Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File: sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier: P2MReCPLQVDPcITjGBhY36k6XrzHPQ2bZ3hCI50apXc=
Subject key identifier: DE:DB:2B:C5:73:33:8F:E5:F5:F7:FA:2C:2F:51:6A:28:A2:A8:D3:74
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer: /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial: 019A73014D4912E44529981F6EA7B2309504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 13:00:56 +0000
Manifest this update: Tue 11 Nov 2025 13:00:56 +0000
Manifest next update: Wed 12 Nov 2025 13:00:56 +0000
Files and hashes: 1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: iNjR604Q8mfPAbaa4HqCylhkmLOCxEZg+QmXEoJQB7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:4d:49:12:e4:45:29:98:1f:6e:a7:b2:30:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Validity
Not Before: Nov 11 13:00:56 2025 GMT
Not After : Nov 12 13:00:56 2025 GMT
Subject: CN=dedb2bc573338fe5f5f7fa2c2f516a28a2a8d374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:62:e1:14:0d:d9:0d:2a:dd:52:82:02:d0:
9e:e0:39:12:45:30:60:8f:37:4b:0a:ad:5b:8d:c7:
b0:e4:4d:b6:f5:bc:26:32:e7:1a:1a:ed:82:0f:b9:
76:0c:2a:42:2c:57:44:e0:61:b1:21:d6:42:97:f3:
55:e5:88:1f:7d:7b:4f:e8:8e:af:b6:a9:5d:77:ca:
66:fe:35:e8:0c:8b:e5:7d:55:4e:51:65:0e:2f:ca:
5e:1b:cb:77:b1:ac:ef:65:19:23:ac:c9:df:46:fd:
d8:8d:9b:c1:09:51:a7:f4:09:e3:5a:76:02:06:b0:
97:fd:92:e3:35:b1:71:87:37:fe:ff:c6:89:76:77:
22:e0:ae:18:8a:80:f5:c4:5a:f9:5c:d4:b4:55:8f:
b3:2a:f4:89:25:20:f2:e5:f7:06:34:8a:5a:72:f2:
56:cb:22:21:b9:71:a3:16:f6:21:8e:41:ae:a5:08:
13:6a:44:7f:52:6c:e0:60:3e:09:d8:9a:b3:db:e8:
09:9b:8a:29:12:1e:98:dc:a3:94:99:a2:5a:46:9b:
c7:10:36:2f:0d:b1:d0:92:62:8d:07:28:8d:16:54:
f1:bf:60:6b:e6:d8:2d:2d:c7:97:ee:2f:44:ae:11:
37:bc:d2:95:96:77:8c:db:5a:22:63:13:e4:a8:6f:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:2B:C5:73:33:8F:E5:F5:F7:FA:2C:2F:51:6A:28:A2:A8:D3:74
X509v3 Authority Key Identifier:
keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:92:81:a7:c1:bb:95:db:88:7f:a3:38:91:38:4b:7e:bd:c5:
4c:5e:7f:fc:b7:f4:6f:e8:48:25:d2:63:4f:63:2b:aa:33:29:
f7:db:98:4e:53:47:82:1c:2b:e0:34:f6:d0:54:11:c2:1e:ce:
ed:29:65:38:88:fa:e3:f4:43:12:4c:57:b6:77:03:01:b1:cf:
df:41:86:61:8a:97:f2:43:48:a3:0d:f7:3f:8f:39:24:17:56:
40:8e:3b:1d:3f:f9:ee:db:c6:6d:3a:13:f9:13:2c:22:2a:84:
9f:41:7b:73:ba:2d:23:57:44:a2:90:5c:22:ae:e7:0c:50:fc:
9b:2c:91:aa:03:f1:66:37:e4:f1:ad:88:d6:35:1d:a1:57:63:
f6:c6:26:9e:dc:9c:cb:13:bf:89:a3:e1:9b:0c:98:2d:5f:c9:
6c:0d:ae:fc:18:ec:ea:14:d0:b5:7b:bb:6e:f1:2c:1a:75:d1:
0f:db:62:ad:04:6a:e8:2c:a9:c4:96:03:b2:e5:af:9e:73:3a:
d1:b4:72:bb:35:76:3c:22:b0:cb:7b:ba:b0:8f:6a:31:93:62:
9c:16:bd:07:fe:d4:0d:a9:70:1d:0b:75:72:d5:cd:86:54:17:
62:48:46:90:0f:7d:d6:00:93:93:a4:e3:f7:a5:6e:ea:36:60:
6d:84:9e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAU1JEuRFKZgfbqeyMJUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGEyYjQ4NGUyNmYzMGQzNWZkODJhMzQ0MjdmZjIyMDFj
YjUwMDMwHhcNMjUxMTExMTMwMDU2WhcNMjUxMTEyMTMwMDU2WjAzMTEwLwYDVQQD
EyhkZWRiMmJjNTczMzM4ZmU1ZjVmN2ZhMmMyZjUxNmEyOGEyYThkMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9pi4RQN2Q0q3VKCAtCe4DkSRTBg
jzdLCq1bjcew5E229bwmMucaGu2CD7l2DCpCLFdE4GGxIdZCl/NV5YgffXtP6I6v
tqldd8pm/jXoDIvlfVVOUWUOL8peG8t3sazvZRkjrMnfRv3YjZvBCVGn9AnjWnYC
BrCX/ZLjNbFxhzf+/8aJdnci4K4YioD1xFr5XNS0VY+zKvSJJSDy5fcGNIpacvJW
yyIhuXGjFvYhjkGupQgTakR/UmzgYD4J2Jqz2+gJm4opEh6Y3KOUmaJaRpvHEDYv
DbHQkmKNByiNFlTxv2Br5tgtLceX7i9ErhE3vNKVlneM21oiYxPkqG9CHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7bK8VzM4/l9ff6LC9RaiiiqNN0MB8GA1UdIwQY
MBaAFLMKK0hOJvMNNf2Co0Qn/yIBy1ADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQt
M2EwNDY3ZDVmMTA1LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQtM2EwNDY3ZDVmMTA1
LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZKBp8G7
lduIf6M4kThLfr3FTF5//Lf0b+hIJdJjT2MrqjMp99uYTlNHghwr4DT20FQRwh7O
7SllOIj64/RDEkxXtncDAbHP30GGYYqX8kNIow33P485JBdWQI47HT/57tvGbToT
+RMsIiqEn0F7c7otI1dEopBcIq7nDFD8myyRqgPxZjfk8a2I1jUdoVdj9sYmntyc
yxO/iaPhmwyYLV/JbA2u/Bjs6hTQtXu7bvEsGnXRD9tirQRq6CypxJYDsuWvnnM6
0bRyuzV2PCKwy3u6sI9qMZNinBa9B/7UDalwHQt1ctXNhlQXYkhGkA991gCTk6Tj
96Vu6jZgbYSeWg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:25 2025 by rpki-client