Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: AxcEzQB+crRI7PfRBAazyx2NmOYXCRAQuSZIxcb8dOE=
Subject key identifier: F8:3E:93:B1:96:F5:36:33:84:8E:66:0F:CA:1C:B1:DD:4F:85:1C:34
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019680FD9D31F86FBE9789D8C4C9FB002B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 1143
Signing time: Tue 29 Apr 2025 10:00:26 +0000
Manifest this update: Tue 29 Apr 2025 10:00:26 +0000
Manifest next update: Wed 30 Apr 2025 10:00:26 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: urWrfib84kEk/X+M2HzYanhNgz0nE8ozbTMFa9Y+7tA=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:9d:31:f8:6f:be:97:89:d8:c4:c9:fb:00:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Apr 29 10:00:26 2025 GMT
Not After : Apr 30 10:00:26 2025 GMT
Subject: CN=f83e93b196f53633848e660fca1cb1dd4f851c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:06:ee:4a:6d:a5:ce:7e:4f:1a:50:d1:a6:
cb:c9:f3:d6:fb:41:83:1f:0c:b1:0b:00:2b:e8:10:
c6:3a:09:78:44:6b:96:d6:b6:08:27:69:e2:c9:32:
59:03:da:83:4d:c3:59:7b:10:54:a7:c8:2a:68:e3:
80:dc:c8:2b:6e:ce:58:5f:0c:cb:db:08:1e:04:e7:
af:0d:75:9d:89:be:9a:ef:e5:f0:db:05:59:1a:87:
5a:10:ff:62:e8:8d:6f:e8:f3:1e:e9:e9:e6:7e:b2:
1a:51:57:79:03:29:c5:7b:23:5e:1c:82:35:3c:dd:
b1:66:fb:50:01:2d:e5:52:fd:df:1d:23:fe:86:64:
8c:fb:a6:39:e3:1c:9e:18:38:73:0b:1f:86:24:e7:
60:9c:08:03:3f:b2:e1:54:8f:03:13:79:03:c1:cc:
36:dc:d9:6a:3b:c3:60:37:1a:3f:81:b7:1a:7b:8e:
c3:04:6d:6c:68:09:c2:25:7d:57:67:50:cc:ef:6c:
08:73:1c:9b:b3:1f:00:b5:8c:c6:80:c2:82:d4:34:
b5:d7:22:c9:d0:f3:8b:dc:0f:3a:6e:2e:92:80:b6:
1e:57:e9:77:53:23:20:52:c3:07:5c:af:e4:fb:a8:
ac:5d:aa:8e:21:cb:09:25:c2:9e:43:4f:0a:ac:73:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:93:B1:96:F5:36:33:84:8E:66:0F:CA:1C:B1:DD:4F:85:1C:34
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b3:23:17:93:39:41:70:d5:54:5a:49:31:cb:b4:ca:ce:b0:
42:9e:50:33:e6:ae:ee:ef:7f:d4:05:cc:3b:b8:e8:48:61:1f:
0a:df:4b:85:bb:4f:5c:77:2b:86:52:00:22:3c:ee:2f:de:34:
a6:b5:09:28:c0:70:c5:37:cc:7e:98:76:d7:c3:1c:f9:82:6e:
f6:20:bc:89:d9:27:49:19:3c:a2:6d:c3:6d:ce:30:df:0b:47:
a0:75:a0:c3:ac:03:7f:ad:e7:8b:89:99:5f:a0:2e:fc:f6:92:
10:ff:be:45:60:e8:1a:ca:7e:8f:5b:28:91:aa:75:65:1a:0b:
db:6d:58:97:f6:9f:40:de:fb:4b:84:66:23:82:dd:3d:91:fd:
82:94:b5:a4:58:aa:a8:c0:b7:80:8c:1c:93:fe:c1:27:d5:01:
47:51:6f:51:eb:d6:00:c9:e2:21:ab:66:40:a6:05:3b:a8:bd:
f0:21:3c:cb:7d:7c:1c:a2:79:cb:c2:c1:70:8e:d3:40:7b:e2:
3c:7a:3f:05:41:29:dd:d4:42:a9:00:bb:c0:9f:5c:7d:69:31:
b1:81:80:bc:4a:3d:c4:22:2b:0e:0a:2c:cb:a0:16:2e:59:87:
76:1e:86:23:ff:59:7f:16:db:3f:20:fd:0b:f0:76:a8:1b:cd:
06:92:fd:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaA/Z0x+G++l4nYxMn7ACtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMDFiMDg1MWI3Zjg5ZWE0YmIxMzJhN2Y1Mzk1YjlkMmFj
YTFjMDIwHhcNMjUwNDI5MTAwMDI2WhcNMjUwNDMwMTAwMDI2WjAzMTEwLwYDVQQD
EyhmODNlOTNiMTk2ZjUzNjMzODQ4ZTY2MGZjYTFjYjFkZDRmODUxYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0AG7kptpc5+TxpQ0abLyfPW+0GD
HwyxCwAr6BDGOgl4RGuW1rYIJ2niyTJZA9qDTcNZexBUp8gqaOOA3Mgrbs5YXwzL
2wgeBOevDXWdib6a7+Xw2wVZGodaEP9i6I1v6PMe6enmfrIaUVd5AynFeyNeHII1
PN2xZvtQAS3lUv3fHSP+hmSM+6Y54xyeGDhzCx+GJOdgnAgDP7LhVI8DE3kDwcw2
3NlqO8NgNxo/gbcae47DBG1saAnCJX1XZ1DM72wIcxybsx8AtYzGgMKC1DS11yLJ
0POL3A86bi6SgLYeV+l3UyMgUsMHXK/k+6isXaqOIcsJJcKeQ08KrHOXsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg+k7GW9TYzhI5mD8ocsd1PhRw0MB8GA1UdIwQY
MBaAFEsBsIUbf4nqS7Eyp/U5W50qyhwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgt
YmQ1MDQzYzBkMWZiLzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgtYmQ1MDQzYzBkMWZi
LzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrMjF5M5
QXDVVFpJMcu0ys6wQp5QM+au7u9/1AXMO7joSGEfCt9LhbtPXHcrhlIAIjzuL940
prUJKMBwxTfMfph218Mc+YJu9iC8idknSRk8om3Dbc4w3wtHoHWgw6wDf63ni4mZ
X6Au/PaSEP++RWDoGsp+j1sokap1ZRoL221Yl/afQN77S4RmI4LdPZH9gpS1pFiq
qMC3gIwck/7BJ9UBR1FvUevWAMniIatmQKYFO6i98CE8y318HKJ5y8LBcI7TQHvi
PHo/BUEp3dRCqQC7wJ9cfWkxsYGAvEo9xCIrDgosy6AWLlmHdh6GI/9ZfxbbPyD9
C/B2qBvNBpL9JA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:03:50 2025 by rpki-client