Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: 23GaQWttDkza6pHxwxDGiEq3+nXtnBYOXm0etPCC/JM=
Subject key identifier: 75:CC:AA:E7:F7:72:E6:3E:30:BB:E0:74:8C:DB:BB:BD:3F:B9:0D:4B
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019A4DAA92209E1985F1B31D4C8C37D78D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1677
Signing time: Tue 04 Nov 2025 07:00:15 +0000
Manifest this update: Tue 04 Nov 2025 07:00:15 +0000
Manifest next update: Wed 05 Nov 2025 07:00:15 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: t7Ftf8SZOzq67iV9t8Tq+HrZwp/AitO8C1VI/K6vQ6Q=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:92:20:9e:19:85:f1:b3:1d:4c:8c:37:d7:8d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Nov 4 07:00:15 2025 GMT
Not After : Nov 5 07:00:15 2025 GMT
Subject: CN=75ccaae7f772e63e30bbe0748cdbbbbd3fb90d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:61:58:55:94:24:9c:7f:ac:18:b0:98:92:
ac:2e:b9:fe:5b:0f:a5:2e:33:a7:65:a7:9b:3c:df:
ca:2f:c2:a9:8f:d9:b1:a8:90:a8:c4:61:38:da:ae:
08:80:d7:6b:45:06:c2:7c:fd:4c:bd:0a:44:96:e0:
07:9e:72:32:8e:a6:df:6a:d1:88:19:d8:1e:c0:65:
d5:3a:ee:38:aa:eb:23:5a:bf:5e:8c:f4:52:39:43:
0e:6a:e6:3e:34:2f:a4:c0:06:b0:f8:40:b3:e3:c7:
ba:8a:44:6e:fa:cd:b3:da:08:6d:47:c7:bc:b0:76:
14:cf:64:72:93:1c:06:40:06:88:71:93:e1:97:69:
87:82:ff:3e:2b:b1:50:77:ad:37:36:ba:5b:71:88:
b3:a8:76:a7:7d:60:4c:85:35:9d:fb:51:5a:eb:a7:
ca:f0:06:b1:98:59:5e:27:55:06:d8:cb:b8:f7:1b:
cd:a1:58:95:91:25:41:2f:8d:c8:ab:99:de:b0:b4:
ab:8b:b0:d9:b8:22:f1:cc:2c:9a:09:ae:47:58:80:
63:9f:aa:7b:3b:f5:da:61:a6:31:b3:83:14:a3:d9:
93:97:9a:03:46:8f:22:54:00:66:31:b2:cd:a9:25:
89:06:92:78:4e:c5:31:a0:99:2b:9d:57:4f:c5:f8:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CC:AA:E7:F7:72:E6:3E:30:BB:E0:74:8C:DB:BB:BD:3F:B9:0D:4B
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d3:c3:17:25:0a:aa:65:21:df:de:5c:16:73:1c:e4:6d:d5:
20:f1:96:44:bc:15:50:f3:2a:7c:68:5d:7c:5a:b3:a4:3b:e6:
6f:56:9f:19:a2:63:70:17:06:9c:2e:5f:9a:d5:31:9d:e5:54:
69:0b:85:50:48:dd:05:69:32:96:8e:3d:de:9a:c5:c2:a8:0b:
e7:46:1b:90:fb:41:a1:57:76:57:0d:3d:14:31:4c:31:43:c8:
26:2b:49:26:73:bf:60:b4:86:15:9c:98:99:2c:60:9c:9a:bb:
13:11:8d:2b:74:62:ad:2a:07:a3:5d:8d:b6:d3:2d:44:00:54:
05:52:99:59:0b:17:c0:3f:35:66:90:44:3d:e1:47:3f:49:9c:
c1:b4:c6:6d:f5:8d:61:d7:4f:62:9b:bd:d6:89:a9:e7:86:fa:
82:be:98:f9:6c:71:da:ad:04:a9:dd:fe:15:37:8c:d8:69:d0:
11:0a:f3:66:32:a5:ed:18:c0:6b:aa:b9:9f:17:e4:32:81:7e:
db:4e:ee:ba:8b:b1:b6:06:ce:2f:1d:c4:6e:8a:4e:cb:9f:47:
b5:12:db:44:ff:90:e2:f6:09:64:bd:0e:8b:5d:42:07:9a:ea:
59:53:9d:3b:ab:dd:10:6e:c2:b3:e7:89:e1:3e:e7:c0:15:55:
e4:9a:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:10 2025 by rpki-client