Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
File: cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft (raw, json)
Hash identifier: b03mwEpf/HqiBifxsLGR8WuW8esWqSry4vDqH38RzvM=
Subject key identifier: 3D:C7:D5:96:E6:34:7D:ED:3A:A9:97:F8:E1:4B:92:EE:8A:EC:FB:EE
Authority key identifier: 73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
Certificate issuer: /CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Certificate serial: 019873E352FC39174161C707070515A66F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
Manifest number: 01EB
Signing time: Mon 04 Aug 2025 07:02:14 +0000
Manifest this update: Mon 04 Aug 2025 07:02:14 +0000
Manifest next update: Tue 05 Aug 2025 07:02:14 +0000
Files and hashes: 1: cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl (hash: MhG7PVmGKNS+LW7fywVzD72nXC57gaDULE/7T2GukYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:52:fc:39:17:41:61:c7:07:07:05:15:a6:6f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Validity
Not Before: Aug 4 07:02:14 2025 GMT
Not After : Aug 5 07:02:14 2025 GMT
Subject: CN=3dc7d596e6347ded3aa997f8e14b92ee8aecfbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:00:d7:7d:da:39:17:36:49:1a:20:c8:17:
1f:15:f8:f7:b3:08:5b:da:e8:a7:70:fe:b9:2e:06:
6b:99:e8:1a:df:81:91:13:ab:7e:0a:55:a9:a0:75:
69:00:de:de:03:7d:58:d6:55:f1:c0:09:d1:0e:2e:
8a:1a:c9:1c:80:b8:33:2f:70:aa:cb:4b:28:39:fc:
02:33:8c:1d:c1:58:f1:7f:5a:55:18:8b:3c:df:17:
6b:fe:7e:6e:c1:a6:ba:b6:4a:d3:b9:8e:46:e7:cc:
cc:9a:14:0f:d4:69:a0:bf:3e:3a:42:bf:31:3d:25:
60:af:b3:29:ca:7a:e3:2f:ff:01:71:3c:f6:e8:f0:
7b:f4:31:b7:c5:81:83:7e:b1:06:85:38:68:e1:ca:
69:49:f0:d8:1c:1b:7d:12:1e:86:c4:c6:f9:90:11:
f2:98:39:ab:fd:e3:87:8e:8c:d1:f8:9b:5e:96:fc:
6c:a7:ce:90:c2:7d:94:d2:91:09:20:e5:ce:81:aa:
ff:8b:b0:63:78:a3:8b:8e:56:bd:3b:0e:4a:7b:4f:
15:eb:b7:0b:c0:ab:5e:7f:87:a2:35:6c:01:c4:e3:
00:1d:d9:a5:c8:81:5a:79:58:ae:99:ea:07:32:c1:
b7:f5:78:f0:03:97:61:ec:e4:20:c4:c0:50:d7:ae:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:D5:96:E6:34:7D:ED:3A:A9:97:F8:E1:4B:92:EE:8A:EC:FB:EE
X509v3 Authority Key Identifier:
keyid:73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0b:c8:bb:63:a4:19:a8:c9:9d:ab:b5:c8:e3:67:cd:a1:41:
d2:93:8a:f1:b1:46:f2:11:92:dc:4e:c6:03:43:d2:50:6f:e0:
f3:d3:39:a6:75:0d:61:fb:06:dd:02:11:20:9b:4a:61:57:0e:
46:b1:8e:e0:14:91:d1:19:23:91:e5:78:12:d9:6a:09:33:6e:
6a:59:1d:af:53:aa:30:0c:3a:e3:48:f8:00:b9:de:e2:85:4d:
f4:5b:81:03:65:bf:22:48:00:17:f0:4d:17:50:c4:68:6d:cc:
b5:b8:1f:09:3e:9a:03:b5:6f:79:07:4e:1d:4c:ab:5d:07:1d:
a1:fb:e0:c9:70:b9:e9:4a:2d:e1:b5:ff:54:da:c8:c8:e0:72:
64:99:fe:6c:59:eb:5b:0f:a8:8c:89:a6:08:05:73:24:31:9e:
df:d0:7c:b5:5a:96:3f:7a:7e:23:40:11:2a:15:97:6f:ba:44:
84:03:ad:fd:ad:d6:dc:01:8e:e6:25:f3:0e:3d:cf:94:46:f6:
27:e8:15:28:38:6a:a9:c1:79:b4:d5:81:27:51:36:0a:61:85:
f8:f7:df:f1:d4:6f:dd:ab:6b:51:c0:b1:04:4b:37:54:f5:b3:
cb:37:b8:e6:3c:99:a2:58:4a:71:f9:95:2a:4e:20:00:a7:07:
d9:5d:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:11 2025 by rpki-client