
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: 3TKaY2QMZcVg3VajZSuMj4611rXJiEr6nwrstTd/tOo=
Subject key identifier: 07:56:91:0A:4E:7F:35:F7:2F:40:9D:20:8F:E3:8A:7F:57:5F:E8:06
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 01978CFF0059D3370E817CDBCD542083DE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0C6F
Signing time: Fri 20 Jun 2025 11:00:11 +0000
Manifest this update: Fri 20 Jun 2025 11:00:11 +0000
Manifest next update: Sat 21 Jun 2025 11:00:11 +0000
Files and hashes: 1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: 0AFjaJF3hBsLkOcwMltxNcXuI2+k9TCH0FlG/qDU364=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:ff:00:59:d3:37:0e:81:7c:db:cd:54:20:83:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Jun 20 11:00:11 2025 GMT
Not After : Jun 21 11:00:11 2025 GMT
Subject: CN=0756910a4e7f35f72f409d208fe38a7f575fe806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:b6:bd:dd:97:46:88:dc:bc:78:e6:17:6a:
b0:92:f5:6f:0e:7c:90:16:d2:f3:a9:d7:70:23:bc:
f1:ec:ac:71:59:c4:26:f0:51:07:65:00:1b:f0:8b:
26:9d:78:42:c4:67:d0:be:d9:e2:d1:f6:28:3e:9b:
3f:c4:4b:9a:91:24:8e:1a:4a:84:ee:73:18:ef:b8:
93:4d:ba:bb:4b:62:01:31:3d:8d:04:44:06:26:8d:
43:ed:59:0e:4a:38:6e:b2:90:f5:43:de:84:3d:05:
56:20:4f:31:10:5e:9b:78:1b:a1:6f:00:4d:5c:bd:
66:67:0a:4d:2f:d8:63:7a:13:a2:f9:63:ae:9e:34:
91:03:bb:0b:52:0d:af:b7:bb:bc:32:ea:d4:09:b7:
85:9a:87:15:f6:f5:b5:46:71:b6:f2:05:4c:42:da:
14:61:ed:45:c2:37:ad:f0:7d:76:d2:e1:9a:6e:3f:
39:6c:1d:d1:c5:d4:4e:bd:37:31:dd:f2:cb:a0:02:
dc:73:cd:ca:f1:84:63:62:09:e4:61:e7:91:da:f6:
d0:d6:96:84:8e:5b:de:36:9b:ba:8e:99:86:be:96:
51:2b:c6:e3:fe:ca:ee:24:50:45:b5:54:06:55:13:
cd:d9:b4:4e:08:ca:2e:42:2e:d8:b2:3b:fe:00:82:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:91:0A:4E:7F:35:F7:2F:40:9D:20:8F:E3:8A:7F:57:5F:E8:06
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:08:fb:b3:ad:62:60:9a:50:41:e2:11:17:85:19:86:23:cb:
88:00:bf:7b:f3:c3:42:43:ef:c9:48:03:72:df:90:31:f0:1f:
0d:a9:24:6e:19:bc:a5:94:17:27:ae:fc:2d:ab:ae:9f:32:d8:
e9:da:63:d1:32:31:b8:9f:04:dc:6e:72:bb:83:83:84:ae:51:
77:ea:09:23:82:40:56:53:8e:a1:8a:c4:c5:bf:16:62:5d:bf:
75:fc:cd:84:bd:06:16:8f:9e:8e:dc:0e:e3:16:9a:bf:52:32:
60:e4:48:38:09:ad:3c:91:6b:27:8c:7d:77:77:5f:56:8c:1c:
ee:ac:41:80:47:f5:71:bf:be:d1:e9:04:a9:e9:35:18:a0:9e:
ce:9f:e4:2b:54:21:66:44:ca:0f:75:11:40:e1:1e:9b:f2:8e:
e0:26:11:86:d0:6b:75:f6:aa:5b:a0:eb:ea:02:8d:79:12:9f:
5a:b1:23:93:fd:62:12:2a:cf:32:3a:88:5b:d3:e4:0f:2b:42:
2a:73:d0:64:ed:1e:df:a1:5a:0c:fb:3a:1f:4f:d9:e3:63:77:
92:2b:17:22:8d:d4:1e:9e:91:31:44:10:50:6c:2e:ed:28:34:
24:00:da:3f:c7:03:b7:01:56:b1:ab:dc:38:ce:4b:91:fa:20:
a9:24:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:45:07 2025 by rpki-client