Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: toseVItc+23hNjexaTbRmXFNkPdAGQMjvsE/NybM4HM=
Subject key identifier: 64:17:BC:D4:5D:31:52:8D:73:20:85:C1:DA:C9:99:B3:75:9C:92:D8
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019872985D3766BE11FEF535508527F076F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1581
Signing time: Mon 04 Aug 2025 01:00:44 +0000
Manifest this update: Mon 04 Aug 2025 01:00:44 +0000
Manifest next update: Tue 05 Aug 2025 01:00:44 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: fWnjEtl6eTMSXkuHphQprujbnyxmNcYQXfMNeXajgb8=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:5d:37:66:be:11:fe:f5:35:50:85:27:f0:76:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Aug 4 01:00:44 2025 GMT
Not After : Aug 5 01:00:44 2025 GMT
Subject: CN=6417bcd45d31528d732085c1dac999b3759c92d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:de:df:da:48:d5:35:fe:4a:51:b4:12:e5:
ac:9a:58:7d:89:cb:ed:2b:bd:16:e5:7d:95:03:0f:
8e:f0:9e:65:1f:fb:18:f0:c7:f4:d5:94:a8:86:94:
c4:12:5c:96:3c:28:36:a5:b3:13:31:86:73:e9:85:
1e:6d:b7:96:72:f2:1a:ae:7f:5f:89:73:59:f9:10:
6e:80:e2:9a:79:98:7c:e0:d2:a5:bb:fd:f2:4b:db:
16:c8:3a:37:30:ad:2d:f7:15:1f:d6:c7:b8:ae:29:
72:04:38:e9:eb:e3:4f:a8:27:06:fe:fa:89:23:16:
c0:80:bd:70:8b:b2:77:03:f0:0b:1e:07:47:f3:0f:
0c:89:4f:68:d1:44:fc:61:0d:61:1a:1e:49:32:8d:
34:5b:e5:b9:e8:66:1d:5c:aa:24:8b:65:82:73:26:
21:23:f4:1c:75:77:70:30:f7:19:ef:cb:a5:92:8a:
d4:98:6c:a5:8a:ec:3a:3d:c6:d8:8d:ad:8b:c3:86:
41:13:32:02:c3:b0:fd:74:6b:a4:98:2e:c5:8c:b2:
bc:aa:5b:09:35:80:c2:7c:e2:24:ce:be:e6:93:53:
ab:74:b8:3c:8c:44:d1:65:51:11:65:d2:2b:5a:03:
ed:b2:6f:fc:ac:4f:13:3c:c7:1f:8e:12:e4:22:55:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:BC:D4:5D:31:52:8D:73:20:85:C1:DA:C9:99:B3:75:9C:92:D8
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f8:8e:10:6d:80:cd:65:59:63:a3:9f:b8:44:e3:21:f3:9a:
f7:bf:22:a4:01:60:e9:f6:5b:95:9b:43:11:ee:6d:94:44:ac:
6a:b6:ab:a2:26:88:4b:e2:5d:d1:62:88:b7:a5:9b:a8:e9:c6:
37:5e:e1:36:5b:4d:9d:59:a9:a0:3b:20:4f:1b:13:78:b5:c4:
f7:3e:97:27:d3:b4:2c:8d:44:4f:c3:c5:0c:e5:30:67:6d:cd:
37:93:27:90:8a:82:2b:04:2e:f5:3a:5f:c9:4b:53:d7:ce:f6:
6c:91:a5:cb:77:40:13:47:fc:f2:f4:96:4f:aa:ac:2f:64:92:
f9:1a:98:f7:4f:41:82:a2:42:34:87:5e:b4:ba:15:78:ab:65:
da:48:e1:c5:f8:40:04:99:14:ef:ad:99:6e:e9:32:b7:a7:f9:
1d:be:59:93:8b:d2:6d:e9:aa:90:a1:22:c1:bf:20:0b:43:8c:
f0:94:cc:a1:20:c4:92:1c:28:dc:b7:50:9a:af:23:f8:41:9b:
5c:31:78:94:4f:79:2d:f2:8f:01:3c:f5:67:48:72:17:66:62:
47:fb:72:ea:29:8d:f9:d0:3c:dc:fa:79:fa:12:99:0a:44:24:
35:b0:87:f1:14:84:d1:e7:44:b4:53:7a:d2:d5:13:e0:38:a3:
e6:60:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:07 2025 by rpki-client