Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: xXWSXcbATceC9AacukLwpEj84ij5D1X7kEYzZx6Tg1w=
Subject key identifier: 81:71:05:27:D4:92:49:31:69:06:2D:0D:0D:56:CB:16:01:88:8A:5F
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 019847778386B4A54E56000651E00407C1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:01:11 +0000
Manifest this update: Sat 26 Jul 2025 16:01:11 +0000
Manifest next update: Sun 27 Jul 2025 16:01:11 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: lkTXuY2Qm0Qv5DYqNMLPb6CLhMhEKQd/rI16Of5P2IU=)
2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:83:86:b4:a5:4e:56:00:06:51:e0:04:07:c1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Jul 26 16:01:11 2025 GMT
Not After : Jul 27 16:01:11 2025 GMT
Subject: CN=81710527d492493169062d0d0d56cb1601888a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:58:b0:57:ef:a0:24:3a:5a:df:f9:58:a2:
55:7f:51:60:f1:9a:4c:44:00:23:85:31:b8:e0:f7:
6b:98:bf:c2:1a:19:0b:42:85:a5:e8:8e:57:a4:4e:
b7:c3:0c:01:ba:a3:e5:3d:41:14:c6:62:0b:52:51:
59:48:c5:b7:41:fe:b6:16:2f:c1:aa:bb:30:c1:cd:
9c:a8:ea:b1:cb:18:c6:08:9b:a0:d1:78:a1:c0:44:
f0:77:9a:93:74:b3:45:29:98:06:a9:f1:5d:8f:fe:
cf:4e:b7:5e:58:2b:a6:d0:8d:6f:03:ed:b8:d7:22:
6d:92:ad:c8:a3:30:81:20:af:63:3e:df:59:50:cc:
36:94:af:bd:36:c4:ff:f1:8a:c1:9c:cb:ce:46:fa:
92:92:15:3c:78:7b:fc:7e:91:26:cb:40:5d:88:81:
6f:0a:27:3d:3d:9d:cd:9a:87:24:14:0f:7a:70:93:
af:b2:16:17:95:8e:2c:f8:96:a1:32:b6:58:8a:f8:
02:f0:28:44:40:38:1e:c0:9d:9d:a5:40:38:59:8d:
34:e7:2a:f5:dc:8f:a3:48:32:c9:46:40:7f:dd:b6:
bb:40:01:f4:4a:97:c4:63:30:5c:56:a8:21:6e:b4:
5e:31:09:35:bc:d7:c5:80:d1:34:38:21:05:51:9c:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:71:05:27:D4:92:49:31:69:06:2D:0D:0D:56:CB:16:01:88:8A:5F
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8f:99:3d:47:3b:32:e8:8a:ac:fb:c2:03:a6:15:25:1e:26:
25:11:40:21:ff:b8:92:4a:0f:0a:c8:26:a9:e9:a5:1b:4e:b4:
7a:e1:52:9a:5f:da:c3:4b:46:cc:a5:1d:0e:a9:de:38:d4:0b:
62:44:4e:c2:7c:9a:a4:d6:d4:ca:83:56:b4:57:e6:55:ac:97:
8c:a8:3d:65:93:12:91:2a:73:e1:da:78:d6:29:57:51:a8:9f:
ec:5b:84:cb:e8:64:42:c6:5a:d0:3e:bc:2a:58:4c:be:35:e8:
dc:07:08:5f:38:30:06:66:ae:64:70:39:56:00:4f:dc:fd:ac:
10:70:a5:ef:3e:78:1c:66:12:c4:bd:ee:f3:88:74:0b:a2:45:
7b:1b:81:ab:01:41:8b:a2:78:b9:a2:c9:18:1f:90:23:2c:55:
14:6e:12:d0:65:c5:5d:17:7c:bd:61:9a:eb:77:95:83:16:c0:
2a:46:38:73:18:8a:9e:84:c5:0e:53:41:d0:53:a4:96:23:4e:
5e:64:7f:2f:8c:ed:59:33:7d:23:a2:c6:85:42:96:d0:ea:e7:
37:24:96:6c:ad:52:f4:b0:d8:7e:d9:4d:11:5e:f0:a7:1b:50:
b2:97:b3:71:49:8b:9c:c8:19:08:f7:94:ae:f7:60:16:66:f8:
54:64:bd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:37 2025 by rpki-client