Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: SCgS5DUfvN8HUJPMFir6Tp1ZZrXd8a7phaQKl/Xh11Y=
Subject key identifier: 9E:5E:EF:45:EF:D5:81:8D:7C:EF:A9:F5:05:F1:27:88:E8:0D:5F:1E
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019A4EF5C68D5DE56204D398F0A0B52CD830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:02:01 +0000
Manifest this update: Tue 04 Nov 2025 13:02:01 +0000
Manifest next update: Wed 05 Nov 2025 13:02:01 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: Z9yCHdJrNqHv776xDgvDzHsFUrW4ljuww0NuYwba5fE=)
2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=)
3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c6:8d:5d:e5:62:04:d3:98:f0:a0:b5:2c:d8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Nov 4 13:02:01 2025 GMT
Not After : Nov 5 13:02:01 2025 GMT
Subject: CN=9e5eef45efd5818d7cefa9f505f12788e80d5f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:2c:2b:cd:33:03:74:9a:a6:8e:fe:ab:f4:
fd:0e:0b:c5:42:48:7f:03:9c:b3:e0:2d:f5:3e:de:
52:ef:26:41:d1:ae:c1:91:9e:bc:55:86:d3:99:50:
f5:cd:91:d7:96:ad:c6:bb:93:3f:b1:a1:23:ed:ed:
0e:4c:24:28:16:df:56:2d:b4:dc:ee:51:15:4f:90:
07:42:21:1d:47:ed:b1:53:74:73:b2:c8:5a:e8:3b:
30:0b:b3:04:01:5e:1f:37:3b:61:40:4c:4b:16:e8:
8d:b5:38:20:1e:f5:e0:1e:79:09:15:95:20:80:e9:
51:58:3b:cd:ca:02:e7:03:da:c1:6c:b8:b5:e2:16:
74:d7:9b:8f:c1:56:c4:5f:d4:8b:ae:af:1c:6f:38:
ab:bb:df:24:5e:84:63:c6:b2:e1:34:6c:42:68:09:
a4:f7:e4:63:57:37:ee:27:f7:e1:4b:65:75:19:cc:
45:38:3b:6b:e8:1a:e2:a5:e4:7e:bc:ec:49:ef:62:
93:4c:25:1d:d7:c1:46:3e:33:d5:ef:69:a7:a4:54:
bc:de:da:27:1f:04:17:9d:7d:c1:99:c9:ba:ec:09:
18:86:d7:4c:88:3f:1d:b7:aa:26:9a:45:53:61:9b:
ea:bd:99:4f:dc:80:44:4f:16:42:46:2a:87:eb:18:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:EF:45:EF:D5:81:8D:7C:EF:A9:F5:05:F1:27:88:E8:0D:5F:1E
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bd:57:11:e2:59:6d:ba:f8:c7:2d:48:46:f9:84:6c:48:e1:
34:d9:55:5f:a2:ff:30:fb:4f:d0:94:9d:86:0d:72:74:ed:f0:
95:b7:e3:ba:9f:a9:38:8b:6e:6a:bc:2c:5a:9c:94:00:72:7b:
2d:fa:4f:bb:d6:90:41:bb:e0:f6:11:59:5b:51:0b:6e:61:36:
5b:86:7d:e3:40:e4:b8:69:bc:88:4a:0d:db:8c:31:3c:fa:5b:
9f:4e:72:0d:d7:aa:ec:f5:d0:28:bf:97:83:bd:31:d0:2e:b1:
7e:7f:51:ba:d2:15:d9:b8:2b:17:b0:ea:13:e9:6a:87:11:11:
5e:5d:15:d3:79:81:32:34:73:ee:fd:1e:3f:37:5e:e0:b0:44:
7d:70:59:b1:3a:4c:e0:c7:b0:7d:dd:4c:31:c6:ce:3e:cd:a4:
4f:a0:20:dd:70:10:21:69:35:0a:e3:28:ff:be:de:0f:10:99:
89:25:1e:7d:f4:8c:a6:58:a3:34:40:30:a5:47:68:32:60:fc:
a8:fd:5e:00:54:25:d3:50:63:9f:ff:61:28:0f:b9:ad:35:22:
31:45:ea:8a:01:31:55:8c:bb:d4:bc:ac:4f:50:23:34:3a:a0:
81:cc:aa:af:bd:5a:c7:24:e7:28:1b:5d:d5:ad:6c:0b:71:ac:
74:68:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:48 2025 by rpki-client