Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: OKE5TltsvrB1eWfIkseaYyUXWLNe2OuVrSPDZlnP1MY=
Subject key identifier: 4F:01:0D:8C:3D:6E:39:C4:37:A8:85:0E:78:73:8B:0A:4F:0B:41:EA
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 019A53AD221071C7330D4FC0933BBDBD3DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0DDF
Signing time: Wed 05 Nov 2025 11:00:46 +0000
Manifest this update: Wed 05 Nov 2025 11:00:46 +0000
Manifest next update: Thu 06 Nov 2025 11:00:46 +0000
Files and hashes: 1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: FdRmITKYzO8uxNwSP3jruN5rl+nKiIRs3aPO7CwfpII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:22:10:71:c7:33:0d:4f:c0:93:3b:bd:bd:3d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Nov 5 11:00:46 2025 GMT
Not After : Nov 6 11:00:46 2025 GMT
Subject: CN=4f010d8c3d6e39c437a8850e78738b0a4f0b41ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:33:68:db:f1:f1:eb:6f:3b:5c:d9:76:4f:
e9:87:75:d8:e1:64:95:0b:10:00:87:83:1b:07:6c:
ec:c8:3b:ce:d9:25:25:41:71:c4:84:f5:eb:8a:00:
6c:42:e7:b5:6e:ad:28:27:5c:42:3c:6e:98:78:9e:
87:4a:c8:99:17:37:7a:11:23:61:8e:be:c9:2c:d1:
16:99:5c:2e:3f:61:eb:cc:3d:b2:0b:86:50:b3:95:
6a:b3:ad:b6:68:7e:eb:ed:61:d2:2c:d3:c0:5a:b7:
a9:b0:c1:ce:b9:10:e1:b2:1b:96:86:cb:e3:98:b9:
5a:1a:67:76:a3:b9:e9:ed:fe:53:07:f4:c1:4e:46:
7b:ae:b6:40:63:b0:db:e2:1b:78:0e:c2:d5:41:71:
6a:d2:78:aa:d2:d7:61:50:1d:37:21:4c:84:f5:58:
1c:f0:f2:a6:d3:89:44:96:87:81:77:a4:75:16:a1:
a8:a9:13:a0:26:c1:0f:3a:a5:0b:5f:ae:1f:0b:68:
bf:01:de:50:ef:74:11:63:86:44:ea:0c:94:9f:38:
5b:b8:bb:14:b0:f0:ef:57:3c:6e:0e:f4:51:45:f7:
78:14:6a:08:57:0c:0d:df:93:6d:10:90:6f:c8:09:
af:d4:9c:da:e2:0d:83:53:a3:27:90:03:a1:27:47:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:0D:8C:3D:6E:39:C4:37:A8:85:0E:78:73:8B:0A:4F:0B:41:EA
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5f:0b:97:b5:d7:6c:82:6b:e1:1b:89:4c:3c:02:76:07:0a:
ed:57:b8:d0:a9:c2:99:c9:98:e6:05:9b:a5:6e:dc:da:9e:77:
6c:7e:0a:91:68:de:de:fd:44:cb:f1:a5:31:40:2a:c3:a5:bd:
d8:d2:c3:95:38:bf:17:b3:b3:25:5e:74:31:b4:8d:6c:82:a4:
d9:15:4e:04:2e:d9:68:a7:1f:15:dc:6a:8e:22:f9:5e:78:40:
5e:e0:af:62:ee:eb:f4:37:ac:ad:32:01:00:f9:dc:22:8c:49:
27:40:bd:eb:da:47:81:27:a0:c9:d4:e6:49:bc:e7:90:13:82:
9d:bf:2d:75:b9:93:2e:f7:b9:5d:dd:1d:e5:0c:7b:d9:17:b9:
35:6c:3a:60:b8:e6:1f:74:2f:63:f6:3d:60:d9:c4:17:e3:8a:
78:5d:d2:88:23:eb:1c:48:38:f6:04:8d:c3:0e:d1:72:6f:29:
e8:50:7a:8f:b0:c2:dc:69:95:e2:fa:2d:cd:c6:9c:89:22:d2:
a7:29:36:5d:25:14:96:28:80:60:31:5f:c6:90:a6:f0:09:59:
74:91:ed:9b:da:1f:be:32:bb:1e:53:9a:ba:d6:36:09:3f:ea:
e4:46:99:a6:eb:8c:a5:ab:c5:7e:3f:48:bb:1f:aa:bc:e1:b7:
30:cc:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:25 2025 by rpki-client