Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: LF60pbPvYM8SWAVQbtZXkuandcFJTmOrYPblrWWsRno=
Subject key identifier: D4:86:A5:82:20:10:AF:4B:5C:E0:6F:62:8A:6C:0A:7F:CC:94:95:45
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 01992E90CD86A5E83ECA0AF4DB4CAFA0597E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 12A6
Signing time: Tue 09 Sep 2025 13:01:05 +0000
Manifest this update: Tue 09 Sep 2025 13:01:05 +0000
Manifest next update: Wed 10 Sep 2025 13:01:05 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: UFW0Z7Uvgp6DHNAtBueEhaC7HlotkAKnUABZoZTzLmQ=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:cd:86:a5:e8:3e:ca:0a:f4:db:4c:af:a0:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Sep 9 13:01:05 2025 GMT
Not After : Sep 10 13:01:05 2025 GMT
Subject: CN=d486a5822010af4b5ce06f628a6c0a7fcc949545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:2d:40:44:00:d6:7e:b7:5e:77:42:cb:a3:
6b:6f:d5:f8:7e:e0:69:73:80:bf:54:30:9d:b8:28:
81:dd:72:c2:0b:0b:a1:24:68:37:fa:6c:b6:63:29:
0e:81:69:30:9c:bf:34:d5:05:85:9e:dc:93:61:51:
01:db:64:5a:e5:b5:d6:12:15:06:6e:62:9a:bf:16:
9f:5a:75:be:b9:1b:5a:b8:b2:f7:0e:11:02:c7:cd:
b2:de:c2:d4:8e:fc:54:31:4a:00:06:2e:45:9c:68:
10:c9:49:a9:cd:a3:07:4d:17:28:90:9e:a9:07:6f:
e0:68:3e:fe:e3:ac:8c:8b:6b:1c:f6:7d:18:9f:a3:
ba:0a:78:71:31:f6:1a:92:c3:1a:cd:74:9b:43:d7:
64:80:2f:0c:40:15:0f:0b:2a:0c:6d:02:24:3e:9c:
a2:df:3e:19:af:0f:1c:06:87:8a:13:46:96:8a:16:
6b:99:a9:7d:c7:79:54:77:a3:0e:a2:f6:79:82:78:
18:28:da:b4:b6:b5:95:68:58:e2:f1:9b:e6:da:34:
43:dc:27:dd:ab:19:00:fe:51:ba:53:56:72:31:fe:
32:20:e5:ca:9b:34:17:93:9f:f5:8c:2c:43:9d:d9:
e2:be:53:6f:ee:f6:74:bd:e9:07:5d:82:d8:b9:88:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:A5:82:20:10:AF:4B:5C:E0:6F:62:8A:6C:0A:7F:CC:94:95:45
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5a:f3:cd:24:15:7d:55:7b:06:d0:3e:42:fa:d2:26:63:77:
b7:64:5d:cf:b1:7d:3a:6c:8d:da:d2:9e:68:fd:12:81:59:a6:
30:a6:74:6d:f1:b0:12:3d:09:83:88:24:63:63:91:7c:be:bb:
61:e3:14:b9:36:a4:6b:23:ac:f7:59:f5:bb:d4:23:9a:c7:c4:
41:c7:dc:7b:83:e3:2a:3e:22:62:6e:b6:51:09:f3:ce:62:d3:
0c:32:e8:bb:47:cd:b9:ff:7d:67:8c:d2:12:0c:78:5f:92:a6:
b8:36:d1:ef:45:ba:35:23:f2:b5:2b:a6:a7:44:b4:21:b7:f6:
80:12:d9:02:59:2e:38:2d:ad:73:d0:7a:45:26:22:f1:9c:ac:
47:77:d7:55:1d:80:c8:41:c0:ac:8e:f6:e4:c2:da:fa:53:ab:
a5:39:d9:25:29:7e:db:6c:ce:5c:ef:e2:d8:92:ae:c3:02:4f:
7f:a8:70:13:a3:73:75:3b:20:62:a8:54:11:10:b3:ec:b6:55:
21:89:aa:ca:df:a9:f9:8e:1c:c1:21:81:b0:64:0f:db:ba:fc:
de:a1:ab:67:cf:26:c1:de:81:99:9d:5c:3e:83:fd:f5:7e:00:
df:cd:6f:fd:64:c5:1f:2a:ec:91:69:92:1f:0f:2b:8d:9e:24:
45:88:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:26:20 2025 by rpki-client