Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json)
Hash identifier: zt8lF6GB+7EetJtW15rdG+lHwEZOhp/PVaf/8QahMdw=
Subject key identifier: 4F:34:8A:7C:DB:0E:F7:C0:B8:73:49:C6:B4:FB:F6:02:01:4C:C7:71
Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Certificate serial: 019A003560A3067A1516430B883E3B9B4A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
Manifest number: 0146
Signing time: Mon 20 Oct 2025 06:01:29 +0000
Manifest this update: Mon 20 Oct 2025 06:01:29 +0000
Manifest next update: Tue 21 Oct 2025 06:01:29 +0000
Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: 7KHVCYF9eabLKUA8819WWADq+BObXp99l/o5/0JOxbc=)
2: mS5T_cqTnts2Ow3HYiSE22YiT8g.roa (hash: sSwxiZE98c89qQIhPm+kPgJf9ui8k5AIvLj+CG+uA/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:60:a3:06:7a:15:16:43:0b:88:3e:3b:9b:4a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Validity
Not Before: Oct 20 06:01:29 2025 GMT
Not After : Oct 21 06:01:29 2025 GMT
Subject: CN=4f348a7cdb0ef7c0b87349c6b4fbf602014cc771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:61:33:8c:a9:da:4d:cb:dd:e9:62:c6:5f:
71:ef:45:65:be:7e:97:7a:92:2d:2e:d5:43:ef:65:
b0:fa:42:58:21:ca:a0:9f:54:5c:cd:0c:1e:1c:a1:
5b:12:15:8e:e3:6e:34:b8:32:a0:57:a9:71:d8:26:
95:96:eb:34:3a:dc:0a:99:51:e9:e4:5d:37:8d:58:
0b:72:eb:26:36:97:9e:9b:87:51:29:79:8c:2a:d0:
fb:66:67:0a:6c:2e:ed:7b:d2:02:1a:f8:39:62:82:
2a:ba:a0:64:b1:e2:f2:a2:9f:00:98:52:ae:7e:57:
38:53:d8:bb:8e:e7:13:b0:41:ee:3f:70:d1:0d:cb:
7a:2d:12:e4:a7:f2:b7:b3:0d:3c:73:15:a4:9b:71:
b8:c9:3b:90:0f:37:4d:f1:df:87:3b:a9:eb:e7:f7:
fa:a8:1a:4b:fc:57:64:1d:04:67:28:0c:07:86:2a:
c2:16:dd:eb:c7:a4:33:68:23:cc:8f:52:48:21:87:
53:96:b9:81:be:3c:b9:d9:c2:b6:81:1c:9b:d9:93:
91:86:fb:5e:4d:75:12:3a:97:f8:8b:62:53:a1:20:
c1:ef:7e:aa:7a:56:c0:44:73:11:f9:be:e4:77:e3:
7a:f6:2e:85:c0:79:8c:98:82:52:d0:6e:a6:8a:60:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:8A:7C:DB:0E:F7:C0:B8:73:49:C6:B4:FB:F6:02:01:4C:C7:71
X509v3 Authority Key Identifier:
keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:94:8e:e7:16:a7:ed:30:9a:d5:8b:cd:1a:69:3d:0c:19:c7:
03:56:b3:29:d7:8f:cb:5f:de:74:19:83:81:eb:6e:57:2d:91:
79:d1:8f:c2:3e:ca:b0:0b:6f:6f:27:bf:e8:10:2c:55:b5:32:
7f:31:36:c1:58:96:59:be:a7:5b:40:cd:cb:7c:a2:cb:c8:8b:
2e:8d:ee:30:93:92:31:31:cc:fe:a1:a0:c4:e9:0c:d5:c9:46:
b6:36:47:a4:9a:a1:87:c8:eb:9d:84:a9:1d:2c:ed:57:81:83:
b8:01:97:66:24:78:65:a5:5d:13:98:2b:d2:26:7f:34:c0:61:
ea:cf:a0:f2:85:de:76:50:ac:30:64:84:26:bd:7e:4f:4b:66:
94:74:28:31:22:4c:68:5f:37:26:f4:2f:0e:fb:42:c9:b6:12:
b1:ed:16:30:12:4b:c9:55:9c:46:b2:27:10:e5:0d:57:e1:a6:
0a:45:4a:d2:9c:34:c4:46:8d:02:a7:0c:49:bb:3f:27:72:c2:
ac:89:ec:c5:dc:d2:bf:63:44:d9:19:bb:2d:f6:12:d0:4d:af:
19:88:20:93:af:12:d1:bd:0a:d4:45:30:75:81:24:21:c6:5f:
5e:59:02:ba:4b:3a:28:9c:cd:a7:3d:c8:27:76:a5:62:b4:40:
f9:5e:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:00 2025 by rpki-client