Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: QfzhY8tMQSDpeBjiTcBgERjpo4VLl+MZuWMbc3ekiOU=
Subject key identifier: 9B:3D:22:40:93:E9:81:4A:28:50:50:8D:97:AB:7A:7D:FA:97:EB:23
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 01976C98BDF8601905468E8747E8EC40B764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0D29
Signing time: Sat 14 Jun 2025 04:00:38 +0000
Manifest this update: Sat 14 Jun 2025 04:00:38 +0000
Manifest next update: Sun 15 Jun 2025 04:00:38 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: OeJ19iiSsvbYkHdJiHGtMudKDrRzI+wzsgM0SOM+XlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:bd:f8:60:19:05:46:8e:87:47:e8:ec:40:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Jun 14 04:00:38 2025 GMT
Not After : Jun 15 04:00:38 2025 GMT
Subject: CN=9b3d224093e9814a2850508d97ab7a7dfa97eb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:66:ef:fe:57:1b:f9:77:8f:33:cb:1c:ca:
d8:b3:fd:5e:8c:e2:9a:da:38:af:9b:c7:78:e8:88:
c3:e8:43:4f:21:1d:7a:d5:b9:24:b1:77:c6:42:fc:
f9:8b:8e:e0:a1:75:10:18:5f:5e:26:e2:86:57:61:
1f:66:30:a2:ae:a6:87:3e:af:c5:c7:02:c0:3e:c9:
14:41:68:0a:eb:c4:56:27:05:53:27:d8:9a:a5:73:
e6:94:fc:c9:b5:c4:17:ed:9e:65:00:9a:cc:10:71:
27:85:69:91:4c:6d:91:6e:85:3e:4e:84:9b:a8:23:
f5:1f:27:f8:f8:86:33:15:e4:63:ac:1a:01:ec:2c:
e2:a4:a5:a2:5f:c8:35:14:21:39:0d:19:d4:80:d0:
47:5c:ce:3a:87:72:5d:60:3c:dc:1a:fb:5a:f2:fe:
48:86:24:43:0b:88:22:00:7c:ae:d6:9a:2e:c1:25:
2f:c4:c9:c2:8b:fb:8e:49:dc:8c:4f:f4:08:43:bb:
f2:86:e7:fb:85:02:96:33:8d:42:a6:f2:c3:f4:3d:
d0:17:7b:88:60:c4:1d:69:22:b8:3f:2e:dc:8a:17:
bf:bf:22:4d:c6:e7:52:a8:5b:65:45:ca:0c:38:50:
c4:ea:a8:23:5e:4b:05:77:15:f2:86:f9:5c:ac:c5:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3D:22:40:93:E9:81:4A:28:50:50:8D:97:AB:7A:7D:FA:97:EB:23
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:10:a0:ad:67:7e:cd:35:82:e5:2f:c0:2c:6b:e5:54:ff:9f:
8e:0f:2c:bb:4a:f1:81:a7:31:c1:37:bd:6f:0a:e1:f6:0c:10:
32:23:d1:4c:88:36:ba:a4:32:fb:af:b5:85:17:00:5a:db:c8:
1a:63:5a:58:44:48:0f:29:f3:73:84:b2:ca:b9:74:2c:00:a5:
18:b3:58:35:ef:44:e2:e5:d6:ac:22:8f:c5:85:da:69:ba:66:
e0:6d:f5:15:7e:15:f2:b5:2c:ea:0d:98:35:85:85:59:f5:86:
2e:15:45:25:17:6b:ea:06:10:0e:47:8c:f6:6d:6a:0f:a8:72:
3d:9b:1f:90:7e:9d:ba:8e:92:9d:e9:60:a5:92:0b:57:f8:47:
fc:da:b9:1f:ad:08:dc:37:94:92:38:06:16:c5:41:03:05:0b:
c5:64:f4:bc:8f:d6:6e:09:ce:38:ec:3c:9b:18:1b:cc:2c:ad:
dc:fa:b4:ab:41:4a:40:da:b3:07:c0:67:8d:f9:d5:aa:0f:d8:
13:04:28:37:d7:aa:d1:e4:49:d1:3a:c3:21:29:e3:d1:80:a3:
51:fa:7b:4c:e0:0c:f8:02:3f:4a:91:dc:da:6e:a3:c7:71:57:
34:19:c2:ea:55:fb:74:e8:34:94:80:fa:c3:45:8d:80:b7:db:
bb:b4:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:10 2025 by rpki-client