Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: IK/Z6FBPC6Ecc/ZmFQ+57tqyABQlQMkgnl3Nsr6G2r8=
Subject key identifier: 8C:95:8E:E0:0A:BA:4E:07:7B:29:88:98:8A:E5:CB:F3:84:7C:49:F4
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 0199FC8F7257D0361C2DBE18643076A958CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 164D
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: DYHy0rHQXo4trnmr+QefRteAK51mtzrFEBK3CBy/AgM=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:72:57:d0:36:1c:2d:be:18:64:30:76:a9:58:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=8c958ee00aba4e077b2988988ae5cbf3847c49f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:6b:f0:20:69:06:4f:14:09:ca:6f:35:05:
99:64:f8:a1:de:67:a8:4d:18:ae:6e:09:68:fe:9c:
8c:19:26:f0:13:52:e4:d9:61:0f:7a:b7:73:4f:ce:
98:e9:2b:0b:a3:6e:c5:e5:da:fc:a0:a5:f0:71:5b:
03:fa:df:fa:20:38:5b:78:2b:62:26:8f:8e:2b:94:
64:68:fe:5b:10:c8:40:12:75:e1:87:2e:8e:dd:61:
2a:b0:c7:cd:fd:c4:8b:c0:f6:20:34:44:ce:cd:89:
9b:37:22:b1:24:b2:39:bb:1e:13:44:ba:0f:26:9f:
6e:39:d3:1d:47:f8:be:1a:a1:36:43:51:9d:c6:32:
bc:9c:48:e9:6f:4a:65:e0:0a:50:ae:2b:86:38:8a:
b4:4f:ce:21:4e:cf:1a:5b:1d:39:0a:98:a0:7f:05:
73:84:ce:7f:8d:84:03:05:65:2a:e7:da:e0:fe:3a:
35:91:e5:28:37:b4:50:e4:51:c7:14:05:d0:d3:10:
36:c2:a3:9f:2c:f8:b1:7a:22:41:1c:6b:59:b6:b8:
65:e8:2c:10:74:76:c9:56:9a:f3:49:67:3d:83:c2:
29:2e:4a:b0:24:bd:0b:27:b7:6d:f0:b2:02:39:d0:
97:09:04:19:35:e8:27:08:e5:39:8e:6e:2a:ea:a0:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:95:8E:E0:0A:BA:4E:07:7B:29:88:98:8A:E5:CB:F3:84:7C:49:F4
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:93:fe:70:83:ac:52:84:e0:83:0e:63:d9:a0:93:c2:8f:1a:
2d:44:0d:f2:b3:d2:22:37:5e:70:12:bd:1f:24:80:0f:9e:9f:
b1:d6:e1:bf:92:2f:5c:d6:7d:04:f4:c1:97:cf:01:cc:9e:8e:
12:15:b9:fe:33:2a:51:75:62:44:5c:15:89:79:28:a8:be:aa:
73:6f:b9:45:32:93:dc:35:66:e9:8b:68:18:32:d1:8c:9b:6f:
d9:8c:59:66:9e:6c:34:67:f4:c3:7c:75:00:06:46:89:16:ce:
10:04:bf:fd:d2:4e:9c:1f:b1:79:d6:cc:46:b5:10:e3:53:e9:
19:cb:03:e6:39:02:0e:19:ac:f5:6c:ff:87:78:29:dc:cc:81:
6c:a6:b0:3d:01:14:fe:68:c1:f1:61:5b:3a:51:11:3b:fe:88:
4a:99:2b:51:01:6b:b8:93:cd:ea:73:b0:ad:8d:6b:93:94:ff:
77:9a:c2:3e:04:33:5a:e6:1c:2c:e7:10:30:93:95:2d:4f:33:
c9:1a:fe:55:1c:c9:3e:b4:42:69:4f:ef:a8:db:fe:c5:30:e6:
bb:6e:7f:23:4c:b5:17:d2:85:38:9a:32:07:be:3a:ed:ba:a2:
ce:d8:6d:16:e5:ea:ef:b0:4f:6b:4f:ea:47:95:02:76:ef:af:
06:f6:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:23 2025 by rpki-client