Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json)
Hash identifier: aIFyVibKQZKHtjA8GJMv0gzgGG2l2xw0v7MZvnxWzXU=
Subject key identifier: E5:E4:52:36:2B:F1:1C:9C:27:D1:B4:59:F4:60:3E:91:19:02:74:C9
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 019A54C064E558143783170D006F4E43F057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 16:01:26 +0000
Manifest this update: Wed 05 Nov 2025 16:01:26 +0000
Manifest next update: Thu 06 Nov 2025 16:01:26 +0000
Files and hashes: 1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=)
2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=)
3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: axgF7WzlY0ELDyREGZJuXLeDxXSL7qeLbZtg3d4sg04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:64:e5:58:14:37:83:17:0d:00:6f:4e:43:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Nov 5 16:01:26 2025 GMT
Not After : Nov 6 16:01:26 2025 GMT
Subject: CN=e5e452362bf11c9c27d1b459f4603e91190274c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:03:f4:82:a7:34:2a:bc:f1:b8:0f:7a:8b:
09:77:48:db:34:6c:d4:aa:8f:82:49:34:22:79:8d:
55:fc:c2:0a:95:59:98:4e:b2:f8:da:c2:fb:1b:37:
22:be:fd:75:82:da:84:bb:ea:67:d7:e7:5e:d7:49:
c3:4c:c3:fd:dc:12:8f:41:ed:82:de:d9:cd:80:ac:
3a:1b:67:93:6c:46:c3:5c:9a:0c:54:6f:1a:0e:3f:
7c:4a:c4:f8:45:cd:85:95:72:33:d3:c0:bc:01:34:
1f:06:74:57:9c:02:ee:6e:14:98:53:15:83:9e:e2:
07:a4:d7:b8:b3:f3:a6:6b:43:7e:8e:98:3c:90:aa:
cc:16:88:28:24:6a:9e:8c:0a:ee:45:fc:24:09:aa:
f1:00:19:06:77:42:05:5f:d5:92:32:a5:3a:b9:97:
ba:94:1b:92:4e:f7:92:6d:11:b4:0a:27:c3:81:d9:
99:bc:62:73:ad:eb:24:c2:f9:3c:9a:04:06:1b:1e:
3b:e7:d5:c2:e4:f2:7a:b9:6f:e7:8b:f2:41:11:b0:
4a:73:b6:48:0e:b4:d1:4f:1a:14:c0:f5:c6:bb:8c:
97:05:30:6a:08:bb:79:df:a9:25:92:32:b1:76:80:
4d:c4:76:0d:92:8e:d4:00:42:78:a6:59:26:2b:89:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:52:36:2B:F1:1C:9C:27:D1:B4:59:F4:60:3E:91:19:02:74:C9
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0f:0d:06:4c:14:98:8d:40:a3:23:e6:34:02:36:f4:e6:b9:
26:76:bf:24:98:37:30:9d:67:c2:b7:12:74:dc:73:ff:71:05:
7e:fc:b8:ac:3f:9a:e3:a4:77:8c:cb:7e:94:f6:f9:39:2f:53:
b0:39:9d:5c:06:7a:8b:b3:0c:cc:d8:52:43:14:e8:1e:73:c6:
1e:fe:ce:ef:7d:86:90:bb:f0:34:3f:0c:ca:83:d2:b9:2e:66:
22:80:8e:73:7c:da:6f:08:d4:d4:14:e9:47:d0:a5:a3:1a:a0:
b7:53:80:dd:42:38:c3:87:c4:51:5d:52:1d:3e:b1:bf:2e:fc:
31:b8:e0:62:cf:a8:8e:33:2f:0d:8e:4b:06:3f:d5:51:c5:44:
9b:a7:05:70:0d:f1:10:0f:94:98:67:01:38:1e:6e:94:f9:58:
4d:53:56:14:2d:3c:4e:71:5b:bf:7f:60:16:f2:70:7c:90:c7:
e0:df:f3:dc:1c:7f:18:86:0c:ca:d9:f3:73:dc:03:86:8a:e5:
27:51:49:af:a9:b3:d6:0f:c4:ce:3b:bf:73:fb:51:65:68:dd:
a1:80:3a:54:23:e5:ae:19:ac:a6:55:6d:2c:04:25:c0:f4:00:
9e:e7:2e:43:bb:c6:19:26:73:82:b5:f9:ab:ff:95:c5:8a:c1:
11:f3:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:30:56 2025 by rpki-client