Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File: cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier: ACH5rpVosFHmvffVQJ3UdHZ2M1RtmRbv77+TgFVnYuw=
Subject key identifier: F1:21:A4:7F:B5:5B:C1:90:46:35:8F:1E:B2:90:A3:7A:D8:26:9F:89
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer: /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial: 01989D4C3D5F69191B0D0AEBD08E95C6247C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number: 02C7
Signing time: Tue 12 Aug 2025 08:01:15 +0000
Manifest this update: Tue 12 Aug 2025 08:01:15 +0000
Manifest next update: Wed 13 Aug 2025 08:01:15 +0000
Files and hashes: 1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: m9Rrykbpx80wl8q+2qG7/er94iOWv/Bs1muGWCnjWGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:4c:3d:5f:69:19:1b:0d:0a:eb:d0:8e:95:c6:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Validity
Not Before: Aug 12 08:01:15 2025 GMT
Not After : Aug 13 08:01:15 2025 GMT
Subject: CN=f121a47fb55bc19046358f1eb290a37ad8269f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:07:91:de:03:78:81:4d:7b:f0:1d:9b:9c:
cf:68:84:9f:3f:12:c2:6b:8a:c3:f2:16:40:51:bf:
42:58:8a:b4:9a:e7:b8:70:4d:1b:28:e9:97:72:c3:
2c:35:19:77:f8:64:68:67:01:3b:df:65:e2:1c:ac:
8b:f4:de:91:58:ca:30:cd:15:ed:ed:30:80:27:76:
4d:f5:c9:12:0e:93:b7:a8:a3:ac:b1:48:a5:08:21:
92:9b:33:ec:d7:10:8d:dc:84:c8:63:07:14:04:30:
1c:66:09:fd:41:0f:dd:39:61:92:9e:2c:71:1d:00:
f1:fe:17:56:ff:bb:28:61:0a:78:94:31:94:51:15:
05:eb:76:a0:39:81:66:f3:d8:6f:60:03:4d:22:2e:
d2:e0:9d:c8:b0:84:c8:8c:a5:33:24:ca:e7:76:44:
b7:7c:34:01:c3:66:1d:1d:fc:f0:ee:a8:5b:d5:ed:
93:b5:b0:70:b7:50:0d:ba:80:98:74:bb:9f:ae:4c:
98:69:d9:b5:c2:1e:80:91:16:b4:79:05:cc:cb:19:
ca:38:92:90:a9:b9:37:b1:c7:78:7c:f4:bc:0d:a5:
ca:30:81:39:4a:25:85:bd:f6:21:89:55:f8:3b:b2:
3c:3a:c9:86:d7:e6:55:c8:48:42:f9:2f:73:99:15:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:21:A4:7F:B5:5B:C1:90:46:35:8F:1E:B2:90:A3:7A:D8:26:9F:89
X509v3 Authority Key Identifier:
keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:01:e6:f7:2b:eb:b6:19:44:65:1f:4c:55:a6:c6:8a:f0:6a:
c4:91:79:54:ab:29:3c:1a:51:b1:e7:57:8a:d0:f7:6b:a1:2d:
e0:23:e2:a4:58:70:8b:ab:a0:11:7c:8a:8f:72:43:f4:73:fe:
9e:7b:e5:d7:cb:68:b5:fc:75:14:31:89:d3:94:ce:34:3a:4e:
84:e0:a0:f0:7b:e1:09:d0:1f:67:d1:a1:7f:4b:2c:9d:2c:34:
26:5e:ac:98:90:4e:6f:4c:4d:27:f5:17:ce:96:dd:96:7b:bf:
00:d5:6d:0c:45:da:89:5b:92:ed:37:97:fc:5f:26:ef:fe:3b:
27:32:20:9a:cb:52:7e:8f:28:a4:ab:9e:69:8c:d0:0d:33:20:
8d:b0:cf:1b:ea:bb:53:8d:5a:ee:be:f5:d1:1c:d4:e7:2d:1e:
93:df:8e:e9:07:68:f9:ef:64:dc:57:94:1e:29:eb:a3:db:fb:
65:16:36:19:b4:8a:3f:9e:df:8f:63:fa:6d:7c:02:02:8d:e0:
97:cf:b2:6a:a1:a2:ab:78:6d:35:00:07:d6:07:cb:ab:eb:27:
cf:95:3c:91:4d:e3:e4:e9:3d:ca:bc:52:45:a3:6f:91:62:b3:
a6:38:56:46:e4:4f:a7:9a:6b:c7:6c:28:f6:6a:ea:26:b7:66:
2c:03:7b:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZidTD1faRkbDQrr0I6VxiR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMGNiYzQ3YTZhMzBmMjNjNWQ4NGMxODBiMTQ4ODFkMjBi
YTBhYzIwHhcNMjUwODEyMDgwMTE1WhcNMjUwODEzMDgwMTE1WjAzMTEwLwYDVQQD
EyhmMTIxYTQ3ZmI1NWJjMTkwNDYzNThmMWViMjkwYTM3YWQ4MjY5Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQEHkd4DeIFNe/Adm5zPaISfPxLC
a4rD8hZAUb9CWIq0mue4cE0bKOmXcsMsNRl3+GRoZwE732XiHKyL9N6RWMowzRXt
7TCAJ3ZN9ckSDpO3qKOssUilCCGSmzPs1xCN3ITIYwcUBDAcZgn9QQ/dOWGSnixx
HQDx/hdW/7soYQp4lDGUURUF63agOYFm89hvYANNIi7S4J3IsITIjKUzJMrndkS3
fDQBw2YdHfzw7qhb1e2TtbBwt1ANuoCYdLufrkyYadm1wh6AkRa0eQXMyxnKOJKQ
qbk3scd4fPS8DaXKMIE5SiWFvfYhiVX4O7I8OsmG1+ZVyEhC+S9zmRXRYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEhpH+1W8GQRjWPHrKQo3rYJp+JMB8GA1UdIwQY
MBaAFHMMvEemow8jxdhMGAsUiB0gugrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84NGIwNzQtOWM4ZC00OGY1LWJhZGUt
Y2JhNDlhNDQ2ZDIyLzEvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84NGIwNzQtOWM4ZC00OGY1LWJhZGUtY2JhNDlhNDQ2ZDIy
LzEvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugHm9yvr
thlEZR9MVabGivBqxJF5VKspPBpRsedXitD3a6Et4CPipFhwi6ugEXyKj3JD9HP+
nnvl18totfx1FDGJ05TONDpOhOCg8HvhCdAfZ9Ghf0ssnSw0Jl6smJBOb0xNJ/UX
zpbdlnu/ANVtDEXaiVuS7TeX/F8m7/47JzIgmstSfo8opKueaYzQDTMgjbDPG+q7
U41a7r710RzU5y0ek9+O6Qdo+e9k3FeUHinro9v7ZRY2GbSKP57fj2P6bXwCAo3g
l8+yaqGiq3htNQAH1gfLq+snz5U8kU3j5Ok9yrxSRaNvkWKzpjhWRuRPp5prx2wo
9mrqJrdmLAN7Yg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:29 2025 by rpki-client