Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
File: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft (raw, json)
Hash identifier: K7hAGAuI7ONw5Bo1H9Ma541iJik8JBUKdbPOlNC2Lgc=
Subject key identifier: 89:D1:E2:82:B6:9F:8C:50:26:64:FF:96:42:0A:B5:05:DB:1B:22:8A
Authority key identifier: 09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
Certificate issuer: /CN=0963491cd67570b0783b400161c0adcaa002f0db
Certificate serial: 0197B6A1A6F6A496048EE90D0651E921AC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
Manifest number: 0489
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl (hash: rQbWgD0dYX5QIQJiGFvePcfJkEp41LCKwPLwJAynurc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a6:f6:a4:96:04:8e:e9:0d:06:51:e9:21:ac:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0963491cd67570b0783b400161c0adcaa002f0db
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=89d1e282b69f8c502664ff96420ab505db1b228a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:e1:19:59:ba:50:70:d7:69:b6:27:09:6a:
54:45:0a:16:de:24:55:26:6b:d7:87:b0:65:e5:94:
31:75:de:f2:4d:b7:c2:b3:61:ec:56:90:83:78:66:
b3:17:80:a2:52:1b:5b:30:16:53:f4:a8:37:5b:6c:
6b:78:0b:f5:39:97:c8:f9:72:d5:71:e0:12:d7:0d:
7f:79:24:01:5e:16:90:00:83:48:ba:f0:72:19:88:
f8:59:24:c9:21:d1:4b:ff:52:d6:a5:2b:fb:df:ad:
59:f3:3a:6e:dc:b6:d5:12:05:e3:a0:f3:83:0e:62:
38:02:fc:e5:3b:71:c6:06:bf:6e:94:e7:a2:20:72:
eb:52:ed:97:66:61:09:ce:fd:52:ca:df:da:2b:7c:
72:03:2a:66:28:81:a6:9d:f7:71:af:76:c1:24:cc:
df:b4:15:43:75:62:95:8e:bf:db:0d:8b:95:93:6b:
ae:ec:17:02:38:17:67:18:6e:9c:d5:86:18:f9:65:
72:db:bb:41:a4:a6:59:c5:65:ab:50:1f:27:23:74:
e5:fd:a3:cf:73:d6:35:84:7a:f7:06:52:d6:09:50:
45:8c:83:91:85:db:f6:d6:37:c3:22:b5:d6:61:45:
05:d4:78:d2:45:8a:09:46:82:7d:1d:74:33:ce:5d:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:E2:82:B6:9F:8C:50:26:64:FF:96:42:0A:B5:05:DB:1B:22:8A
X509v3 Authority Key Identifier:
keyid:09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7c:96:ca:c5:48:b2:5d:20:c0:f4:70:be:5a:9d:8c:20:04:
ae:02:fc:3c:17:7d:5f:26:9d:28:17:71:ab:f7:6d:f9:e0:f9:
2a:30:93:67:d6:ce:79:d9:5b:39:cb:d9:f3:7d:e7:6c:ea:35:
dd:e4:4a:95:97:53:84:84:0e:67:d1:3a:4a:da:b6:65:cb:0f:
fa:b2:15:87:a9:20:04:46:41:03:03:3a:b6:f5:87:29:0b:1e:
2e:13:38:ea:69:09:5a:cf:19:8c:35:5c:54:82:f9:84:bf:db:
8d:c0:00:e0:8b:21:b6:53:21:21:d9:82:a1:72:18:dc:8b:3c:
69:98:c3:5c:db:a4:22:37:33:c3:59:f2:6e:03:ee:48:22:55:
64:ff:6d:a2:ed:1e:4b:88:ae:25:3a:0a:3c:0e:eb:4c:83:89:
d9:ff:fd:af:32:2d:4c:b9:16:81:42:9e:ae:ed:e7:ea:25:f1:
a9:a3:53:d8:bf:ce:b5:14:cd:d1:b1:ca:23:f5:2a:8b:59:09:
da:ed:c4:e3:4c:87:d0:d8:23:f5:d7:50:58:2b:4a:7d:1b:f5:
df:d7:be:3b:02:c5:32:c3:79:49:3d:fd:52:d9:1a:85:0e:82:
07:73:85:2c:77:49:5b:73:91:1c:e9:af:2c:b8:c3:10:76:d8:
e5:da:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:10 2025 by rpki-client