Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: Zf0C6AbahPDgJFNgghSLnGfi9v/55EXT9AVM5H8OU3g=
Subject key identifier: 9F:78:E2:72:84:47:89:44:2B:CB:F7:06:23:9E:FB:5D:70:13:FB:43
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 0198733D178043EBD787699F92089118E1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0DB1
Signing time: Mon 04 Aug 2025 04:00:40 +0000
Manifest this update: Mon 04 Aug 2025 04:00:40 +0000
Manifest next update: Tue 05 Aug 2025 04:00:40 +0000
Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: Lbz9krtDd3eC0LQpQGx2nBfiJ7Hs4QgFfEOBCVxF4q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:17:80:43:eb:d7:87:69:9f:92:08:91:18:e1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Aug 4 04:00:40 2025 GMT
Not After : Aug 5 04:00:40 2025 GMT
Subject: CN=9f78e272844789442bcbf706239efb5d7013fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:2a:2b:14:7c:2f:d0:8d:a7:a8:7a:27:99:
6b:6f:67:14:ed:c5:41:b4:b8:f6:f0:3f:14:8b:a8:
a1:c3:ab:d8:87:62:f3:d9:aa:a2:83:92:90:a5:7d:
40:1a:da:ea:e9:cb:53:85:f3:8d:09:f6:47:2c:b0:
d0:41:c5:9b:c6:11:52:7d:62:a3:3c:79:7a:48:87:
61:9d:ca:92:a5:00:8b:59:ed:f7:17:cc:82:da:4b:
fc:3b:5b:e7:63:ab:64:a6:59:5e:50:59:bd:ba:81:
f7:de:47:56:34:c8:1c:65:ca:ff:2d:98:fc:3c:66:
ba:73:56:80:33:b7:40:ef:13:ae:b4:47:28:0c:95:
8a:2a:b2:e7:2f:25:f2:6a:89:88:3f:38:36:98:13:
1e:1b:b0:a6:ca:19:89:78:63:e0:6e:6e:cf:ab:8c:
71:0b:a9:53:17:82:d0:3f:73:ba:7b:a9:bf:91:cd:
09:87:44:4a:2d:d0:da:ca:b5:cf:c9:d9:17:6a:7f:
47:9d:2b:2f:9a:55:da:bc:47:08:54:bc:f8:4c:a7:
b0:2f:fa:d3:d7:89:cf:e0:b9:af:ea:d5:d8:75:2b:
ed:8d:33:7a:ea:77:ae:26:32:8e:4a:e4:c6:d0:e4:
23:b1:8f:c5:dc:ab:d1:f3:d2:3c:68:41:a7:ad:0f:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:E2:72:84:47:89:44:2B:CB:F7:06:23:9E:FB:5D:70:13:FB:43
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:00:0e:04:0e:ae:e3:44:ec:5f:de:e5:f3:df:84:fb:8d:94:
cd:71:cd:f3:77:32:c6:41:92:25:ad:f1:c0:b7:a6:17:1c:f0:
5c:14:68:4e:5f:b9:6f:c1:45:df:23:d6:58:db:de:ff:fc:8d:
b5:df:e9:35:e5:a0:39:f5:63:0b:22:c4:d2:99:8e:09:7f:20:
95:3d:1f:24:d0:d1:c5:ab:6c:aa:ed:21:75:74:b1:15:f6:f3:
71:2d:68:d1:ee:2c:56:cf:63:b8:0b:29:2d:dc:5f:4a:d6:ed:
e2:f0:b3:cf:22:f4:fc:d4:86:28:8e:5d:87:44:ab:8b:76:48:
86:f8:b4:b6:3d:7b:e7:18:bf:cd:ab:39:e1:19:1a:32:57:dc:
ba:ac:08:22:70:19:7e:4d:f9:1c:1d:ee:f8:34:74:3d:3a:f4:
71:be:da:18:34:33:c5:5d:1d:d3:10:a9:30:8a:c5:2a:ae:91:
71:59:a4:2f:20:41:5f:e6:01:fd:43:e3:74:a0:72:25:9f:d4:
a5:52:28:d3:fb:91:ec:7f:bc:cc:6c:1a:59:52:a6:98:c5:98:
63:be:fa:c8:87:a6:92:26:2a:78:d2:e7:f6:6d:d6:c4:1c:a3:
a0:1a:a7:67:05:4d:5f:1c:5a:bf:c6:04:ac:aa:d5:3f:d8:9d:
a4:e4:6a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:43 2025 by rpki-client