Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
File: cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft (raw, json)
Hash identifier: AbHczF+7BcdVkBVGZ8byoPoDfuBL+A/jXW5ytE8xNZg=
Subject key identifier: DF:2B:A7:9A:CA:9A:91:DE:C4:CC:F5:9F:B5:60:DB:C4:43:29:4D:1E
Authority key identifier: 73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
Certificate issuer: /CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Certificate serial: 0198D66010643CC50CC98D81F3866150B985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
Manifest number: 021E
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl (hash: o3VPXKY6Ynkq6MAs//BKEB/bXLLgt0y4g8K6u+tGg2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:10:64:3c:c5:0c:c9:8d:81:f3:86:61:50:b9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=df2ba79aca9a91dec4ccf59fb560dbc443294d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:a6:50:7f:31:79:69:60:86:4b:a3:25:05:
70:5c:3b:fb:a6:da:da:2e:94:b4:a2:fe:fb:4f:97:
55:92:62:10:a6:ab:2e:6b:9c:1c:46:fd:23:38:9e:
7d:8a:17:26:0c:1f:0c:82:34:1f:c0:e7:19:60:e7:
16:c6:bc:6d:a5:94:b7:34:4c:01:74:82:f8:31:e0:
73:21:8b:fe:2c:e8:8c:58:92:14:ef:3b:0e:a0:62:
8e:87:f9:e5:3e:c9:86:a0:0f:32:8b:3b:ed:aa:c2:
fa:6d:87:b5:5b:da:d4:0f:f0:a4:ce:7d:a6:e4:9b:
4e:6a:db:9c:a4:8b:2d:f9:50:e6:b7:37:91:0a:47:
94:87:4b:7c:2a:2d:26:7b:cf:ce:60:3f:f9:4d:7d:
ae:c2:2f:a5:6c:8a:86:b6:68:13:aa:22:ab:e5:6c:
b1:6e:e2:91:71:67:38:14:0c:0b:34:6c:18:d4:a2:
0e:89:f0:31:17:a6:2d:65:e2:5c:de:f3:cf:f5:3c:
54:3a:49:1a:ff:94:f0:a9:41:a4:c1:4e:9e:2f:3c:
0a:92:2c:86:c6:ba:04:f0:17:ec:d2:31:79:95:0f:
96:17:43:63:fe:0c:36:6e:50:da:cb:50:5f:17:88:
62:57:42:a4:3b:b7:e5:15:15:f4:5a:70:03:1b:cc:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:A7:9A:CA:9A:91:DE:C4:CC:F5:9F:B5:60:DB:C4:43:29:4D:1E
X509v3 Authority Key Identifier:
keyid:73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f7:b4:38:c1:1c:e3:9a:73:ba:90:64:eb:08:4b:32:ae:33:
28:26:bd:93:23:ab:e8:a3:ee:9f:d2:21:b1:fb:e3:fe:96:09:
49:7c:30:a2:77:88:61:d7:70:30:38:c2:33:fb:b9:dc:60:f4:
95:51:b2:c4:30:33:87:42:69:8d:81:d8:08:8a:fe:0c:08:2c:
4b:df:03:ab:eb:52:c3:41:55:88:03:e2:79:10:6e:3b:05:9b:
92:10:e6:c8:01:08:be:70:c9:45:a4:97:f3:1a:2f:53:74:8e:
ae:e6:5b:51:17:ab:50:e4:15:de:ff:6a:d1:34:41:e0:e4:83:
63:21:c9:c5:f8:14:47:97:61:b9:16:f7:f9:30:61:ea:38:13:
fe:86:c6:e6:95:07:3b:9e:15:61:c5:ea:38:de:63:94:9a:c3:
f2:3e:62:f5:1b:f6:39:d8:9f:bd:e9:1f:ef:36:d6:0f:5d:29:
3f:6d:95:8e:d5:71:4d:10:fa:27:c6:d5:9c:4a:0f:5e:4e:58:
df:26:49:35:40:fa:fe:78:bc:c5:87:9a:3c:68:7b:2f:1e:74:
b9:40:f8:30:f1:ae:25:4d:a5:55:28:43:a6:4d:63:10:b2:5c:
43:86:b1:a2:ff:09:76:2b:99:2d:60:62:d4:93:fa:54:b1:4a:
e0:a3:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:20 2025 by rpki-client