Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: s+yp07jemlJteB0gt94xSwNdopHvdWesFtU7DgwXxVM=
Subject key identifier: 54:84:A3:3F:4F:CA:B6:27:B2:38:9D:32:D9:E3:21:DB:C4:AD:FD:FE
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 0196A6F85E4A552D98E3283CF45810ABAFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1493
Signing time: Tue 06 May 2025 19:00:16 +0000
Manifest this update: Tue 06 May 2025 19:00:16 +0000
Manifest next update: Wed 07 May 2025 19:00:16 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: MYxKsVSmj6AEB5gGZy10bikvYuJtZmKSIT5oBCxhr5E=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:5e:4a:55:2d:98:e3:28:3c:f4:58:10:ab:af:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: May 6 19:00:16 2025 GMT
Not After : May 7 19:00:16 2025 GMT
Subject: CN=5484a33f4fcab627b2389d32d9e321dbc4adfdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:a0:9e:75:1b:64:ee:18:46:a1:74:bc:ac:
78:0f:74:ed:bf:d2:b2:b7:df:bc:58:d4:f1:cc:cb:
c4:31:1a:e0:c3:4e:a6:2f:91:15:96:a4:d5:d4:74:
1b:3b:af:6c:13:94:94:8d:d5:aa:20:bb:32:a2:0f:
47:71:9f:7a:cb:ca:d6:6b:45:2e:d3:99:c9:a6:11:
24:90:c1:44:6f:06:b8:1e:ca:97:2e:4c:cd:52:9d:
0a:d9:07:02:1a:29:2f:75:03:e0:07:ad:34:e2:55:
54:5a:50:33:dd:37:d1:05:aa:55:4d:ce:d0:98:cc:
0a:46:cb:c7:95:bf:76:67:c2:65:da:57:ea:21:44:
8a:76:bd:e3:25:bc:bb:9c:85:a3:61:ee:50:86:e9:
ab:4b:fc:e6:73:24:53:51:fb:0a:e9:cc:40:c6:f1:
9b:ef:10:3b:f3:64:d7:cd:64:3c:72:0c:fa:c6:56:
13:1d:d3:e7:0a:45:8a:b8:c1:7b:d9:30:d4:87:1a:
d3:96:16:d2:b7:7e:a4:cd:13:4a:05:c7:ed:16:c4:
47:38:f1:d4:24:4e:a5:55:1e:36:65:f7:cb:82:3a:
41:7b:8f:a7:f6:94:2a:96:79:de:4d:28:4e:5c:e4:
94:32:d0:e6:8c:75:eb:ba:36:0f:45:27:b6:38:ef:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:84:A3:3F:4F:CA:B6:27:B2:38:9D:32:D9:E3:21:DB:C4:AD:FD:FE
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0d:ff:0b:9c:af:73:91:a2:25:d1:b1:e8:8f:17:fd:ee:0a:
45:ac:76:c0:84:d1:22:a0:5f:c3:4a:64:56:96:53:6d:8a:a1:
14:08:e3:f8:ae:95:fa:c8:e0:2c:02:80:10:de:ef:4a:31:00:
76:0c:4a:43:3e:3f:3b:fa:ed:fb:1d:bd:f8:52:7e:42:8b:97:
75:94:b9:6e:48:4a:19:3f:bc:55:e9:d9:74:b7:4c:73:34:be:
f2:24:a2:ec:6a:30:cb:b6:7a:86:bb:ba:b8:3a:e7:f8:40:57:
f9:2f:7e:07:7c:9d:9f:03:de:bd:9d:96:36:90:81:37:98:0c:
09:a4:af:3e:32:fd:f6:81:e4:e4:18:b4:64:b3:d0:11:3a:ca:
2b:2a:65:e2:e1:40:4f:64:88:c1:c4:0f:fc:f4:fc:f1:06:95:
82:bc:9f:2d:9c:f3:7c:96:73:8d:17:c6:56:12:d4:ed:74:cc:
0a:f7:cd:a0:0b:98:e2:fd:4c:8d:40:d4:b1:1a:19:c1:72:fe:
4f:8f:95:8f:d7:5f:67:68:a3:d3:21:13:cb:d8:1f:6b:96:55:
fd:92:f3:85:c6:2b:b2:f1:33:14:d4:be:00:ab:4d:85:28:a7:
24:c4:1a:15:53:e4:e0:93:79:24:fc:02:57:c8:c2:60:1a:e6:
a3:c5:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:10:32 2025 by rpki-client