
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
File: cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft (raw, json)
Hash identifier: j5Xki+DqtXZa7oiagOIKJzcXesgw6mAqj4AyXl5Wj08=
Subject key identifier: 03:46:FF:7A:CF:FC:1B:D7:49:07:B3:E0:45:D1:ED:80:B8:3F:51:55
Authority key identifier: 73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
Certificate issuer: /CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Certificate serial: 0199FBEBF20117B446FD7A2589FBE7CC4C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
Manifest number: 02B6
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl (hash: 6emPkRwe1vIQvRFOjzy2bCUY/4/8uooC3m428teosA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f2:01:17:b4:46:fd:7a:25:89:fb:e7:cc:4c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=0346ff7acffc1bd74907b3e045d1ed80b83f5155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:bc:49:23:64:1b:89:ea:12:06:16:77:db:
3b:63:dd:54:14:a1:29:e6:86:81:0c:26:ca:3e:ce:
64:4b:cb:c6:1b:ba:ad:78:7e:d5:7e:1e:42:50:99:
5c:83:17:70:1a:f2:13:6b:dd:66:4e:82:7e:fc:b9:
67:0a:e2:30:a7:3b:f0:4b:5f:e4:07:b9:ae:06:95:
48:49:43:67:ff:69:03:8e:f5:d2:65:ca:e3:2f:1f:
47:cf:a3:fb:8d:11:cd:86:41:1e:d3:9e:51:12:c6:
4a:10:07:91:06:24:33:a2:41:56:c7:30:bb:63:eb:
13:b2:77:e4:a6:8a:7a:73:6c:cb:ad:a1:95:85:a5:
04:23:a3:8e:a5:cc:c6:c5:01:f1:8e:d7:f6:d5:10:
13:46:77:37:5d:c7:54:3b:30:35:7e:3e:fa:5b:d0:
7a:a8:04:8a:87:eb:fb:7a:c9:82:74:00:ef:60:99:
a1:04:5b:d4:21:a5:1f:89:ac:a9:76:24:24:39:ba:
59:ab:86:c4:f6:d4:41:4d:d4:16:e2:f4:55:07:5a:
68:09:9c:e3:38:20:b5:61:49:eb:ac:e7:c9:65:7a:
0c:64:5d:71:76:52:5b:ff:6d:e0:39:15:8d:ed:c2:
bc:73:80:b1:c5:95:e0:af:8d:68:b6:12:07:f0:6f:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:46:FF:7A:CF:FC:1B:D7:49:07:B3:E0:45:D1:ED:80:B8:3F:51:55
X509v3 Authority Key Identifier:
keyid:73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8a:73:d8:7f:a1:f3:59:2d:f2:c7:c1:2e:66:8b:ea:dd:6d:
9a:bf:2a:ce:3d:fb:18:4f:3d:93:ac:c4:a4:a9:8f:e0:f0:83:
2b:c9:0a:cf:f3:b1:6c:cd:9e:b9:59:e4:e2:64:ee:f8:a4:8a:
0f:2c:a2:14:0c:58:83:1a:a4:80:a2:7f:14:45:e9:88:32:bf:
47:20:74:4d:b7:1e:8c:6d:b5:a7:64:de:fa:41:7e:e5:8c:c3:
96:95:9a:1a:69:88:d8:c0:0f:87:64:7d:03:0b:be:ee:cf:d2:
f1:96:d9:85:a0:20:74:66:b8:1f:ab:65:40:25:90:be:75:f3:
47:4e:e2:1e:f0:53:b1:75:e0:b8:73:7a:48:57:68:8d:ce:7d:
82:da:30:86:67:5e:a2:d5:53:5e:79:ba:1f:a8:ad:34:2e:78:
12:7b:ee:12:b5:4b:0e:8e:7a:64:31:8f:84:d2:2f:30:d7:9e:
34:e5:30:14:6e:d2:0b:0c:99:ec:8e:72:e5:ea:99:91:4d:87:
27:81:33:f4:27:01:db:5c:55:05:33:aa:f2:4b:46:40:dd:bd:
42:2d:32:dc:65:06:64:e4:37:b9:5b:ea:8e:f2:87:5f:9a:39:
94:be:5f:e2:45:e6:97:a1:94:51:cf:a7:4a:98:38:fb:be:44:
51:7c:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:31 2025 by rpki-client