Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File: cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier: nNtf/Sn5TorvEi2WFO/dD6uW/c/A7pwj8U1aYJyacXw=
Subject key identifier: 1C:D2:A9:46:51:61:82:CE:8B:11:60:B7:5F:00:9D:E5:5F:B8:04:38
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer: /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial: 019A4DE18534A081AD8781EC480B891F12C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number: 03A7
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: 0dhSOMwX/M7gxWo972qO/6WOHrbIkPKUZWmd6txamwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:85:34:a0:81:ad:87:81:ec:48:0b:89:1f:12:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=1cd2a946516182ce8b1160b75f009de55fb80438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:af:2d:21:17:15:a8:f0:56:45:3a:cf:ed:
53:51:57:63:12:ac:d2:85:29:4a:57:14:0b:f9:49:
8e:3f:fb:a4:be:fb:db:67:33:72:e4:78:73:02:29:
2f:5d:de:5c:5e:4a:52:e4:08:23:50:6c:d6:71:4a:
8e:51:d8:ec:7c:39:dc:f7:97:17:73:96:f9:66:63:
8f:b0:64:1c:0c:ad:8b:26:94:37:73:15:9d:24:46:
f8:fa:d4:42:5e:74:8b:38:83:c9:5a:8f:d8:d9:d8:
d7:be:3d:9a:47:bb:38:73:02:67:01:24:92:6c:4b:
ff:62:16:f9:83:38:59:3d:83:e8:06:db:27:2b:34:
25:d6:6c:82:4f:bf:28:d5:b4:76:70:3f:66:7e:f9:
77:8b:54:36:56:0a:7d:d2:5a:3e:d2:a0:53:b3:ec:
00:89:e3:e1:3d:09:78:9b:24:ce:a7:b4:ef:58:9d:
02:87:f2:af:68:2a:37:5a:60:a2:09:ab:c1:1e:33:
d4:32:06:2f:20:60:98:4b:27:86:0e:2b:06:ef:46:
8c:66:4e:42:b3:66:a4:84:cc:08:bd:0e:1b:25:6f:
37:f7:94:7d:f4:67:cd:e5:28:15:96:ec:0b:7b:53:
21:07:9c:e2:92:c7:40:c3:2f:bd:a0:99:c7:1e:7d:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:A9:46:51:61:82:CE:8B:11:60:B7:5F:00:9D:E5:5F:B8:04:38
X509v3 Authority Key Identifier:
keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1b:de:50:08:8a:72:ff:bb:cd:46:2b:44:be:5f:ed:c6:0c:
34:14:f1:8f:86:04:86:e4:97:05:97:79:87:5a:d1:e1:24:0c:
8f:b3:2f:f4:91:af:c6:a3:c8:c5:a2:6f:4c:95:f7:e0:b0:94:
80:29:e4:27:b8:b1:4e:ad:e1:70:da:65:77:c5:08:9d:da:ff:
bc:1f:d5:f5:30:f3:4f:0a:24:08:17:2a:b4:df:3f:92:cc:35:
fd:99:e5:f5:7a:7d:ee:0b:48:9c:e9:f2:85:95:70:8c:e8:98:
f2:4c:bc:05:50:11:bf:59:14:7b:8c:43:2d:60:ac:c4:ce:c3:
02:71:b8:46:1a:45:0e:28:1d:bd:c2:75:1a:44:15:93:03:08:
37:ee:ef:65:48:ba:9d:d6:a0:67:db:4b:fd:d9:ec:3d:62:70:
28:10:64:1a:44:f3:1f:a0:60:bd:76:c4:2d:56:65:47:8c:8d:
44:31:20:5b:e2:47:5a:42:02:27:60:a8:78:ac:89:96:d1:1d:
0f:51:ae:f8:c8:1f:db:7c:bd:36:43:ac:c2:19:8c:c5:67:b1:
7e:8f:ad:c7:35:18:97:a7:1f:2f:4e:f9:6d:b1:ad:1a:0b:f5:
b6:b1:6a:22:59:c5:06:d6:a9:50:13:b3:9b:5c:a7:44:62:57:
31:3a:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:37 2025 by rpki-client