp/U5W50qyhwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgt
YmQ1MDQzYzBkMWZiLzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgtYmQ1MDQzYzBkMWZi
LzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVb4W6Bi
FvqzwisBoPUdL+7u4G2Grw+whNx1WtThD4OryJpRXvoPWWkNcWYIRVjAvTdAGNNR
STIgg61Wiiv72ZhEpfR7q3Y3b8Dx1IYyPeFlEhEtYMjng7Di5n0vGsp2timp643y
Kzwm5KxNw+i4BqA0iu66nK/q0d7RytMY5L0w9abvehljmYZtsTOVJ7oLnXQ/1axw
k2cbyHRJpf7JsZI26b9GQpVBqES5EbP3g4BQhb3ahxSO7bz7PDDmBViDtp6AKpEj
LmhM5IL6rbZOVhU1WlBGkAT1O08a+OhD8tx6/LlVgLTyZrauKoRofulXz42qgaDs
28yPS5xhIYQmtg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:44:23 2025 by rpki-client