Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File: cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier: M9PKpLZcw5S+a4Y9Jv1zMOqNidHpqru5xp9JJRghrMA=
Subject key identifier: FD:E6:88:07:6D:3A:2E:EA:09:95:ED:AF:48:5C:5A:84:4D:04:4F:90
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer: /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial: 019779AF5DE27049E794F63CDF05114B1843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number: 0230
Signing time: Mon 16 Jun 2025 17:00:25 +0000
Manifest this update: Mon 16 Jun 2025 17:00:25 +0000
Manifest next update: Tue 17 Jun 2025 17:00:25 +0000
Files and hashes: 1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: NaM9+xixb2trirHVSHmR22o1eHQYraW2A47pEeS/H3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:5d:e2:70:49:e7:94:f6:3c:df:05:11:4b:18:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Validity
Not Before: Jun 16 17:00:25 2025 GMT
Not After : Jun 17 17:00:25 2025 GMT
Subject: CN=fde688076d3a2eea0995edaf485c5a844d044f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:95:ff:70:0e:78:96:b5:be:96:9a:9d:14:
b8:2f:be:62:53:bc:64:89:c6:b9:9b:a1:18:4d:99:
65:c6:f2:78:58:f4:58:6b:73:32:60:72:42:6a:56:
78:e6:52:a6:1f:73:8c:c2:43:00:a1:55:68:e1:22:
98:82:7a:be:bf:8e:3e:2e:2c:26:6c:65:43:b3:aa:
e5:e1:80:49:e4:df:31:4f:8a:32:2c:80:ae:a6:bb:
18:e9:ca:2e:d1:94:96:aa:9a:87:42:aa:5b:72:1b:
6f:98:40:30:49:3f:e0:7f:df:8d:3c:e0:71:ca:11:
b1:0f:5c:17:86:03:7a:ec:8c:19:be:2a:8d:97:dd:
05:7e:07:a7:af:f3:6c:73:fc:72:85:33:26:4e:b2:
44:2c:e1:fc:4c:7c:95:41:4c:6a:6f:5b:1b:69:5e:
2d:1e:90:54:24:44:3a:eb:2e:f7:a1:2a:19:35:36:
87:ad:07:56:84:0e:c0:af:57:bc:dd:bd:fa:f6:42:
96:e8:93:3e:9c:42:3c:e8:d4:b1:ce:21:b0:22:3a:
bb:3c:ee:fd:54:c2:45:d5:7c:f6:ce:24:b3:9e:be:
06:da:ca:77:09:32:f3:c6:59:8f:e2:1e:26:e7:b7:
b0:80:bd:46:3d:70:50:a5:48:2d:28:15:2f:9a:59:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E6:88:07:6D:3A:2E:EA:09:95:ED:AF:48:5C:5A:84:4D:04:4F:90
X509v3 Authority Key Identifier:
keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:11:de:d9:d6:00:97:9b:a9:f9:39:4b:ca:22:2e:0d:bc:1d:
59:fe:69:cb:bb:9e:ca:57:36:7c:5f:86:81:91:c2:44:ef:43:
cd:19:b7:87:35:d5:b8:da:b8:54:f5:09:61:dd:43:a8:3a:ce:
4c:8b:e3:3d:c6:e7:d8:cc:3e:11:57:a3:a0:9a:32:1f:29:c7:
b2:a9:73:d3:ca:bf:1a:c7:0a:a0:ac:ad:82:ae:68:48:73:7a:
ac:10:ac:4d:39:72:4b:61:32:cc:d4:50:1b:63:af:c2:47:5b:
3c:52:f9:4b:7f:39:a6:7a:97:a5:e7:8e:06:7d:2e:6e:f5:76:
a7:b7:0c:a6:d6:6d:dd:9f:90:cf:6b:ee:c8:8a:ae:2f:50:3a:
c1:8c:fc:a5:47:60:b0:d2:93:1f:f6:3a:f8:1b:39:1b:d1:27:
52:66:fb:4c:69:bd:93:43:f5:85:39:81:20:4f:d8:b4:86:7d:
e5:fd:c8:6f:8d:02:6f:7b:d6:c8:b0:1a:c6:56:d9:3a:8d:49:
d9:ce:e8:37:4f:56:1d:ba:32:92:c3:4a:62:5b:05:5d:69:0d:
a0:b1:14:a8:6c:27:ff:53:3a:7c:71:cf:ee:3e:b5:31:6f:8d:
76:f4:73:a3:d5:34:76:d3:20:65:45:3a:a8:0f:f3:21:f4:a6:
c4:85:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:47:08 2025 by rpki-client