Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
File: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft (raw, json)
Hash identifier: uF77Rrq1z4KcFLxcbd/fqW/NfAWKBaD0sS55buSjedM=
Subject key identifier: 66:76:C2:E7:F0:78:0D:7E:7D:AA:0A:56:19:7E:41:9A:D9:B5:53:85
Authority key identifier: 09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
Certificate issuer: /CN=0963491cd67570b0783b400161c0adcaa002f0db
Certificate serial: 0198D472A677EEF9996CAC936FA23B4B64F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
Manifest number: 051D
Signing time: Sat 23 Aug 2025 01:02:20 +0000
Manifest this update: Sat 23 Aug 2025 01:02:20 +0000
Manifest next update: Sun 24 Aug 2025 01:02:20 +0000
Files and hashes: 1: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl (hash: dI3nyH7xbvIDY0ubfCyWXSw+r4gdUWLWC19I89q0U1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a6:77:ee:f9:99:6c:ac:93:6f:a2:3b:4b:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0963491cd67570b0783b400161c0adcaa002f0db
Validity
Not Before: Aug 23 01:02:20 2025 GMT
Not After : Aug 24 01:02:20 2025 GMT
Subject: CN=6676c2e7f0780d7e7daa0a56197e419ad9b55385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:f3:4c:90:36:5d:a0:2a:78:5a:63:3a:b6:
e4:84:00:39:15:aa:68:6a:79:bc:2a:07:83:26:d4:
b1:29:c2:26:23:13:05:cf:ad:17:38:02:1a:ae:21:
3e:6d:4e:0a:bf:65:f6:df:f7:d8:da:d1:6f:51:53:
5a:26:cd:6a:ba:e5:cc:26:fb:93:bb:39:e9:36:3d:
0f:e0:df:32:ae:84:06:e8:c4:46:af:9d:d6:8e:84:
19:c4:9a:ca:3b:6b:a8:f3:71:4f:54:2d:95:1a:71:
02:e8:2d:ab:e5:81:53:1d:ea:24:44:45:01:4f:02:
13:7e:3f:b9:d6:10:be:49:79:6b:4b:fd:99:3d:d5:
c8:c2:70:56:30:ad:09:e6:22:dd:2e:85:49:e9:94:
2a:51:7d:20:41:cd:7d:08:2c:3d:a5:83:05:ce:c1:
f8:b7:3c:01:30:2f:da:35:6c:55:92:26:77:76:ae:
91:bc:d0:bc:e7:5b:f0:93:de:c5:bd:ed:5e:f5:90:
71:8d:6c:c1:1b:30:79:3f:6c:ca:aa:b9:f3:5b:59:
8d:7f:99:e5:f1:42:9f:82:fd:15:42:18:6f:74:d6:
e4:e6:02:17:55:ee:70:7d:1c:b3:6d:ac:a9:ae:b7:
41:77:e3:b4:78:f4:ed:c7:ea:98:2d:80:6e:02:77:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:C2:E7:F0:78:0D:7E:7D:AA:0A:56:19:7E:41:9A:D9:B5:53:85
X509v3 Authority Key Identifier:
keyid:09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a1:41:24:be:92:ba:d9:27:74:d2:56:54:e4:9a:24:61:be:
48:20:22:6f:36:b4:70:d8:9b:b8:94:a3:71:da:31:90:68:53:
c1:26:d1:d7:47:05:d7:c2:1d:35:24:00:aa:aa:86:78:47:d7:
d2:c8:24:bf:43:d7:30:4c:3c:1e:87:f2:9f:c3:39:cb:2d:14:
9c:fe:e1:19:37:2f:ad:40:31:4c:39:6b:ea:38:f9:5e:6f:59:
be:56:4d:e0:01:ec:aa:a3:c8:07:cf:bd:9e:9b:1c:71:7b:d6:
8d:96:10:ea:f9:4d:e0:8a:55:db:20:2b:e6:c6:a4:4f:a2:48:
bf:b3:d8:78:3e:23:e1:e2:cc:ef:3e:c4:11:34:48:b6:20:f1:
8e:af:7e:df:82:1e:7d:5d:e7:aa:62:ad:2d:83:e9:21:09:92:
9a:d6:6d:e4:58:3d:3c:9e:4d:18:74:dd:e9:12:60:ee:9d:1d:
4c:2c:66:56:bf:1c:7f:02:52:37:bb:c0:9e:a6:ad:0c:40:3b:
0f:10:d5:eb:d0:62:5e:ad:f3:63:a1:5b:b4:ce:3d:d1:40:5e:
fe:05:01:db:03:d2:af:ad:16:15:a4:58:83:93:05:59:cc:1d:
78:d3:e6:9d:7a:58:99:d5:78:bd:77:92:3a:60:24:b8:e8:16:
f5:87:43:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcqZ37vmZbKyTb6I7S2T4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjM0OTFjZDY3NTcwYjA3ODNiNDAwMTYxYzBhZGNhYTAw
MmYwZGIwHhcNMjUwODIzMDEwMjIwWhcNMjUwODI0MDEwMjIwWjAzMTEwLwYDVQQD
Eyg2Njc2YzJlN2YwNzgwZDdlN2RhYTBhNTYxOTdlNDE5YWQ5YjU1Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbzzTJA2XaAqeFpjOrbkhAA5Fapo
anm8KgeDJtSxKcImIxMFz60XOAIariE+bU4Kv2X23/fY2tFvUVNaJs1quuXMJvuT
uznpNj0P4N8yroQG6MRGr53WjoQZxJrKO2uo83FPVC2VGnEC6C2r5YFTHeokREUB
TwITfj+51hC+SXlrS/2ZPdXIwnBWMK0J5iLdLoVJ6ZQqUX0gQc19CCw9pYMFzsH4
tzwBMC/aNWxVkiZ3dq6RvNC851vwk97Fve1e9ZBxjWzBGzB5P2zKqrnzW1mNf5nl
8UKfgv0VQhhvdNbk5gIXVe5wfRyzbayprrdBd+O0ePTtx+qYLYBuAncFKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ2wufweA1+faoKVhl+QZrZtVOFMB8GA1UdIwQY
MBaAFAljSRzWdXCweDtAAWHArcqgAvDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yYTU3NmQtZDNhZi00NjRjLThkYTkt
YzkzMTY5YTA4ODgzLzEvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8yYTU3NmQtZDNhZi00NjRjLThkYTktYzkzMTY5YTA4ODgz
LzEvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqFBJL6S
utkndNJWVOSaJGG+SCAibza0cNibuJSjcdoxkGhTwSbR10cF18IdNSQAqqqGeEfX
0sgkv0PXMEw8Hofyn8M5yy0UnP7hGTcvrUAxTDlr6jj5Xm9ZvlZN4AHsqqPIB8+9
npsccXvWjZYQ6vlN4IpV2yAr5sakT6JIv7PYeD4j4eLM7z7EETRItiDxjq9+34Ie
fV3nqmKtLYPpIQmSmtZt5Fg9PJ5NGHTd6RJg7p0dTCxmVr8cfwJSN7vAnqatDEA7
DxDV69BiXq3zY6FbtM490UBe/gUB2wPSr60WFaRYg5MFWcwdeNPmnXpYmdV4vXeS
OmAkuOgW9YdDDg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:19 2025 by rpki-client