Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: amriST3fRqz6JHuiyHwFHm69r3u7vga0cl1NVtL4zBo=
Subject key identifier: 3C:32:6C:13:81:77:C4:D0:20:92:44:AD:85:F3:F5:BC:0B:86:DD:85
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 0198879FC59532375842A1D5FFE5F20FF624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 0291
Signing time: Fri 08 Aug 2025 03:00:51 +0000
Manifest this update: Fri 08 Aug 2025 03:00:51 +0000
Manifest next update: Sat 09 Aug 2025 03:00:51 +0000
Files and hashes: 1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: VjQbFuHkvhmNtiq/KBbj8MrWJMs+esrKbyzeTfKSVtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:c5:95:32:37:58:42:a1:d5:ff:e5:f2:0f:f6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Aug 8 03:00:51 2025 GMT
Not After : Aug 9 03:00:51 2025 GMT
Subject: CN=3c326c138177c4d0209244ad85f3f5bc0b86dd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:9b:4d:0c:72:b7:7a:f0:7e:bc:97:5d:cd:
08:3a:32:01:ba:47:c6:b7:20:70:70:39:00:fb:79:
97:c5:93:fa:6a:16:51:c3:d8:e5:15:3f:4f:fc:1c:
c3:45:18:43:72:66:a1:33:f7:b9:7c:01:e6:07:e0:
8f:61:9e:12:4e:f8:c9:a9:a1:e2:f1:ca:2d:c7:bd:
10:d7:91:cc:aa:ec:dd:94:44:2c:93:3f:28:4a:a3:
09:d3:11:e4:ca:75:73:8f:b4:b0:3b:a4:98:8e:b5:
81:0b:bd:ff:15:c3:c9:23:cb:7d:6e:ba:2d:fe:45:
37:91:76:e2:09:20:30:38:67:83:24:e4:5b:a4:9d:
73:52:64:cd:41:17:2c:4c:5e:aa:95:96:e5:28:b1:
4a:92:77:4d:16:c8:1e:0e:ee:1e:31:7e:fd:27:87:
86:5e:1a:bd:c9:52:1c:f0:6e:f5:fa:86:db:dc:7e:
0a:8c:0b:cb:c1:c3:60:64:79:c9:01:de:84:fe:12:
24:0b:31:31:de:ce:26:f9:08:be:b3:c6:0c:82:22:
5e:b6:e7:17:33:86:d9:86:a3:ed:45:b4:1c:43:e9:
26:26:d3:8e:7b:5b:5f:ee:17:36:7c:f7:3e:aa:51:
3d:2c:24:36:d0:e3:95:b5:4c:01:f5:fb:fe:38:81:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:6C:13:81:77:C4:D0:20:92:44:AD:85:F3:F5:BC:0B:86:DD:85
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f3:29:5f:65:80:c6:ae:86:04:08:0b:c7:49:41:a4:8a:45:
9f:49:ba:1b:29:67:61:a5:00:f0:88:f1:64:88:9b:7e:87:91:
a4:ad:2a:5a:a0:de:9e:e8:fe:b1:a2:53:6e:f6:25:cd:85:79:
24:a6:c3:1f:6b:de:3a:56:39:a5:ab:db:9f:dc:0c:70:14:ae:
54:56:d1:8f:a3:06:83:5a:c3:a3:6a:af:6a:36:ac:08:5a:40:
9e:e0:74:95:5c:b4:fc:22:12:e2:05:ad:d7:cd:7e:3a:44:0e:
44:b1:4a:e8:c4:1c:2d:00:4b:20:e5:bb:9d:bf:42:7d:42:05:
12:6b:a4:b0:3b:6c:98:0b:61:c8:34:2f:93:b4:15:23:bd:3a:
8a:9c:49:4f:80:14:44:cb:e0:40:7f:00:3d:76:2e:e5:60:4e:
c2:42:51:70:0d:2b:35:5d:97:b8:a5:66:da:18:02:7f:27:37:
ac:1c:b7:b5:3f:62:a0:43:fb:22:b9:d6:af:75:de:4e:ea:a3:
ed:cf:58:fd:22:a0:e7:2f:45:e7:23:5d:88:2e:77:ad:a0:92:
d6:48:83:b1:c9:2d:66:8c:a3:65:1f:07:37:c5:bb:98:53:0e:
64:13:83:c3:81:a5:e7:18:33:7c:be:74:be:e0:b4:01:ef:62:
9b:b7:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:23 2025 by rpki-client