Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: Z1aOB+yF8fDmxHOtrufC9r1i69Tt+U1K5OCDhvQsaiw=
Subject key identifier: F6:28:8B:B3:CF:06:AA:2C:79:45:7B:6F:8E:93:A5:83:99:CB:32:61
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019894B6A79135C594F4AE0A831FF4232046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 162D
Signing time: Sun 10 Aug 2025 16:00:54 +0000
Manifest this update: Sun 10 Aug 2025 16:00:54 +0000
Manifest next update: Mon 11 Aug 2025 16:00:54 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: mOQ4wPlOBGICnUV1TZwrayEyxuc7imH3tct9J9s1yx0=)
2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=)
3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:a7:91:35:c5:94:f4:ae:0a:83:1f:f4:23:20:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Aug 10 16:00:54 2025 GMT
Not After : Aug 11 16:00:54 2025 GMT
Subject: CN=f6288bb3cf06aa2c79457b6f8e93a58399cb3261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:a3:ef:c4:df:3e:1a:5c:f8:d3:2d:c8:2a:
48:cf:42:de:be:08:42:21:c9:f1:14:f0:ca:d9:56:
cf:b3:04:8a:55:33:b1:6d:5c:bd:fd:45:e1:01:51:
fb:8a:1c:01:73:24:35:e0:9c:ee:89:2d:13:6c:b3:
2f:af:d8:82:d2:6d:70:b0:a6:47:e1:66:b3:b8:67:
41:dc:12:e0:ec:2b:24:dd:30:69:a4:c2:b0:e4:58:
94:02:7a:22:81:5b:6d:aa:bf:4b:33:94:ef:3b:4b:
85:d4:57:01:68:a7:07:25:90:56:b8:76:6e:04:39:
2a:22:fd:44:16:94:a9:69:c2:9b:ea:4c:b3:24:d2:
59:14:fb:73:75:88:cd:9f:d4:1b:6f:2c:71:1e:09:
04:c4:dc:8f:b1:99:4e:8c:41:cb:de:2f:cd:c0:73:
83:de:df:d8:8c:57:96:7e:15:55:3e:05:f6:38:03:
7d:e6:23:d2:52:ee:ec:32:80:57:89:e4:a5:1e:8d:
ad:94:49:10:fa:e7:bd:13:f0:46:50:a8:a6:37:3d:
d9:1f:d0:ef:13:03:e6:f8:37:1a:9e:66:97:96:09:
20:0c:53:fd:ca:9e:e6:ac:84:a0:f8:0b:8f:c0:39:
9e:da:c1:f1:3f:f6:2a:11:b1:2d:e9:35:d5:e0:dd:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:8B:B3:CF:06:AA:2C:79:45:7B:6F:8E:93:A5:83:99:CB:32:61
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:60:f0:ab:01:03:56:61:26:21:8b:1c:ed:54:52:7f:0f:1d:
28:d6:8f:70:6d:60:55:70:ce:6c:de:2e:fc:03:9c:90:23:c0:
eb:38:1e:97:a2:31:84:fc:7b:ef:ea:e2:04:6e:48:46:eb:3a:
ea:6f:53:f3:7b:b1:6e:76:fb:e8:ce:3c:1b:a9:31:10:72:04:
aa:e0:84:3b:9d:0a:13:c1:52:f3:93:0f:b5:d0:ac:f7:d4:c6:
f9:23:7a:e5:57:28:b2:b7:98:b7:8d:e3:13:3f:59:e1:16:ea:
78:78:a7:d0:64:2a:64:5c:8d:07:1b:40:6b:a0:52:8b:5d:da:
a0:0c:4d:43:49:2d:49:38:15:fc:54:f6:53:a5:bb:a9:ce:4e:
e0:15:db:26:89:6e:60:f1:f8:73:73:94:61:74:b0:e4:15:5a:
d3:1d:97:71:61:40:eb:08:23:c0:f3:f2:bb:fc:9a:0b:37:44:
eb:e0:d1:b5:33:a2:e0:84:02:74:db:00:e6:a3:a8:26:ad:47:
f5:53:f0:07:fc:2e:51:81:d2:e8:f9:66:21:00:92:7f:da:7f:
5d:c3:4a:ab:7f:f7:e6:22:65:a3:d3:75:f3:8d:05:68:6d:bc:
90:c0:70:05:d2:68:15:a0:1d:b0:a2:4b:83:28:cc:78:f8:59:
c0:d8:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:24 2025 by rpki-client