Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: Feq+N8mn5JBG/rzrG/RwMs61My/mzfSYZKgGWL4/zuU=
Subject key identifier: B5:21:D1:11:9A:21:B3:DC:97:59:CE:E3:2F:42:F9:2F:2A:9E:3D:34
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 01989636C113BF4A8DCDCA140AC38BB7E366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 11B1
Signing time: Sun 10 Aug 2025 23:00:27 +0000
Manifest this update: Sun 10 Aug 2025 23:00:27 +0000
Manifest next update: Mon 11 Aug 2025 23:00:27 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: 1N9mrQs2WPRkyS6FrwRGjtUBf9ifFKOEmVzwPk8HNyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:36:c1:13:bf:4a:8d:cd:ca:14:0a:c3:8b:b7:e3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Aug 10 23:00:27 2025 GMT
Not After : Aug 11 23:00:27 2025 GMT
Subject: CN=b521d1119a21b3dc9759cee32f42f92f2a9e3d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:6f:f2:b9:5a:7b:f0:58:4e:a6:52:08:a8:
77:c9:b5:51:35:f1:cd:34:28:53:df:49:9c:7e:71:
c9:de:f6:af:c1:8d:6f:7e:2c:28:7d:35:52:a3:74:
ae:ca:c3:15:12:f3:8f:b7:85:a4:26:2c:c9:f1:f9:
0f:37:ef:be:7f:e3:7d:57:6c:ee:60:28:e5:41:67:
6c:7a:60:ae:06:2d:55:9d:0a:dc:82:4b:62:f6:4d:
01:7a:11:e2:9c:16:98:2b:eb:e9:4e:37:6c:dc:0d:
b6:6e:85:f4:b4:e4:d9:95:6f:17:32:82:93:40:d2:
04:b2:84:cd:7b:a1:81:38:50:ff:be:7d:fa:20:5f:
d7:ea:4a:ea:27:11:7b:b9:c5:f7:cd:0e:1a:99:0b:
b1:5c:b8:7a:2d:4e:1a:d0:f0:1c:58:2e:b4:ef:f7:
51:05:69:c8:d8:99:c5:13:df:1e:91:2c:c0:79:9a:
c5:74:e9:95:6c:58:eb:ea:0a:31:6b:bd:b6:19:a0:
9a:54:02:ca:a8:52:85:56:e8:9b:7b:a2:75:04:0b:
5c:83:bc:03:f2:59:e1:1b:e0:02:de:1c:8b:9a:dd:
03:41:8f:2e:e3:58:5f:82:e9:c3:49:5f:90:31:09:
fd:84:0b:8a:24:ff:9f:75:7c:1c:57:98:b8:50:fa:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:D1:11:9A:21:B3:DC:97:59:CE:E3:2F:42:F9:2F:2A:9E:3D:34
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:b4:e5:28:db:da:29:d6:e5:dd:8c:f8:fc:db:89:6f:b0:
48:3b:2b:d4:de:f2:e3:04:7d:8d:19:55:76:9c:48:fe:ce:bc:
c4:17:fb:04:e1:e3:e1:71:3d:b8:96:65:f0:cf:3c:86:72:34:
0f:55:0e:dd:8e:45:6c:5a:e8:5f:40:b0:ca:59:cd:02:89:5b:
c9:79:83:1a:11:f4:b6:9f:d0:ec:7d:2b:02:41:43:fe:2c:c2:
44:5c:8d:2c:3f:2a:4e:e2:d6:ba:3c:a2:b4:84:3b:a4:94:10:
6c:6e:b0:5d:68:6c:62:8f:6e:e9:1f:0b:b9:28:2b:2b:ee:e0:
3f:b9:ca:ca:42:39:58:d8:6f:51:3c:98:47:ce:6f:f2:11:36:
4c:1a:75:32:99:8a:2c:4f:f1:d3:75:ab:b7:26:bd:9a:01:0d:
28:5b:2c:87:01:2d:c6:70:0c:61:43:c1:c7:8a:10:69:84:c6:
4f:cd:e0:75:47:36:fd:bc:a7:3e:9a:6b:ea:c8:76:55:8f:6a:
cd:38:21:7e:7f:e5:1d:5f:50:0a:5f:e8:5c:84:4c:05:4d:6a:
59:02:a3:cb:3f:29:1a:57:d7:d4:8e:59:ca:f4:08:aa:11:33:
a7:7f:4e:6d:1e:1a:1b:5f:8f:76:72:cb:86:7d:a6:ef:94:5e:
15:d6:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:20 2025 by rpki-client