Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: efwaM5uNZd+0yNwaECLabehO87kfbpTebDYrUsfnZi8=
Subject key identifier: 73:AE:E1:F7:C6:30:92:96:2A:4E:C7:14:7B:20:2B:8E:65:9B:D3:6D
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 01967378F4A6B301B09F323A960D11EA85DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0CA8
Signing time: Sat 26 Apr 2025 19:00:28 +0000
Manifest this update: Sat 26 Apr 2025 19:00:28 +0000
Manifest next update: Sun 27 Apr 2025 19:00:28 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: Q5mOACn1zZUNUzaFu0kYvTfIuRXivDWoopwv0KGOmX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:f4:a6:b3:01:b0:9f:32:3a:96:0d:11:ea:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Apr 26 19:00:28 2025 GMT
Not After : Apr 27 19:00:28 2025 GMT
Subject: CN=73aee1f7c63092962a4ec7147b202b8e659bd36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:f3:4f:48:a5:3b:52:94:4e:cd:74:b9:2e:
ce:43:39:3d:6d:e5:72:f2:a0:31:3b:47:3c:87:0a:
e0:fa:f3:80:96:4f:c5:d2:49:61:0b:62:c1:a7:52:
cf:0a:67:22:86:07:3c:ca:fe:4e:18:39:d5:86:18:
a4:cb:c0:0a:4a:44:b6:3e:4f:c5:fc:09:63:d1:97:
4c:81:7d:0a:e0:6c:8f:0e:65:dd:2f:51:8d:3f:e7:
83:12:ca:ab:07:c4:06:7d:83:a5:e1:54:df:7e:0c:
10:b3:9e:6a:a6:6d:da:97:4d:fd:bf:23:6f:83:50:
fe:82:71:8d:96:eb:5b:92:45:2e:b0:b6:fe:cf:31:
cd:c4:77:06:6e:79:76:56:f8:dc:44:9a:f1:cf:ec:
04:f0:ff:7d:6d:9e:c3:71:f1:7b:19:4a:f8:5b:50:
33:bc:6f:2d:8e:a9:cc:1d:ad:14:68:6b:bc:37:b2:
c6:dc:91:03:2d:05:81:97:97:c6:6f:30:cd:21:59:
53:15:06:c9:51:0f:61:bc:57:a3:8c:9d:3d:78:6a:
82:79:71:5a:a7:b6:4f:29:23:62:c9:4a:e7:e2:fe:
2b:03:27:76:51:da:7f:2e:af:0f:9e:f8:b8:ad:a8:
2e:e2:a3:d1:f1:02:42:4c:25:88:46:40:1e:80:24:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:E1:F7:C6:30:92:96:2A:4E:C7:14:7B:20:2B:8E:65:9B:D3:6D
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:97:67:ef:ab:23:01:52:c1:07:5b:f9:c6:93:91:06:fb:
9d:60:d7:e4:b3:54:ee:b7:6c:3c:6d:d8:98:50:ce:96:25:8e:
cd:37:44:f9:c3:80:25:e6:3c:e5:3c:cf:aa:00:83:a0:db:be:
1a:41:01:7b:ce:6c:be:85:5b:05:a8:04:9f:ab:00:b5:8d:5b:
c3:59:5e:ea:83:c2:90:17:f2:3d:f8:f7:18:f1:d3:18:c1:af:
c3:7d:64:c5:aa:ff:51:2a:59:08:32:b6:80:02:80:65:7d:a6:
d3:8b:dc:87:33:6a:2b:5f:19:76:cb:9c:74:9a:57:41:9b:c0:
2f:48:20:c0:5e:1c:99:e7:b0:aa:1c:41:48:c3:ce:e7:57:70:
27:2a:5c:01:6c:eb:ca:04:09:50:d6:ae:37:21:7b:0d:f6:70:
cf:22:3b:68:ac:d4:ff:9a:19:35:a0:56:b8:c2:64:40:da:36:
2d:b9:58:53:ba:ca:f7:c3:e7:bc:7c:96:51:68:60:46:17:1b:
cb:55:be:f0:05:4e:86:62:84:f6:1d:af:50:14:34:e0:7d:6d:
58:b1:b9:f9:e1:9d:31:9b:50:e7:e8:ea:0e:02:b4:2a:1f:2b:
56:2b:b9:60:0c:90:93:e8:41:39:88:25:83:15:18:67:51:98:
95:4d:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:40 2025 by rpki-client