Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: RH4IvcKXWsVTHHBbZNy6Z1jBdJcqT3vvk+wsu+dM9D0=
Subject key identifier: A9:F0:F6:9E:FE:AD:38:38:22:61:17:80:43:3B:92:A3:37:29:54:1C
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 019A4D739FA7BFB34FBA0E08A8DA1B9F8658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:14 +0000
Manifest this update: Tue 04 Nov 2025 06:00:14 +0000
Manifest next update: Wed 05 Nov 2025 06:00:14 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: hPvFPE8RdsraX7KM4ykayOZSSupSmApfvSahPzE0u9s=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9f:a7:bf:b3:4f:ba:0e:08:a8:da:1b:9f:86:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Nov 4 06:00:14 2025 GMT
Not After : Nov 5 06:00:14 2025 GMT
Subject: CN=a9f0f69efead383822611780433b92a33729541c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:92:0f:eb:9e:77:91:d0:1f:f2:f6:71:13:
b2:aa:ba:3f:db:9b:35:ec:83:60:d4:68:b1:68:08:
80:15:99:ff:e8:60:62:32:91:92:d7:8c:df:06:4a:
38:f7:78:db:1b:ed:3f:f0:8c:d5:e8:44:f9:8d:22:
a0:bb:4f:64:d9:98:4c:be:ff:d0:e6:01:e5:24:7f:
61:2d:53:ae:26:f9:c9:3f:14:8d:e1:55:26:44:8d:
b7:7f:ec:0e:cd:3d:26:67:41:1f:8f:67:ce:65:f0:
19:f9:a2:8a:f7:f6:46:eb:84:52:d0:a4:24:dd:ba:
60:6f:f1:ea:21:4d:2a:67:97:67:a6:5e:01:07:73:
a8:35:26:68:b3:59:05:53:81:41:09:ad:44:bf:ff:
47:2a:33:08:c2:af:5c:4a:18:52:d0:89:38:5e:3a:
eb:57:57:1e:03:b7:b2:e8:1b:1c:bc:0a:2e:c5:5d:
1e:7e:bd:c4:d8:41:ea:c9:8f:49:29:86:98:36:ce:
19:ed:da:78:92:e0:58:ae:f5:b8:69:29:4e:67:78:
83:9d:de:a3:65:e2:8d:ca:e6:d2:c1:66:5a:20:54:
b8:13:34:1c:5c:c8:9f:31:78:af:33:1a:b1:c0:0f:
96:0c:e9:a2:c1:11:6f:5f:91:9e:70:fb:f6:95:e7:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:F6:9E:FE:AD:38:38:22:61:17:80:43:3B:92:A3:37:29:54:1C
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:06:75:9f:09:b3:53:c3:cc:0b:13:f0:66:62:80:91:f3:
c1:ee:41:dc:9a:e3:cf:dd:a8:48:78:f5:df:bb:e2:7f:8c:3d:
33:69:92:43:bd:e9:b7:06:33:b0:55:00:b1:9f:c1:7f:f7:76:
7e:14:d3:13:09:d4:fe:8e:b1:10:3a:81:8e:d5:df:35:a9:59:
15:59:ea:7e:4f:1e:5c:78:e5:c4:9c:cf:68:d4:c8:cd:d2:3a:
2e:5b:2c:a5:85:80:41:5f:8f:5d:63:79:2f:61:a1:46:4e:a8:
fa:8f:20:9a:de:4e:ae:b8:f8:13:53:62:c1:a1:20:25:47:37:
65:46:46:46:66:00:d6:2d:b8:8c:bb:94:f8:b6:81:68:f5:7d:
cb:30:39:ff:95:e1:73:4a:2b:9c:ce:1e:48:a9:2c:9d:a2:d7:
a2:1e:b8:17:0b:8b:08:e2:e7:f8:21:67:ee:81:26:5b:2c:5c:
19:80:fd:96:91:34:74:9c:a7:e8:b4:f2:2b:df:35:fb:a4:c9:
c0:62:b2:6d:98:7d:9b:af:9c:83:a6:df:4f:d1:9f:ff:2a:f2:
a0:ee:4e:f3:1c:d5:fb:5c:b0:c8:6f:c3:31:49:05:9f:20:15:
7f:ba:27:4a:13:7f:8c:53:64:f4:00:a5:de:40:b3:95:2f:f8:
a0:fc:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:40 2025 by rpki-client