Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File: swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier: 5ezksV0+BdKnYKoRa9WcSObGxZaxAFbDmZzPdrXKqlI=
Subject key identifier: AD:C0:4A:95:0B:BC:9E:AB:8A:20:82:8B:40:B6:66:54:BB:38:F8:69
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 01962A17245B799F938B6DCA756EB0B1C992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number: 11E8
Signing time: Sat 12 Apr 2025 13:01:21 +0000
Manifest this update: Sat 12 Apr 2025 13:01:21 +0000
Manifest next update: Sun 13 Apr 2025 13:01:21 +0000
Files and hashes: 1: 7FzoSqKZlb5kD6vPPTk2SfC27nM.roa (hash: 6aAGYHU1rCi9sNjHbIL9N9TC7WU4O97UeTWhOeOg/Oo=)
2: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
3: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: YZATvsnKs2ZH1/eVOtIhEtB4/feqCifcgfLgkeMsb34=)
7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:17:24:5b:79:9f:93:8b:6d:ca:75:6e:b0:b1:c9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Apr 12 13:01:21 2025 GMT
Not After : Apr 13 13:01:21 2025 GMT
Subject: CN=adc04a950bbc9eab8a20828b40b66654bb38f869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:b3:92:28:7c:b7:93:89:43:0b:aa:fe:76:
ce:41:a8:69:1a:9f:4d:9a:7a:d5:c9:2f:f5:5c:d3:
1e:02:b1:bc:5d:cc:ec:e0:d4:fb:4c:0e:15:f2:52:
3d:6b:e8:49:dd:d4:ca:1f:9b:65:61:0e:1c:77:69:
53:6f:9d:3c:f7:0d:cb:26:8e:c0:61:d7:83:09:fc:
d7:d2:e8:38:d4:d2:4f:2c:d5:c7:65:0a:f6:3b:eb:
27:13:b7:be:b2:30:bf:80:45:a5:11:dd:35:4e:2a:
33:5f:1b:28:c0:ba:65:12:98:24:b0:32:31:36:5d:
2c:bb:66:f0:60:db:0d:32:9d:62:fb:cd:92:65:dc:
ec:af:5b:4b:90:2f:1e:b5:bd:1c:1a:b4:bd:e8:48:
f1:c1:37:fb:96:92:ed:78:cb:3b:33:3a:fc:80:23:
8f:78:87:3a:3b:96:7e:46:46:dc:eb:39:38:e7:c0:
00:fb:dd:74:92:7a:5c:8a:49:70:98:8f:f0:92:50:
7d:3e:ab:8b:39:97:6e:46:7d:ba:f3:a2:b9:b9:f7:
87:3b:cb:dd:1b:61:b1:2f:d2:15:42:9a:76:6b:f1:
d4:0d:83:94:81:70:a9:a0:f3:d7:32:4d:91:1e:42:
5c:1c:4c:4c:82:1e:09:b0:f5:49:8f:70:b6:6f:98:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:4A:95:0B:BC:9E:AB:8A:20:82:8B:40:B6:66:54:BB:38:F8:69
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ac:56:ca:fc:64:51:cd:11:e0:07:3a:95:2f:59:af:1e:43:
92:b1:62:e3:45:1d:1d:a2:12:0c:79:23:1e:f0:2f:e7:e1:01:
88:18:54:5b:20:50:6f:75:c0:a5:4f:a9:23:b8:8f:90:5c:eb:
4f:58:64:32:3b:7f:45:57:b3:8f:74:35:69:05:22:ae:fa:82:
68:5d:b6:48:86:78:2e:46:c0:e1:5d:5f:a9:fa:e1:ab:dc:63:
c2:f9:63:13:d2:56:0b:df:8e:e6:70:08:a0:af:14:58:86:25:
92:6d:fb:8d:23:ac:40:da:11:7c:f2:95:77:04:9f:dc:9c:e4:
0e:9b:34:01:73:24:42:c9:0e:be:74:57:68:a6:0a:bb:41:5a:
45:15:3b:be:c1:0f:65:8a:3d:4c:6b:92:d7:17:76:01:0d:7f:
bb:4c:29:1e:0d:36:b0:80:44:72:75:e6:3e:5f:54:14:6c:d2:
20:33:a7:35:68:1b:c4:c4:6c:d0:1c:03:c8:f3:e3:15:b1:a7:
5d:f8:15:7e:f4:05:d4:e1:57:2f:42:93:b4:41:13:79:d1:f5:
42:39:60:e9:1f:74:38:4f:06:b5:47:30:3d:ac:bf:5f:54:99:
69:a8:76:84:a5:77:da:8d:0a:f5:c2:f4:cc:dc:3d:39:c8:87:
99:71:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:05:09 2025 by rpki-client