Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json)
Hash identifier: RPPQIycAnDTQiJiwemr+JPBmi7gbETHa7sKGJoNtc6k=
Subject key identifier: 00:C0:FF:37:16:E1:D8:82:29:18:8D:4D:37:76:76:AF:B0:EC:1E:0B
Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Certificate serial: 0197B70EABC9A520B23058D3ED06112933E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
Manifest number: 17
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: xx0EQnuF175u+mYvQBB5EGNFv2lX0mzS7L0LONsIA8U=)
2: mS5T_cqTnts2Ow3HYiSE22YiT8g.roa (hash: sSwxiZE98c89qQIhPm+kPgJf9ui8k5AIvLj+CG+uA/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ab:c9:a5:20:b2:30:58:d3:ed:06:11:29:33:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=00c0ff3716e1d88229188d4d377676afb0ec1e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:c9:3f:67:28:6f:3f:bb:ee:38:81:56:f8:
bb:ce:ab:8d:cf:82:e8:23:94:e5:0f:ab:30:af:c0:
39:98:d7:36:7e:f5:ad:27:14:ba:9b:af:d4:31:46:
34:ee:67:fc:46:c9:53:6c:f1:75:04:2f:a4:c5:6a:
ea:2f:e6:15:71:bd:27:72:cd:a2:b6:e8:bd:67:da:
1c:4e:5f:65:da:fe:d3:d2:ae:54:a2:de:74:ad:4c:
95:a4:f5:a8:3a:0e:81:8c:f5:91:03:f3:c2:96:05:
e2:9c:1e:f0:b8:9a:49:11:ca:8e:cd:83:4d:ac:38:
49:85:c2:f6:a1:e3:18:54:31:9a:38:64:9f:21:5d:
bf:b7:4f:75:6a:50:ef:e9:89:99:21:8d:80:72:de:
64:1c:42:d4:a5:ef:69:83:7a:b3:dd:58:48:14:50:
f9:9d:f8:19:c5:20:1c:eb:b9:7d:08:fe:c7:5d:36:
05:a4:0d:35:74:d5:7c:95:60:78:94:1c:a7:fd:ed:
e5:12:b8:91:db:c5:04:89:cc:27:e8:88:ff:78:78:
c6:9b:3a:0d:3c:e4:b1:8c:73:95:98:6c:e0:4f:00:
2a:3b:eb:fc:74:21:d1:db:d9:f4:e1:bb:92:0f:75:
6d:30:d4:d7:72:2f:c0:63:d1:80:80:a3:83:76:09:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C0:FF:37:16:E1:D8:82:29:18:8D:4D:37:76:76:AF:B0:EC:1E:0B
X509v3 Authority Key Identifier:
keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9e:89:98:a7:19:a8:f4:4b:3c:e6:f8:81:4a:c4:b7:f8:9e:
b0:e6:49:e8:90:89:e9:bf:8a:c9:ba:5c:db:87:cd:60:8d:14:
6e:b3:7d:c5:07:e6:80:c3:ad:b4:14:06:e4:21:85:5b:f8:a4:
ca:4c:7f:84:e7:5e:f8:e9:a9:da:3b:19:11:3f:7e:d3:ad:cc:
13:31:96:02:49:10:68:96:14:b1:67:4d:b0:89:4f:c1:68:ee:
5c:44:e1:7c:b7:ba:82:7e:df:43:34:29:49:27:33:80:bf:18:
0b:1e:e7:77:32:44:63:f3:d7:8d:70:9a:55:e8:f6:02:bb:ce:
45:47:b3:ab:89:33:d2:e4:fa:bc:12:ca:94:79:05:57:bc:8e:
a4:11:62:e7:35:b7:28:ba:3e:64:70:8a:31:da:2b:d5:82:f3:
0b:a3:12:f1:9b:55:1a:e4:6b:60:e6:4f:df:72:6f:20:eb:4d:
88:df:ac:24:47:fd:09:e0:36:f0:cc:58:91:d2:a8:d6:25:ba:
65:ba:55:c9:3f:87:15:5d:bc:16:47:1d:08:bf:81:f0:ec:3b:
94:03:3e:c3:68:df:73:80:da:53:72:88:81:ab:27:ca:bf:82:
41:a8:9c:ee:ba:8c:b6:cd:6c:be:00:18:cc:b5:e4:3f:96:8a:
8b:69:73:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqvJpSCyMFjT7QYRKTPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmMzZTg2NTRmZTg3YmRhYjQ3MTFkNzc2ZTQ0YjRmMGNk
MWI2NDcwHhcNMjUwNjI4MTUwMTIxWhcNMjUwNjI5MTUwMTIxWjAzMTEwLwYDVQQD
EygwMGMwZmYzNzE2ZTFkODgyMjkxODhkNGQzNzc2NzZhZmIwZWMxZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsDJP2cobz+77jiBVvi7zquNz4Lo
I5TlD6swr8A5mNc2fvWtJxS6m6/UMUY07mf8RslTbPF1BC+kxWrqL+YVcb0ncs2i
tui9Z9ocTl9l2v7T0q5Uot50rUyVpPWoOg6BjPWRA/PClgXinB7wuJpJEcqOzYNN
rDhJhcL2oeMYVDGaOGSfIV2/t091alDv6YmZIY2Act5kHELUpe9pg3qz3VhIFFD5
nfgZxSAc67l9CP7HXTYFpA01dNV8lWB4lByn/e3lEriR28UEicwn6Ij/eHjGmzoN
POSxjHOVmGzgTwAqO+v8dCHR29n04buSD3VtMNTXci/AY9GAgKODdgk/+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADA/zcW4diCKRiNTTd2dq+w7B4LMB8GA1UdIwQY
MBaAFAlsPoZU/oe9q0cR13bkS08M0bZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82MjVlMGUtZWJhOC00ZTg4LWEwMjEt
NGU3ZDU4NDhkZTAwLzEvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82MjVlMGUtZWJhOC00ZTg4LWEwMjEtNGU3ZDU4NDhkZTAw
LzEvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGp6JmKcZ
qPRLPOb4gUrEt/iesOZJ6JCJ6b+Kybpc24fNYI0UbrN9xQfmgMOttBQG5CGFW/ik
ykx/hOde+Omp2jsZET9+063MEzGWAkkQaJYUsWdNsIlPwWjuXEThfLe6gn7fQzQp
SSczgL8YCx7ndzJEY/PXjXCaVej2ArvORUezq4kz0uT6vBLKlHkFV7yOpBFi5zW3
KLo+ZHCKMdor1YLzC6MS8ZtVGuRrYOZP33JvIOtNiN+sJEf9CeA28MxYkdKo1iW6
ZbpVyT+HFV28FkcdCL+B8Ow7lAM+w2jfc4DaU3KIgasnyr+CQaic7rqMts1svgAY
zLXkP5aKi2lzXw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:32 2025 by rpki-client