Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: 7nZi8E0B23X5uoEjj7WWhsSrnPbeG4ivCLkF8yV0+7Q=
Subject key identifier: C3:01:A1:EA:B5:32:3F:E3:6F:BB:84:74:8F:C9:B7:DB:25:D0:C2:0A
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 0197B6A1C72BAC3BB4168D67E6E12A7ED453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: PzM/GPtsMlx9/6F4gee13PhTjVRMgjutyNbJGLNxszU=)
2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=)
3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c7:2b:ac:3b:b4:16:8d:67:e6:e1:2a:7e:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=c301a1eab5323fe36fbb84748fc9b7db25d0c20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:ff:e7:03:bf:9d:ad:d1:58:5f:ec:2f:11:
9c:17:23:e5:8a:81:73:5c:8d:7f:83:f1:e8:44:42:
b8:e3:7f:88:c4:55:c8:00:87:3f:14:11:68:4d:f1:
22:fc:fc:25:3e:7f:41:7f:ca:85:a7:10:2d:76:7f:
e9:33:2f:86:ed:2b:27:eb:55:c7:c2:88:32:63:a2:
61:89:2f:cb:ec:a8:02:a1:78:2a:6d:74:16:00:4f:
9c:25:09:67:20:0d:40:d7:84:30:ad:a4:bd:42:69:
9b:78:a8:2b:dd:26:b8:59:c5:1e:a0:88:01:81:b4:
50:55:f6:59:17:c8:00:d5:ed:75:62:ff:d9:43:12:
dd:ee:f7:5b:9e:6b:62:51:df:75:91:89:25:7b:84:
ef:17:dc:ce:fc:d3:88:60:0d:ab:ec:14:bf:26:1f:
51:27:68:66:35:fc:01:b8:a0:86:7d:02:4a:0b:2c:
3c:2b:7c:5e:94:42:11:28:f1:80:83:3a:5a:ec:0b:
6e:79:f4:93:65:cb:76:67:d6:e8:62:c9:31:03:92:
0a:4c:23:f4:68:93:2d:f5:89:c7:36:f8:0c:d0:2d:
be:92:f3:64:ea:42:55:23:cd:ad:42:f9:95:ad:dc:
2c:f2:02:49:c4:d5:7a:15:a8:cb:29:74:7a:28:8a:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:01:A1:EA:B5:32:3F:E3:6F:BB:84:74:8F:C9:B7:DB:25:D0:C2:0A
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:1d:49:e4:a0:28:9d:80:54:e1:b5:94:26:5e:0c:35:ff:
0c:34:25:83:61:ca:22:b3:b5:d4:07:0b:f6:84:a2:96:42:ad:
ad:c9:8a:30:9a:82:67:05:00:5b:22:7a:83:c8:79:01:09:46:
0c:60:aa:85:e5:e9:f4:f5:fa:7c:35:b0:06:b1:75:5e:fa:d8:
b0:e9:31:f2:66:88:5c:fd:7a:77:69:a7:b5:81:9e:fe:e5:23:
c9:a3:be:e5:e3:87:6d:6d:42:19:1c:31:59:bb:73:64:56:5e:
c0:47:cd:e5:05:6a:71:87:42:de:a8:89:07:3b:f2:70:c1:b5:
a6:a9:4c:6f:c1:69:51:66:89:ef:e9:c1:1f:24:41:ac:bb:f1:
cd:00:d5:29:c3:5e:41:d0:85:6d:b8:62:9a:62:19:cc:8c:b0:
15:13:e5:74:3b:4a:67:24:cb:a6:2c:16:eb:cc:a3:31:35:ae:
2f:ea:c8:68:7f:71:92:04:bc:48:a6:89:51:2c:07:2e:f7:eb:
a4:b1:23:33:6c:db:15:1e:98:90:29:e9:91:67:df:4e:9e:05:
7d:00:90:2f:75:d9:79:e6:ae:b4:c0:ff:aa:54:ea:c1:94:d0:
1f:4e:48:11:fa:a7:4c:3a:b4:b3:a6:15:af:e5:65:0c:05:29:
5b:11:c7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:10 2025 by rpki-client