Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File: sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier: z+UT2wRuQPz/H8qyIK3FFK4S1jvTpl/3CokM2jmtKp4=
Subject key identifier: 3A:90:4A:DC:64:99:AD:18:8C:7F:D4:50:0B:FD:38:B7:6A:A7:72:2A
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer: /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial: 01967D20D1B8CE89B5A8897BA730FB273605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 16:00:24 +0000
Manifest this update: Mon 28 Apr 2025 16:00:24 +0000
Manifest next update: Tue 29 Apr 2025 16:00:24 +0000
Files and hashes: 1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: tFZ8ho306n/pvQcyrye0P0tRAwKkE+sY+jFYrPEZRyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:d1:b8:ce:89:b5:a8:89:7b:a7:30:fb:27:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Validity
Not Before: Apr 28 16:00:24 2025 GMT
Not After : Apr 29 16:00:24 2025 GMT
Subject: CN=3a904adc6499ad188c7fd4500bfd38b76aa7722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:14:e0:72:d3:75:b9:89:96:c4:36:44:a7:
4c:74:b1:7c:ab:86:d9:44:3a:79:ff:b7:ce:bc:f4:
e0:43:06:87:c0:96:90:0c:f5:14:45:6b:24:b1:86:
11:a9:44:55:15:c9:0d:12:d0:d8:36:f0:19:09:95:
57:7a:a6:c7:2f:00:38:81:c1:cc:ac:0b:b7:0d:44:
ba:d1:09:12:04:7e:bb:46:c4:73:75:8e:da:40:f2:
6f:b2:5b:97:e4:16:89:e5:7e:65:12:eb:c9:92:a5:
77:91:d0:cc:6e:aa:c5:b6:85:96:2c:b9:19:1d:ce:
a2:08:5e:d0:14:da:32:57:76:17:c3:db:ae:86:50:
54:cd:a0:67:d7:c0:b7:de:9f:69:c7:7a:48:c4:9b:
88:ba:c6:3e:a3:ee:35:9b:16:3a:83:68:56:d0:fd:
dc:46:d1:07:2c:75:03:25:30:09:db:b7:4e:bf:0a:
5f:c4:34:0d:ab:89:75:2f:73:d1:73:15:21:59:cd:
20:99:8f:78:0d:2b:bd:a1:f5:37:d2:7b:ac:cb:c7:
49:db:1e:3b:c6:9c:75:2e:74:97:53:31:f7:a6:ad:
90:99:c6:a0:5b:e8:66:40:60:6e:02:78:9e:a6:f4:
1f:02:19:37:00:18:39:2c:f2:1c:9a:6b:ae:56:ff:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:90:4A:DC:64:99:AD:18:8C:7F:D4:50:0B:FD:38:B7:6A:A7:72:2A
X509v3 Authority Key Identifier:
keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2f:d1:fe:65:44:54:be:52:77:34:04:46:ec:a2:44:15:d9:
7e:9c:3f:30:f7:15:0c:ba:05:c4:05:ba:35:16:aa:16:2f:28:
13:9a:cb:0d:c5:4d:aa:5b:f2:30:1a:19:a7:a5:6b:e1:60:b7:
9c:2e:71:ec:c7:52:93:64:a3:c4:0f:2d:0f:c4:12:dc:82:59:
51:34:f1:4e:b9:81:55:15:16:e5:8d:a9:c7:bd:4a:83:b9:f7:
3c:ba:18:61:10:f9:a7:22:4f:b7:fa:53:c6:f5:39:cd:75:dc:
69:c4:f8:9c:20:7e:f3:4b:c3:02:0b:13:d6:0f:57:ff:54:eb:
92:6f:e9:3d:f5:cc:e4:2e:9c:8e:4a:b1:81:e5:73:9f:ab:11:
ca:ef:78:e3:2f:c6:77:4c:68:68:06:fc:af:c9:f1:da:e9:31:
43:f4:64:c5:93:e0:99:30:27:64:c7:dd:f7:ad:94:10:60:ef:
47:80:0c:c0:f5:d6:d8:94:34:6c:e3:bd:77:52:f7:b4:c1:f1:
23:55:bb:7d:b4:7f:39:3d:6c:d6:7b:9a:35:3f:a3:36:00:cf:
c9:68:1b:13:89:ac:01:6e:ea:34:3d:e8:b9:dc:5b:9e:f6:09:
bc:b9:2e:50:31:b5:b4:37:07:12:8d:14:5c:0e:0b:c6:13:26:
70:26:79:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9ING4zom1qIl7pzD7JzYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGEyYjQ4NGUyNmYzMGQzNWZkODJhMzQ0MjdmZjIyMDFj
YjUwMDMwHhcNMjUwNDI4MTYwMDI0WhcNMjUwNDI5MTYwMDI0WjAzMTEwLwYDVQQD
EygzYTkwNGFkYzY0OTlhZDE4OGM3ZmQ0NTAwYmZkMzhiNzZhYTc3MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuYU4HLTdbmJlsQ2RKdMdLF8q4bZ
RDp5/7fOvPTgQwaHwJaQDPUURWsksYYRqURVFckNEtDYNvAZCZVXeqbHLwA4gcHM
rAu3DUS60QkSBH67RsRzdY7aQPJvsluX5BaJ5X5lEuvJkqV3kdDMbqrFtoWWLLkZ
Hc6iCF7QFNoyV3YXw9uuhlBUzaBn18C33p9px3pIxJuIusY+o+41mxY6g2hW0P3c
RtEHLHUDJTAJ27dOvwpfxDQNq4l1L3PRcxUhWc0gmY94DSu9ofU30nusy8dJ2x47
xpx1LnSXUzH3pq2QmcagW+hmQGBuAniepvQfAhk3ABg5LPIcmmuuVv98FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqQStxkma0YjH/UUAv9OLdqp3IqMB8GA1UdIwQY
MBaAFLMKK0hOJvMNNf2Co0Qn/yIBy1ADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQt
M2EwNDY3ZDVmMTA1LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQtM2EwNDY3ZDVmMTA1
LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkS/R/mVE
VL5SdzQERuyiRBXZfpw/MPcVDLoFxAW6NRaqFi8oE5rLDcVNqlvyMBoZp6Vr4WC3
nC5x7MdSk2SjxA8tD8QS3IJZUTTxTrmBVRUW5Y2px71Kg7n3PLoYYRD5pyJPt/pT
xvU5zXXcacT4nCB+80vDAgsT1g9X/1Trkm/pPfXM5C6cjkqxgeVzn6sRyu944y/G
d0xoaAb8r8nx2ukxQ/RkxZPgmTAnZMfd962UEGDvR4AMwPXW2JQ0bOO9d1L3tMHx
I1W7fbR/OT1s1nuaNT+jNgDPyWgbE4msAW7qND3oudxbnvYJvLkuUDG1tDcHEo0U
XA4LxhMmcCZ5sw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:37 2025 by rpki-client