Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: P0xGCcSSylqWpyya0EA8buCipOeih/UFb2HZTRgxjk8=
Subject key identifier: AD:FF:7A:32:99:9C:E3:B4:28:35:64:AF:68:5A:02:61:DD:61:70:29
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 0199FBEA7213C78E968F3068C0FB80428D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:01:09 +0000
Manifest this update: Sun 19 Oct 2025 10:01:09 +0000
Manifest next update: Mon 20 Oct 2025 10:01:09 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: dtzUK5nHkilGyCLXlCdnIDtkU7z6bGsyu4Z/Gh7HTlk=)
2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=)
3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:72:13:c7:8e:96:8f:30:68:c0:fb:80:42:8d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Oct 19 10:01:09 2025 GMT
Not After : Oct 20 10:01:09 2025 GMT
Subject: CN=adff7a32999ce3b4283564af685a0261dd617029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:b4:16:be:5f:6c:79:1a:5e:b3:22:fb:8c:
ef:55:8a:7f:29:0a:0f:6b:26:ce:98:fa:63:03:3a:
53:de:0e:10:35:cf:49:46:5d:ed:61:48:6c:69:9f:
0e:40:bb:20:e9:45:97:ed:fa:64:be:b8:79:37:b0:
00:34:72:9f:5d:51:a2:ba:f9:ec:b2:c8:4a:fd:28:
a9:f6:f0:9d:1a:95:e1:8c:57:3d:3e:54:5c:51:c2:
43:32:57:90:cf:0c:39:83:da:b4:4d:28:bb:e7:74:
f2:f9:ef:8c:be:b1:0c:6f:cd:a9:73:df:bf:da:b3:
1b:6d:a9:76:7a:70:67:34:e0:a4:d4:eb:5a:34:c8:
5c:10:a2:d2:95:d7:f1:d8:d0:fd:b9:32:9e:2d:4c:
de:15:6d:cd:95:fd:5f:35:2a:30:ff:b1:c2:0d:69:
af:8f:c4:49:cd:81:78:04:79:97:2e:f1:e0:ac:2b:
dc:87:b8:88:80:08:c5:24:aa:2b:72:86:55:70:a9:
55:0f:b2:d3:88:ea:7a:83:a8:12:3d:8e:92:61:6e:
12:b8:2d:c0:56:6b:14:41:23:9a:a9:fb:0a:02:46:
41:62:ab:f7:77:01:e8:10:53:8f:eb:83:52:ef:63:
8e:1f:1a:d5:7f:17:9c:9f:d3:26:ee:f0:fb:8e:bf:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FF:7A:32:99:9C:E3:B4:28:35:64:AF:68:5A:02:61:DD:61:70:29
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:39:b2:8c:01:d3:d7:17:fb:74:c6:9a:6b:43:d1:bd:6d:
a2:4d:e8:f0:26:4d:2b:4d:48:bb:88:2f:f7:68:a0:b6:4c:6b:
aa:79:66:98:f8:76:e2:b8:a3:2f:72:37:09:95:6d:db:f7:a6:
bf:ce:4d:ce:2c:67:06:bc:88:fb:81:ec:c9:7c:44:bc:2d:71:
90:00:11:09:e8:6b:fd:db:71:03:b1:db:fa:e5:59:92:46:ec:
12:98:5e:51:73:ea:5b:2e:b4:b9:b4:30:f1:53:2f:f4:73:ff:
b3:ca:16:83:fb:cd:76:b4:24:f5:ac:e0:52:81:e6:ed:44:cb:
97:b1:1f:14:91:f6:3c:be:c8:4e:19:9e:f1:26:ce:66:f7:2b:
9a:6e:30:2b:62:df:9a:8f:b3:50:04:71:cd:ce:95:09:39:08:
4a:62:9e:ff:50:61:9a:ba:fb:33:d5:a4:07:f4:b8:a9:25:2f:
40:e3:14:72:f5:7a:e6:26:a7:af:30:84:3e:c3:0e:f3:8d:21:
a7:0b:79:4b:ae:c2:03:87:77:1d:71:f4:ce:1b:f6:36:f6:2d:
e2:d9:44:16:3c:db:73:ee:6c:31:62:6a:5a:04:ad:de:2e:86:
de:3b:dd:25:cc:3d:13:48:06:55:7b:f1:e3:07:3d:b8:90:70:
2a:af:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:48 2025 by rpki-client