Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: bvd6qREvmR/5cx2k3LACEb3vZ1mTisT9DTYZiPxvbfA=
Subject key identifier: 4C:F8:7A:55:00:C2:58:59:64:2C:4F:3E:10:0F:E2:36:79:3C:2A:0B
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 019A03A4EE4FB84F3A02B477E85087895B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 22:02:11 +0000
Manifest this update: Mon 20 Oct 2025 22:02:11 +0000
Manifest next update: Tue 21 Oct 2025 22:02:11 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: tDouqDcR5uzYVdK6FX8byfMpDhtxPqVUdOOnoyQ6/OM=)
2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:ee:4f:b8:4f:3a:02:b4:77:e8:50:87:89:5b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Oct 20 22:02:11 2025 GMT
Not After : Oct 21 22:02:11 2025 GMT
Subject: CN=4cf87a5500c25859642c4f3e100fe236793c2a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:6b:18:42:f4:12:34:40:53:f8:24:a2:84:
cf:3b:53:40:b8:5d:62:cd:89:42:5b:4e:68:47:3c:
f6:09:bc:59:a9:a4:77:24:27:29:00:02:28:d9:2a:
7f:09:6b:06:30:97:1c:ad:a2:67:38:b0:8f:fb:5d:
86:ee:ac:9f:45:23:b4:90:a0:51:b9:3e:9d:5c:39:
bc:9c:5a:31:3d:96:44:fe:64:f4:27:d0:a7:97:cd:
ca:af:f3:fd:ca:55:5b:91:c4:67:c2:07:78:97:7f:
0b:96:a0:1e:5c:bb:70:57:03:99:5a:b0:e1:04:34:
79:fa:58:96:18:f6:d7:32:0f:b3:6a:7e:2f:7c:6d:
c2:a8:d4:69:f3:76:5b:1d:e1:d5:06:64:80:08:bc:
44:92:68:95:f3:a2:2c:9c:6c:e7:df:e9:68:93:09:
38:28:a4:b3:ef:61:eb:59:d2:47:05:a0:68:48:3e:
bc:cd:ba:4e:3f:4b:1d:2f:94:ca:4b:08:ee:ae:71:
39:48:51:1f:ce:58:49:e7:75:71:53:29:64:f6:ca:
fa:23:64:68:77:b0:65:f0:aa:28:00:fd:85:37:59:
ad:32:18:76:79:1f:85:cd:16:86:84:41:9e:75:20:
49:58:fa:01:cb:be:e9:ee:cb:60:09:0b:79:57:1a:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:7A:55:00:C2:58:59:64:2C:4F:3E:10:0F:E2:36:79:3C:2A:0B
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9a:70:da:64:a4:3a:18:05:dd:0a:7a:2f:29:77:3b:ee:1d:
d8:27:bf:4c:38:f1:e0:99:ad:6c:52:6f:3a:12:11:29:2b:ce:
fa:8b:3c:f5:09:0d:90:d9:27:ec:02:f0:9c:67:a5:c2:b5:80:
82:61:3b:5b:ba:15:51:37:8d:d0:22:99:ef:21:8f:f5:66:92:
9a:41:70:ba:eb:a9:07:49:e5:01:2d:cc:22:77:9b:e5:17:6f:
eb:0c:79:1d:94:fd:b2:e3:92:5f:1b:d1:66:f2:67:a1:f9:09:
a1:45:c0:a8:fa:2e:82:04:5f:0c:44:59:f7:5e:2e:10:0d:65:
08:43:77:86:58:ee:9e:07:85:7f:3a:a1:b5:bb:06:8c:da:29:
e3:87:70:52:7e:8e:0d:b2:c8:a7:5a:8c:03:d6:94:4a:d6:c0:
05:13:5a:4f:ab:fe:1d:85:74:34:63:32:75:a5:b6:54:8f:d1:
31:80:6b:dc:13:ff:bd:09:bd:1b:38:75:b5:6d:68:56:7c:ef:
71:fa:77:53:44:66:bb:8a:6f:13:ca:5a:86:b6:d5:f1:f4:7a:
ca:0e:1b:b7:88:92:d4:79:4f:9e:40:5c:63:93:9f:0c:f3:7b:
8b:64:af:1a:e6:30:ed:c3:8f:30:07:26:19:72:01:b9:3d:3b:
ea:6b:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:33 2025 by rpki-client