Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: G//2LV+Yl+e9wCflgs1oIkEB2dP19XoVM2V/OCtlVJU=
Subject key identifier: F5:92:FE:7B:2A:82:C8:D5:8C:FB:32:7E:36:82:6B:C5:23:19:4A:6D
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 01976A060EAF24B5516A8CA5770EA061FF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 14F8
Signing time: Fri 13 Jun 2025 16:01:11 +0000
Manifest this update: Fri 13 Jun 2025 16:01:11 +0000
Manifest next update: Sat 14 Jun 2025 16:01:11 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: I0PplsiXP0a+wlOZ2P/3qpEhwALLUGxK0pf5aN1Ipoc=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:0e:af:24:b5:51:6a:8c:a5:77:0e:a0:61:ff:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Jun 13 16:01:11 2025 GMT
Not After : Jun 14 16:01:11 2025 GMT
Subject: CN=f592fe7b2a82c8d58cfb327e36826bc523194a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:99:77:62:ad:86:47:cb:da:83:2e:27:d6:
cc:af:8f:17:72:23:83:c6:85:c2:00:cf:05:46:cb:
76:29:9e:e7:01:0e:79:b3:34:cd:d2:d2:42:05:f2:
fe:82:06:07:21:b1:ae:ac:bd:d8:94:91:00:73:60:
f3:71:a0:93:17:21:55:0e:38:b9:b0:9d:34:38:8c:
f3:eb:c4:dc:f1:ca:40:b8:1c:9b:2b:fc:ac:76:5f:
c8:87:eb:69:5c:c8:15:d2:51:84:0d:54:f7:50:f0:
92:1d:7a:4f:58:4d:61:53:b5:e9:b9:f9:d2:18:77:
ae:30:6a:82:a4:7a:fb:4f:cb:5f:8b:2e:0f:5a:fd:
33:69:a7:42:07:17:3e:f5:e9:03:0e:98:c8:18:72:
5b:1c:2c:92:2d:99:e9:5e:15:bc:fa:37:83:a9:d2:
79:b0:21:f2:5f:1a:79:d8:71:8c:51:ea:9b:6d:a6:
4a:25:ce:dc:ce:30:b4:d2:ae:52:83:1d:d5:f7:d2:
f6:a2:bb:d9:63:d4:27:9f:e4:c6:47:ed:ac:34:da:
44:34:9c:df:41:c7:0a:3b:2a:1e:37:ca:98:71:f6:
e6:17:d2:6d:90:76:07:30:40:71:c7:39:43:e4:a4:
65:e9:ac:58:2e:2f:0f:a1:ff:67:24:44:b8:07:b6:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:92:FE:7B:2A:82:C8:D5:8C:FB:32:7E:36:82:6B:C5:23:19:4A:6D
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:be:d9:47:b8:70:8d:26:68:d5:ff:23:19:8b:2a:8a:05:12:
e1:49:0e:c2:f0:f8:e3:35:6d:72:31:88:20:e5:79:2c:f4:8e:
51:fa:47:cc:5c:97:c7:88:b8:bc:3f:3e:be:06:b0:4e:d0:2a:
a5:c7:a6:fa:52:d7:3c:52:60:12:9f:f4:1e:51:65:aa:3c:7b:
63:05:75:54:38:1d:04:4b:f5:7c:4b:a7:3f:e9:c9:1e:52:0f:
8b:ac:4c:a0:11:2c:c7:cc:26:b4:07:50:b4:62:ad:8b:d2:03:
8b:b4:e2:69:c3:d0:3f:08:df:b2:c5:73:b1:31:18:77:2e:5e:
05:f3:11:87:92:48:f8:bb:ec:bb:9d:46:07:5b:f8:da:06:36:
21:36:63:da:10:c3:43:f3:f6:42:57:1e:5a:0e:61:f4:71:32:
be:41:be:c9:69:18:7c:21:6e:0b:bb:ee:01:7d:5c:f7:f8:3c:
c7:4b:85:e2:44:9b:37:c1:63:7a:8d:8a:3b:07:1a:2c:04:10:
5a:1f:06:42:72:75:89:c2:40:1d:dd:8a:9c:a8:13:f8:94:af:
ed:67:7f:7f:a6:fb:09:f1:db:9d:e4:d8:4b:ba:0b:4c:da:df:
f1:24:5f:1b:13:c9:ed:cb:18:e4:55:a9:6c:a1:24:19:2b:1e:
33:c1:82:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBg6vJLVRaoyldw6gYf8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3
YzFmZTIwHhcNMjUwNjEzMTYwMTExWhcNMjUwNjE0MTYwMTExWjAzMTEwLwYDVQQD
EyhmNTkyZmU3YjJhODJjOGQ1OGNmYjMyN2UzNjgyNmJjNTIzMTk0YTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4eZd2KthkfL2oMuJ9bMr48XciOD
xoXCAM8FRst2KZ7nAQ55szTN0tJCBfL+ggYHIbGurL3YlJEAc2DzcaCTFyFVDji5
sJ00OIzz68Tc8cpAuBybK/ysdl/Ih+tpXMgV0lGEDVT3UPCSHXpPWE1hU7XpufnS
GHeuMGqCpHr7T8tfiy4PWv0zaadCBxc+9ekDDpjIGHJbHCySLZnpXhW8+jeDqdJ5
sCHyXxp52HGMUeqbbaZKJc7czjC00q5Sgx3V99L2orvZY9Qnn+TGR+2sNNpENJzf
QccKOyoeN8qYcfbmF9JtkHYHMEBxxzlD5KRl6axYLi8Pof9nJES4B7avawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWS/nsqgsjVjPsyfjaCa8UjGUptMB8GA1UdIwQY
MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt
YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk
LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgL7ZR7hw
jSZo1f8jGYsqigUS4UkOwvD44zVtcjGIIOV5LPSOUfpHzFyXx4i4vD8+vgawTtAq
pcem+lLXPFJgEp/0HlFlqjx7YwV1VDgdBEv1fEunP+nJHlIPi6xMoBEsx8wmtAdQ
tGKti9IDi7TiacPQPwjfssVzsTEYdy5eBfMRh5JI+Lvsu51GB1v42gY2ITZj2hDD
Q/P2QlceWg5h9HEyvkG+yWkYfCFuC7vuAX1c9/g8x0uF4kSbN8Fjeo2KOwcaLAQQ
Wh8GQnJ1icJAHd2KnKgT+JSv7Wd/f6b7CfHbneTYS7oLTNrf8SRfGxPJ7csY5FWp
bKEkGSseM8GCkw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:25 2025 by rpki-client