Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: OzuBowKJXaGblyrwZ9fQ0qhXyOMAMx2VVYdXmqBHVv0=
Subject key identifier: EE:7A:9E:DE:83:3A:80:45:5A:03:AE:41:21:F8:7F:D2:F3:27:20:08
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 019A503E562E2174216AC79E6523E7CC8160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0EA8
Signing time: Tue 04 Nov 2025 19:00:53 +0000
Manifest this update: Tue 04 Nov 2025 19:00:53 +0000
Manifest next update: Wed 05 Nov 2025 19:00:53 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: Q1xqDuN41yQ4L0S8jhE9KCaOfnx5puBmcLd+wcjOc/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:56:2e:21:74:21:6a:c7:9e:65:23:e7:cc:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Nov 4 19:00:53 2025 GMT
Not After : Nov 5 19:00:53 2025 GMT
Subject: CN=ee7a9ede833a80455a03ae4121f87fd2f3272008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:98:55:6b:c8:34:c6:8b:06:0b:af:6f:0c:
45:bc:95:0d:e0:a5:3b:df:9b:aa:8a:a9:6b:42:af:
ee:04:30:d0:a3:d5:b1:2f:4f:75:cf:be:f6:b3:95:
86:3f:45:f7:be:fc:fc:98:d3:b3:28:fc:d7:43:f8:
3a:1f:0b:39:a9:63:96:b5:17:16:df:54:b7:e6:bb:
bc:cd:b6:9b:a6:ce:12:d2:6c:31:79:ab:56:cd:a2:
dd:cd:d6:69:ef:c1:1e:44:8e:63:ef:60:6e:bf:8e:
2b:16:5f:e8:b7:a7:51:63:0b:75:a5:65:eb:cd:d6:
c5:13:14:e7:bd:26:0c:4c:f1:c7:c1:6f:54:ff:95:
c6:51:ca:7f:5c:82:04:e9:89:87:3a:79:ac:35:cd:
87:f7:bd:74:93:68:f2:6f:e0:b8:f6:68:24:27:cd:
d1:6a:99:96:43:c6:83:b5:f6:a6:52:93:c2:20:28:
0f:2b:42:83:92:86:6c:e2:00:46:11:bb:dd:6f:9a:
9f:69:90:ec:49:99:48:18:6b:81:e6:8f:e5:5c:07:
6f:8f:c5:a9:e1:db:08:7a:7e:a1:ca:f1:0b:f8:7e:
71:4d:58:d2:64:58:ff:32:b8:a0:51:7f:d8:45:6d:
24:ea:e8:f4:9e:e4:06:bd:de:53:48:61:7e:a4:39:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:9E:DE:83:3A:80:45:5A:03:AE:41:21:F8:7F:D2:F3:27:20:08
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7a:fc:8d:c6:a1:d1:05:5c:7d:1e:2c:07:37:38:2c:bd:67:
af:cd:f8:9b:f4:17:07:17:21:dd:cd:d1:b8:b1:9b:84:fc:46:
41:c4:e7:dd:d8:55:21:62:2e:bc:b8:d4:6f:bc:4d:8e:84:ad:
fc:2b:ce:3a:b3:57:41:00:4c:17:88:94:77:4a:08:b8:6b:e1:
95:7f:b5:94:76:2a:11:55:e6:31:1f:66:cd:7f:33:ec:d7:6c:
4b:25:e6:67:71:bc:fc:8f:c9:45:0f:13:fa:aa:fb:50:f8:2b:
ad:92:ca:6c:37:12:e7:68:73:f2:0f:20:ca:4d:15:1c:47:20:
fd:36:49:36:f0:b2:43:bd:ea:4c:b7:fc:16:63:06:cd:d0:67:
6f:9a:6b:98:d2:f1:47:48:73:f7:1f:86:84:c9:4b:53:b5:e5:
54:70:86:1e:87:05:79:9f:f1:7c:fe:fe:09:60:6a:7a:74:92:
02:d7:60:7b:1e:98:73:16:83:88:9d:b9:a6:f4:1d:04:3f:d5:
c6:a0:ad:37:60:00:79:4b:10:46:8f:75:86:1f:1c:30:f0:2e:
2a:70:f8:7c:b3:21:7e:e5:4e:b8:51:2c:08:ee:2c:87:d4:35:
69:1a:13:46:3b:4e:0d:38:fa:c0:a2:f6:07:06:ce:2f:98:d4:
24:42:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:21 2025 by rpki-client