Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: ua+2/0WBr02VWYSLbcxCkInfu1iSTEYB42zSaccYXaA=
Subject key identifier: 7E:4D:2B:5C:BD:DB:47:92:58:96:3D:BA:C2:97:70:30:FA:4B:7C:85
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 01988A6A0A0000A919B1144AF2D316D839A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 1251
Signing time: Fri 08 Aug 2025 16:01:01 +0000
Manifest this update: Fri 08 Aug 2025 16:01:01 +0000
Manifest next update: Sat 09 Aug 2025 16:01:01 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: 0W/vei6aRitAMHZxM6AkDyiSYhJzhgMEbIvVAp8sN3o=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:0a:00:00:a9:19:b1:14:4a:f2:d3:16:d8:39:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Aug 8 16:01:01 2025 GMT
Not After : Aug 9 16:01:01 2025 GMT
Subject: CN=7e4d2b5cbddb479258963dbac2977030fa4b7c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:65:03:bd:22:7b:48:12:00:14:d9:5d:68:
15:22:35:4c:d1:52:4a:85:e0:b6:36:54:7f:28:3d:
48:41:06:40:63:d0:bb:46:a1:e5:bb:7d:0d:fd:07:
ab:36:8f:34:c4:ec:fd:c7:5b:fa:20:3d:1b:0e:25:
33:f0:2d:93:01:32:cf:95:22:c1:3f:c3:ce:44:cf:
0b:c8:1e:8c:2c:5e:20:43:4b:59:52:b8:0b:0d:4f:
c4:94:49:89:41:1a:ac:45:d2:ba:d5:bf:3f:c2:21:
d3:76:2b:e5:0c:b0:98:8b:aa:d5:9c:18:74:2f:8f:
0e:b4:5d:7c:85:76:6d:fa:47:a3:ae:32:f6:e6:4d:
8a:83:b7:e6:6b:58:63:e7:72:54:15:92:b7:7b:fb:
47:19:b5:f4:12:e6:11:f8:87:ea:82:91:00:43:81:
f4:a0:4b:7f:f7:77:e1:88:39:61:47:96:0f:64:db:
d1:de:1d:8b:18:3c:22:cd:04:ec:dd:b2:35:19:16:
0d:68:21:fa:f3:b0:6f:7a:e8:43:e0:99:bd:9e:5b:
ad:20:1f:f5:04:ac:94:6b:44:96:2b:bf:7c:51:fb:
ff:2b:2c:cf:1d:9a:02:a2:1b:df:d8:82:b7:7f:05:
18:bd:68:b1:5e:78:10:f5:5d:90:f4:d3:81:c7:51:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4D:2B:5C:BD:DB:47:92:58:96:3D:BA:C2:97:70:30:FA:4B:7C:85
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b4:87:ee:5c:c8:5c:43:0d:f9:5d:ea:dc:d9:c8:b1:09:08:
e5:25:db:7d:9d:bd:40:60:11:24:b7:fc:86:c0:5d:c8:c8:b1:
20:81:9c:c3:0b:5f:33:85:39:cc:89:ad:3a:b5:81:4e:62:08:
66:1e:72:26:36:a4:f3:dc:6f:5f:21:db:e6:14:09:bd:e5:2f:
19:db:80:be:ed:65:db:20:7b:fc:78:d9:82:2f:4b:86:94:eb:
71:44:bd:fa:c7:17:88:bb:e3:a0:c6:ae:1a:34:65:2c:d9:89:
29:eb:0d:c7:52:e1:08:6f:ad:20:14:3a:21:00:f7:88:ab:48:
9d:7f:38:ca:85:cc:72:46:d5:c0:a4:bc:cb:e7:56:8d:34:07:
af:2d:bf:2a:ec:56:ba:14:b0:b5:25:a6:b1:bf:0e:18:6b:8b:
ce:ba:13:91:71:94:f5:21:2d:af:60:70:93:20:2f:84:6b:c8:
b4:9e:36:bd:f4:ca:cb:7e:8c:8e:29:83:d0:8e:50:93:2b:30:
77:71:dd:6d:ed:e3:7e:7a:03:b8:c1:2a:6a:aa:53:af:34:a6:
38:c4:13:c7:ef:71:a0:6d:dc:e0:77:7d:ca:69:f1:1a:29:4f:
f9:a4:43:20:fb:85:80:48:ea:b4:ee:01:39:43:bd:d3:88:d0:
95:d7:bf:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKagoAAKkZsRRK8tMW2DmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMDFiMDg1MWI3Zjg5ZWE0YmIxMzJhN2Y1Mzk1YjlkMmFj
YTFjMDIwHhcNMjUwODA4MTYwMTAxWhcNMjUwODA5MTYwMTAxWjAzMTEwLwYDVQQD
Eyg3ZTRkMmI1Y2JkZGI0NzkyNTg5NjNkYmFjMjk3NzAzMGZhNGI3Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRBlA70ie0gSABTZXWgVIjVM0VJK
heC2NlR/KD1IQQZAY9C7RqHlu30N/QerNo80xOz9x1v6ID0bDiUz8C2TATLPlSLB
P8PORM8LyB6MLF4gQ0tZUrgLDU/ElEmJQRqsRdK61b8/wiHTdivlDLCYi6rVnBh0
L48OtF18hXZt+kejrjL25k2Kg7fma1hj53JUFZK3e/tHGbX0EuYR+IfqgpEAQ4H0
oEt/93fhiDlhR5YPZNvR3h2LGDwizQTs3bI1GRYNaCH687BveuhD4Jm9nlutIB/1
BKyUa0SWK798Ufv/KyzPHZoCohvf2IK3fwUYvWixXngQ9V2Q9NOBx1HDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5NK1y920eSWJY9usKXcDD6S3yFMB8GA1UdIwQY
MBaAFEsBsIUbf4nqS7Eyp/U5W50qyhwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgt
YmQ1MDQzYzBkMWZiLzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgtYmQ1MDQzYzBkMWZi
LzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7SH7lzI
XEMN+V3q3NnIsQkI5SXbfZ29QGARJLf8hsBdyMixIIGcwwtfM4U5zImtOrWBTmII
Zh5yJjak89xvXyHb5hQJveUvGduAvu1l2yB7/HjZgi9LhpTrcUS9+scXiLvjoMau
GjRlLNmJKesNx1LhCG+tIBQ6IQD3iKtInX84yoXMckbVwKS8y+dWjTQHry2/KuxW
uhSwtSWmsb8OGGuLzroTkXGU9SEtr2BwkyAvhGvItJ42vfTKy36MjimD0I5Qkysw
d3Hdbe3jfnoDuMEqaqpTrzSmOMQTx+9xoG3c4Hd9ymnxGilP+aRDIPuFgEjqtO4B
OUO904jQlde/bQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:51 2025 by rpki-client