Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: CiL66+SejS+h45xTmlU///r2EAkgHygz0/Rlfyoc5Ow=
Subject key identifier: 6A:2F:88:66:0B:F7:3E:7F:59:0A:14:2F:08:37:1A:A5:84:0E:31:CD
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019A503E53F579EAEC8BEFDE644FFC7D2C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 133C
Signing time: Tue 04 Nov 2025 19:00:53 +0000
Manifest this update: Tue 04 Nov 2025 19:00:53 +0000
Manifest next update: Wed 05 Nov 2025 19:00:53 +0000
Files and hashes: 1: J7kB6ievmPFEqZTmicl8rRo6FjY.roa (hash: W4zMo+qbtPWsiXhZkqF+6a7KynDxQ8ZCboXDljVbc+4=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: uMpSygsJMZDSCarGswOYmgm7WspjOo8ru7TgLNd4XtQ=)
3: X51JyRQsbiO-dRzpiM0BYac4vr0.roa (hash: F7UTgwSfHWU8Fp+YRwGuybMagFBxqwkgosOGLinxRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:53:f5:79:ea:ec:8b:ef:de:64:4f:fc:7d:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Nov 4 19:00:53 2025 GMT
Not After : Nov 5 19:00:53 2025 GMT
Subject: CN=6a2f88660bf73e7f590a142f08371aa5840e31cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:91:c1:be:aa:4c:30:db:6f:d3:80:a5:66:
35:c7:fc:2e:7a:66:8c:eb:fc:70:10:7b:58:fe:0a:
eb:53:25:d5:86:f3:22:fb:b3:df:48:89:6e:f2:3c:
cd:4e:f2:96:5d:46:8b:f7:17:2d:79:cc:2a:5e:91:
9d:96:eb:07:ec:0f:75:f6:dc:37:c2:ac:f0:4b:ed:
d5:3a:31:f1:03:33:84:05:f9:23:b2:09:28:20:88:
ed:0d:26:2e:5a:55:20:05:dd:e6:b0:1b:96:0d:3f:
34:f8:5a:9d:6e:01:10:29:70:00:b9:fc:6a:af:38:
04:11:e4:b6:28:87:4e:3e:01:48:09:d4:05:98:13:
0f:97:e2:76:84:cb:76:1e:db:93:e1:6e:b0:ca:40:
65:ff:01:60:b7:a1:c8:d5:c7:0c:51:24:80:d8:9a:
70:dc:d1:53:d6:33:20:b9:54:1a:48:07:6b:23:9e:
b5:6f:8a:96:bc:cc:21:25:01:0c:3f:ce:1e:68:5e:
e4:24:3f:22:19:ec:05:84:73:8c:7c:ae:82:1b:b7:
01:29:d4:34:d1:93:ce:bd:82:f6:36:53:9c:6d:da:
b1:c5:ff:51:6e:f8:e6:cd:4d:c6:3e:65:97:7a:9a:
ed:1a:0e:a6:8d:08:a1:d1:c3:e7:83:de:59:aa:32:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:88:66:0B:F7:3E:7F:59:0A:14:2F:08:37:1A:A5:84:0E:31:CD
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:01:71:d9:6c:b3:73:e6:19:60:2f:a8:88:a4:8f:88:54:
31:ab:be:1f:d1:e0:f1:c7:b4:bc:e3:8d:fa:ea:58:2f:75:d4:
46:44:11:7c:e4:eb:f3:3a:f0:d1:c8:95:b7:8a:a2:63:d7:22:
9c:df:ce:56:65:cf:4c:1f:8f:7a:dc:1b:78:e5:ba:97:bb:c7:
86:71:4d:b3:da:a8:ce:20:65:5c:c7:de:e3:3b:eb:cc:d9:44:
e6:f5:c9:6f:cb:8e:4c:e2:48:84:2e:41:5d:f9:3a:2d:0e:27:
2d:8d:f4:e9:bd:0f:32:5d:b0:89:d3:73:ff:3f:19:58:54:89:
fe:66:63:0e:7a:9a:0c:98:47:34:a2:29:a8:f4:61:5f:15:bf:
80:57:d6:c3:88:65:9c:74:22:50:de:c7:71:8b:69:c3:22:90:
1a:77:36:2e:b5:46:d3:da:87:df:9e:43:0a:75:ac:7e:89:14:
7b:3e:c5:af:57:65:65:8f:84:61:a6:f8:ac:28:a8:3a:2e:38:
40:0a:15:75:cf:45:1e:72:98:42:ec:54:f5:be:9d:51:bb:48:
43:93:9d:0b:0f:7e:d2:ea:45:e2:af:84:16:b6:ef:54:5f:8e:
24:6a:20:54:76:23:30:d2:96:ec:9b:f5:b6:a4:a1:66:ea:16:
aa:03:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:54 2025 by rpki-client