Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: EG5ORKwWUk5/3q/LMQCcab0N20FmjB2Fz7YOJru9iLY=
Subject key identifier: AE:B0:15:83:51:74:37:CB:8F:4D:1B:AF:4F:10:6F:72:F1:29:10:24
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 0198D6605A323D9DC7F25DB65A1EC91C28A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 10:01:35 +0000
Manifest this update: Sat 23 Aug 2025 10:01:35 +0000
Manifest next update: Sun 24 Aug 2025 10:01:35 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: m2AL+08aqmzLlInpjXVDsnU34u6FAhTGle9xke/eb4Q=)
2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=)
3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5a:32:3d:9d:c7:f2:5d:b6:5a:1e:c9:1c:28:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Aug 23 10:01:35 2025 GMT
Not After : Aug 24 10:01:35 2025 GMT
Subject: CN=aeb01583517437cb8f4d1baf4f106f72f1291024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:78:8b:2e:97:5b:e6:f1:db:fb:7d:ae:8f:
e9:ac:39:48:c0:be:b4:e9:19:98:b9:b6:1e:b0:0a:
7e:89:2b:b8:09:93:6b:4b:30:42:1a:b0:60:af:fa:
5a:e0:d4:5c:a7:e5:bc:9a:6d:a5:91:64:16:d5:9c:
26:24:43:f3:68:e6:10:5f:0f:c4:15:a2:47:2a:f4:
a4:d3:23:8a:87:b7:be:b4:c1:8c:71:a2:31:57:ef:
90:bf:0d:fa:c1:54:c2:c3:98:25:03:71:4a:17:c3:
de:13:e7:fc:c7:b6:b4:41:05:bb:4a:73:28:53:f9:
c8:d2:97:0b:cc:13:07:c0:23:fb:2d:e3:a3:cd:43:
f9:3d:d8:96:2d:72:c0:ab:b7:c2:c1:5b:e3:4e:8d:
31:d4:cb:74:15:98:73:02:cb:25:74:96:bd:93:6d:
16:3a:5d:46:41:02:df:d5:29:41:79:c6:e8:94:a7:
f3:50:28:7a:4a:5c:9e:94:06:73:ce:be:d1:5c:5b:
8c:1d:60:80:e8:4c:3a:7f:8d:75:fa:9d:61:ef:ce:
9d:40:be:cf:67:a1:df:b0:1e:b2:2e:c7:b6:4a:f6:
8f:ef:43:56:9b:ef:74:0c:42:6e:e5:a1:a8:3f:40:
04:39:06:68:10:f5:db:8e:2b:86:87:bc:91:9b:f7:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:15:83:51:74:37:CB:8F:4D:1B:AF:4F:10:6F:72:F1:29:10:24
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:14:da:07:1b:b9:02:95:ad:c6:92:97:30:6f:86:c3:7b:20:
93:a7:f8:a3:92:f6:20:08:d3:85:9b:d4:2c:b3:de:52:13:60:
1b:cf:06:0a:18:2a:b9:63:38:c6:91:d7:00:ce:0a:77:3b:3d:
ee:49:97:ca:21:18:85:70:f6:3c:0f:8a:4b:2b:dc:08:13:21:
f5:97:66:a8:62:a7:fd:04:c9:70:4a:6c:cd:73:95:50:0a:94:
5d:5b:9d:37:64:90:06:08:f1:56:6b:38:39:b1:31:c7:9a:1e:
32:36:f9:37:ed:2c:be:92:53:de:99:f2:2e:8d:34:e5:b8:57:
8f:37:46:7e:0f:6e:ef:66:47:d7:5e:99:c7:14:6d:c5:f7:6f:
3e:8d:ce:41:d3:02:50:6d:f8:1d:6c:90:30:5e:3b:9d:ea:93:
96:41:49:e1:3b:10:13:e2:ce:6d:6f:87:1b:e3:f5:d2:5d:dc:
66:19:5c:ec:3d:50:b3:e4:d5:6e:97:ec:35:75:af:b0:ad:aa:
2d:b7:d7:72:f0:c4:75:e3:49:5b:6b:8b:d4:ea:42:fe:1d:c0:
39:00:d4:f5:af:04:53:01:2e:b5:90:d9:94:10:4e:c6:3d:3f:
a5:62:00:51:a4:79:e5:3c:12:e6:95:1d:07:94:97:8f:48:a2:
f4:0e:1e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:50 2025 by rpki-client