Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: opIc0v3EdUWSm5Ep6RpAm7UKkJfk95XMgolU1rj0zw4=
Subject key identifier: 5A:79:39:DB:E4:49:B0:95:B3:24:BC:3D:8A:99:49:1D:4B:2D:84:73
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 0197B745603AB7E31B420FF2C95BB31601A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1520
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: Q6XN7menBiX45IBCQKzR9Ww9H3tCNuZu9qBkQyg9cIE=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:60:3a:b7:e3:1b:42:0f:f2:c9:5b:b3:16:01:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=5a7939dbe449b095b324bc3d8a99491d4b2d8473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:51:a4:2f:cb:68:fc:ce:1f:b1:5c:ec:0b:
24:c3:88:79:02:33:9c:db:da:0d:68:5c:77:a8:5a:
bc:f5:2f:0a:c4:cb:7c:ca:28:0c:ea:be:64:70:ec:
3d:23:88:ea:69:9a:9b:28:0a:d9:ea:b1:c1:6e:33:
d6:59:d8:63:13:72:4c:33:b8:05:fc:27:85:9e:d8:
a1:6d:ad:a6:18:96:ec:37:62:ff:e6:d8:9a:69:37:
2c:47:98:93:d8:35:19:2a:ea:c8:25:fc:58:5b:c3:
80:30:2b:d4:fc:e3:95:5d:e9:8c:bb:5a:d0:57:09:
71:19:4e:11:26:cd:d4:7c:d6:32:cb:51:f2:1b:6d:
85:bc:47:e3:8b:e8:e4:ff:79:38:4d:4f:89:9b:8c:
72:bc:a2:ad:12:65:c5:7f:1f:d8:02:20:2b:9a:8e:
05:38:75:99:24:1f:ed:1d:f2:27:34:cc:26:07:f0:
e8:e8:ec:cf:33:00:d2:1d:2a:05:4d:05:d0:48:e9:
70:0e:7b:6d:33:27:69:dc:35:03:f7:2b:c7:60:db:
c6:b5:91:63:53:22:a9:01:1b:73:eb:4c:b6:57:cf:
44:05:d8:9b:57:bc:e9:59:6f:b2:40:ec:93:6b:ae:
9d:73:40:58:7a:f1:95:a5:2b:13:be:f1:db:60:ea:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:79:39:DB:E4:49:B0:95:B3:24:BC:3D:8A:99:49:1D:4B:2D:84:73
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:12:2b:07:bb:f7:35:15:05:f1:22:e2:42:3c:2b:32:b6:80:
14:86:63:2c:c3:4b:61:72:92:e3:44:7c:f1:c0:a2:df:d8:b4:
13:42:9d:86:b0:21:ac:3c:5b:30:17:c3:a8:c5:2c:54:d2:0c:
5d:b8:d2:67:85:db:0f:a1:57:fe:1a:78:f2:a5:24:fa:0f:fe:
d7:84:8f:d3:97:cb:1f:d0:4d:bd:af:b4:ae:e4:e8:b9:af:a8:
d3:98:7f:df:81:e7:20:78:f1:59:0f:67:d5:aa:77:9b:82:ed:
55:da:74:46:76:35:31:c1:cb:83:f6:a3:5e:51:77:ab:86:d4:
8b:65:94:60:2a:ed:f1:d7:b8:90:a3:c9:b1:8c:8e:82:54:3e:
93:f9:3d:c5:83:a8:35:a8:6f:c5:27:15:e4:bb:81:9e:aa:af:
e1:a4:e5:a3:37:a2:1f:48:a1:20:85:09:be:3b:06:1f:d4:4c:
1d:f3:b0:75:db:b5:93:8e:40:1f:38:62:f2:66:20:d7:06:b3:
44:83:c8:44:ce:7d:4a:3f:b4:dc:34:5b:f6:bb:d0:02:20:30:
74:72:f4:f2:85:0e:2d:fb:c4:48:ca:74:cb:49:25:75:50:4e:
0d:0d:76:f4:94:90:c0:40:79:e3:c7:23:2e:5d:cf:1d:ba:39:
1c:f9:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:03 2025 by rpki-client