Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json)
Hash identifier: BhNtWpLjXDc4RHtEgYMnQV/16PMlz4HFNTXiPk195AY=
Subject key identifier: 8E:36:52:B8:6A:AE:C0:B1:E7:EF:8C:5F:36:02:35:46:DC:D8:F4:FF
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 01976F2BB5DBFF131E164163D62B421064A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 16:00:24 +0000
Manifest this update: Sat 14 Jun 2025 16:00:24 +0000
Manifest next update: Sun 15 Jun 2025 16:00:24 +0000
Files and hashes: 1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=)
2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=)
3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: pdKHt7yS6mNyjR0vfIhvXIwBIM79Fk1/4B0OQbmZgJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:b5:db:ff:13:1e:16:41:63:d6:2b:42:10:64:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Jun 14 16:00:24 2025 GMT
Not After : Jun 15 16:00:24 2025 GMT
Subject: CN=8e3652b86aaec0b1e7ef8c5f36023546dcd8f4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:50:03:12:4c:9a:29:93:03:4d:4c:b3:26:
f1:89:24:3b:a6:2f:99:66:75:61:7e:4c:cf:71:44:
ee:e9:55:0e:1d:ab:65:8c:7e:cb:ce:81:59:4c:77:
cd:0c:b8:28:80:d4:dc:c3:72:6f:9f:51:15:28:c0:
95:f7:2b:67:98:18:1e:ff:56:4b:94:5f:42:5c:7a:
b4:71:16:24:ad:73:9e:0f:fa:66:59:74:64:de:42:
50:43:78:af:da:86:45:26:67:70:e8:92:84:38:c2:
21:37:35:19:28:ae:80:1c:72:de:80:60:ee:a5:5b:
d4:db:73:26:f3:2f:0c:6e:be:0a:f8:7c:1e:35:66:
3a:0b:9a:f1:87:3c:26:7a:ac:09:59:cf:2d:95:5c:
85:ba:2c:49:d0:82:8c:b9:a6:f9:ff:a3:cd:ec:42:
42:ea:cf:07:78:03:2a:2a:f8:00:ef:aa:1b:b8:bc:
e3:ba:37:4d:bb:7d:d2:35:38:3b:65:1f:29:0b:4d:
76:ce:a1:29:bb:7c:a8:3b:22:f2:14:cc:c9:cb:fb:
b1:e9:04:27:01:b1:ad:1e:fa:af:fe:f1:79:21:2f:
14:92:d0:9d:72:59:f8:28:48:34:c7:38:5a:f4:b4:
a2:d2:c7:d1:dc:7f:bd:c3:f5:88:65:20:c2:d2:78:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:52:B8:6A:AE:C0:B1:E7:EF:8C:5F:36:02:35:46:DC:D8:F4:FF
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4b:50:a8:e2:59:72:03:af:25:9e:6b:50:4a:9a:10:d5:2e:
94:ac:84:01:1f:f7:93:e4:cc:bf:74:38:00:6f:d1:ef:14:49:
08:53:52:cf:b4:24:f8:65:72:5b:97:9a:8f:88:1e:6f:6f:12:
5e:77:a2:e9:7a:0b:c6:9a:35:99:3c:ac:cc:48:7e:59:26:98:
1f:ea:4a:da:af:79:05:1b:22:c7:7e:83:f6:a3:3b:90:ee:69:
2f:ff:c1:57:dd:8c:a1:7a:1e:dc:1f:aa:94:30:e2:85:25:5f:
18:11:84:60:30:e3:cd:58:4e:75:6b:81:05:7c:1b:bb:f6:35:
05:9d:d7:1a:74:4e:75:ea:be:01:95:9c:91:ba:d8:58:06:0b:
9f:c6:41:f2:a8:6a:c8:17:8f:cc:1a:68:33:26:49:e0:25:be:
5e:ba:67:fb:8a:c1:9a:5c:88:09:25:e5:6c:44:9f:9f:d2:2f:
7b:da:f1:72:5c:32:11:5f:01:d4:83:c6:c4:d1:0c:97:89:10:
0d:19:0d:d1:1a:cd:52:3b:4a:33:1b:4e:71:0e:a0:3f:ce:6a:
41:2a:99:a9:d3:f1:6b:42:e5:8e:51:5b:48:5e:76:af:2e:21:
ed:57:80:1f:63:72:da:ed:15:4b:c0:ef:e3:82:b0:37:fc:12:
94:16:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:55 2025 by rpki-client