Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: B0EXiJAMYFi0e6JTmv+52sp3LgwW78ZJ8QwpS/q3pDM=
Subject key identifier: 4D:BA:15:E3:C8:FB:D1:76:49:36:78:92:14:71:79:E0:61:2E:C0:41
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 0198D5158191DE50060F5A6F6F84539232F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 15B4
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: U5UrLo5NpQN+hwUhm6Lv3j+bU3fvbAUmx3z1HKwBmU4=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:81:91:de:50:06:0f:5a:6f:6f:84:53:92:32:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=4dba15e3c8fbd17649367892147179e0612ec041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:e4:27:a4:ae:d8:6b:e3:e3:4f:35:ad:fd:
17:5c:fc:ba:b3:16:6d:a5:cc:98:d2:61:30:32:c0:
90:5b:dd:24:1e:5c:5b:c7:bc:6f:e3:90:08:3f:c1:
e2:bb:a0:8a:d9:c0:11:51:54:12:fd:7d:14:9e:70:
b7:5f:c2:3a:fb:47:a7:37:fb:ae:f4:f4:9e:41:0a:
4e:b6:78:12:62:c9:cf:a3:63:d6:f0:df:97:c4:c5:
e6:0f:2c:7a:96:0b:00:67:36:38:65:69:31:02:14:
ed:16:74:d6:55:42:f8:82:2d:b5:a3:de:d2:4f:64:
0c:cf:66:84:8a:be:4c:b0:7d:ec:1a:c9:e7:db:30:
74:7f:f6:e7:4b:40:6c:f5:9e:26:d6:73:a1:8c:ac:
8b:2a:d7:58:8e:e8:b9:9d:7f:01:78:33:23:07:6d:
43:dc:f3:92:2e:a4:c8:99:52:b5:7d:e0:22:b4:f7:
1c:7b:b8:87:8c:2a:87:50:1c:aa:4b:91:8c:5b:72:
d3:62:41:8f:29:76:d3:b4:d5:b0:e5:a6:5e:d4:cf:
af:a1:df:73:8b:03:15:91:f1:7c:1a:99:74:b2:4b:
02:42:8a:b2:8f:06:e9:1a:44:c0:a9:90:87:df:92:
14:d0:6c:7e:bc:9b:f9:2b:32:4e:6a:58:54:0c:7e:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:15:E3:C8:FB:D1:76:49:36:78:92:14:71:79:E0:61:2E:C0:41
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:40:8d:25:07:93:71:af:a7:82:fb:71:34:b6:c0:e2:5c:c4:
e6:b3:67:fc:3e:2a:d4:7c:49:18:4a:8c:67:fd:7e:88:e3:d7:
9d:df:eb:3d:12:01:b5:7a:79:53:c1:19:ef:dc:58:fc:59:de:
9b:d3:80:d0:d7:76:e6:a7:01:cc:c4:81:4b:6c:85:b2:fb:1d:
8f:0e:35:05:0d:2f:cf:a1:e3:5a:bc:d0:57:14:cf:75:f2:54:
bd:52:95:90:87:a0:32:3e:68:63:69:b9:78:ff:dc:8f:15:ac:
66:2e:76:f3:99:39:92:ea:5c:03:04:9b:3a:b9:cd:12:31:0b:
20:7e:9a:72:a7:2a:a4:b8:23:f7:c1:df:52:f7:67:fb:16:a9:
ca:30:70:b4:e7:10:39:fc:08:b5:12:72:a5:6b:41:cd:f2:d1:
e7:57:5e:42:26:e9:c1:a0:51:d0:81:90:d9:77:43:da:ad:e3:
9c:ec:7e:a9:d6:35:00:39:e5:fc:81:e4:e4:bb:78:62:3c:96:
0c:1f:de:02:42:37:7a:cf:22:3d:c6:41:20:47:ed:96:5e:7e:
57:ef:12:13:74:ac:22:8a:29:79:62:ec:61:0e:60:77:f9:9d:
24:ab:c3:b1:70:2e:ee:3b:49:d8:f0:78:fb:1f:15:3a:b6:67:
fb:98:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:02 2025 by rpki-client