Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: vpNzzSanaLYPRo9KGSlosrDYD/MQ12W7pjhgfatt/Bg=
Subject key identifier: 5E:C0:09:26:F0:B0:52:D2:07:69:0E:24:5F:31:A4:4E:CF:1F:9B:7F
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 01976DAB609443912B4AEC15790A232B35E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 09:00:37 +0000
Manifest this update: Sat 14 Jun 2025 09:00:37 +0000
Manifest next update: Sun 15 Jun 2025 09:00:37 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: NQt2bS+5OUacfExeesFd1+j/6zKK6f7o/5BwRqungPo=)
2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:60:94:43:91:2b:4a:ec:15:79:0a:23:2b:35:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Jun 14 09:00:37 2025 GMT
Not After : Jun 15 09:00:37 2025 GMT
Subject: CN=5ec00926f0b052d207690e245f31a44ecf1f9b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:4e:76:82:1b:7f:47:74:03:0a:5c:46:45:
d5:87:b9:c9:7d:70:fc:f5:c8:55:f9:14:57:14:91:
7e:c2:57:38:b7:f4:a0:d9:f0:13:57:b4:d5:98:f2:
bb:48:19:73:79:e6:03:5e:f0:32:7a:96:d6:57:49:
0b:7d:61:6a:e7:8c:d8:be:87:5e:c1:6c:6d:bf:b0:
3d:95:f5:67:01:93:bd:f0:31:f9:9e:37:de:f1:25:
b0:74:c1:d5:ae:4d:e8:db:2c:e1:97:dc:fd:0c:ba:
99:50:3c:fc:66:70:6c:eb:72:23:49:fb:48:5b:59:
a7:87:6d:51:fb:24:34:01:8d:df:82:bf:8b:5c:b5:
9b:bc:d6:a8:1e:18:0a:f4:54:66:ca:d1:9f:b4:19:
8c:07:02:bd:0c:7a:a8:5e:60:bc:c2:fe:5f:bd:89:
65:82:bd:6a:5b:e6:58:69:90:5e:8f:9b:33:0d:7c:
3c:6a:0c:11:e4:6c:59:69:30:b7:33:f9:7a:2d:43:
b3:5a:04:8d:c7:1a:bf:0a:8c:c3:b9:5e:c5:0f:dc:
13:4a:e8:d2:93:0a:11:28:26:20:e3:cf:d2:a7:fa:
fd:16:38:51:da:51:5d:1c:ea:12:7c:b9:c5:bb:99:
5e:dd:b0:dd:2a:1e:9c:83:94:8b:8a:46:83:2d:37:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C0:09:26:F0:B0:52:D2:07:69:0E:24:5F:31:A4:4E:CF:1F:9B:7F
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f4:6c:84:43:d7:37:d6:94:62:06:dc:c4:5b:11:58:6c:25:
6b:56:db:b3:7f:ec:85:76:f6:4f:ed:69:09:2b:00:56:2f:50:
fd:c9:e4:12:4e:51:af:0d:c4:41:db:15:3a:20:7f:fd:23:85:
ab:6b:83:72:b5:bb:11:c4:6f:21:bd:5f:46:9d:b1:ad:4e:29:
81:97:35:86:df:66:3a:24:7d:0f:85:d9:5a:bc:7f:85:95:2e:
60:46:4e:52:7e:91:ac:65:93:50:f4:2b:5b:41:e6:d0:c7:3a:
d7:ec:3b:eb:fb:a6:52:05:9a:c1:3b:be:c3:82:69:55:4a:bc:
6d:71:73:a1:3f:a2:42:a7:d3:66:d0:08:fc:96:c0:e2:12:06:
20:5e:e9:26:78:5c:c2:a9:68:23:e4:35:12:13:e3:5a:1b:36:
6a:7c:c1:f8:f8:1b:f4:2b:60:e6:ff:b6:51:83:bb:1e:9b:19:
59:02:7a:ad:95:0a:f0:2c:28:97:2d:2e:76:bd:0f:36:08:10:
a5:94:20:86:fc:02:6a:7b:fe:13:c7:e1:eb:a5:69:d9:c4:ac:
88:aa:f8:5c:53:ec:f2:20:0f:01:d7:af:60:4d:b0:96:46:8e:
37:dc:f0:bb:e2:db:d7:d2:c6:a0:54:de:6e:1c:8a:c2:83:07:
fe:78:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:15 2025 by rpki-client