Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: XyATSO4tHEcFnOwQCgc6vZk3ID0N2pqQ0jut9O2Ok7I=
Subject key identifier: 94:2D:F8:9F:38:34:04:52:9E:A4:FA:76:FD:A1:AD:E8:B4:AC:1B:64
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 0199C6E9E9DAF52C2B2BE48F9F22D8C88C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 16CF
Signing time: Thu 09 Oct 2025 03:00:42 +0000
Manifest this update: Thu 09 Oct 2025 03:00:42 +0000
Manifest next update: Fri 10 Oct 2025 03:00:42 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: fr9niG9QQS5CcVnJZ/CM63pe0NDTVHzhcB2S2e6MN4M=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:e9:e9:da:f5:2c:2b:2b:e4:8f:9f:22:d8:c8:8c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Oct 9 03:00:42 2025 GMT
Not After : Oct 10 03:00:42 2025 GMT
Subject: CN=942df89f383404529ea4fa76fda1ade8b4ac1b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:fc:88:61:e0:14:b3:c6:2e:2a:61:f4:39:
f0:5b:fc:15:8b:23:85:31:dd:6f:c0:82:9b:ee:13:
4e:ff:2f:48:2a:2f:25:a2:83:a7:0a:16:72:47:6d:
56:0d:74:67:75:63:a7:29:0b:90:63:69:54:32:21:
d5:6c:c4:d5:2b:76:d5:b7:45:9e:a4:47:54:a2:50:
cb:fb:7c:5f:4c:c0:5b:45:f7:5a:23:b6:b1:8e:37:
9f:a7:06:f0:d1:6d:76:c9:9c:29:22:5f:d1:2b:07:
93:40:d1:dd:ff:b6:56:24:7a:a8:4f:9e:51:ff:30:
65:29:4d:4c:09:ee:7a:f2:74:9c:c7:74:4e:a1:bd:
0d:43:20:79:19:4b:81:d2:3e:10:09:46:00:8a:8e:
6e:5c:1f:7d:6c:49:55:73:1f:77:5a:7b:f4:90:dc:
c9:5c:3e:36:50:5e:b9:cc:3b:4b:45:4e:c7:22:08:
63:78:75:1d:a6:e2:af:7c:51:ef:cc:40:b7:b9:06:
f6:a0:b1:53:d7:b0:1a:69:e0:70:28:c7:ec:9d:bd:
b2:c6:29:2b:44:af:42:5c:35:da:ad:4c:14:7e:a8:
c9:e9:47:f0:a6:f2:fb:a3:0d:c6:a2:ec:0d:31:65:
89:dc:25:c1:69:f4:3c:f7:f2:67:e6:33:ad:88:63:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:F8:9F:38:34:04:52:9E:A4:FA:76:FD:A1:AD:E8:B4:AC:1B:64
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:31:df:fe:a7:6e:a1:83:63:f8:80:de:70:08:b2:77:08:0c:
2f:ce:5f:1d:d7:bf:5c:9b:f7:2e:4f:7e:bf:1e:41:2b:72:67:
75:7e:ee:32:44:fb:25:19:75:b7:41:0e:ca:f1:ab:58:b7:8a:
c9:7a:39:c4:2f:50:49:48:1c:21:32:74:d9:04:80:3f:63:04:
b9:a1:6d:97:4c:b8:50:67:a7:7b:f6:85:7f:28:81:89:ae:37:
c0:3b:60:31:c1:2e:07:32:1f:f3:3e:8a:71:e1:83:ef:cd:72:
03:21:45:d6:d9:c3:9d:65:be:55:e3:15:a0:c4:1c:22:68:4c:
92:1d:18:99:97:2d:ba:4a:a0:cd:c5:1d:2f:43:f1:85:ec:dd:
2f:33:d0:e2:ec:c7:36:a5:15:1d:fd:f9:e1:59:ce:c3:ab:0c:
37:0c:54:e9:bd:75:57:96:63:f9:39:5b:f9:36:ae:35:41:a3:
99:14:c2:cb:d9:d3:f9:b5:66:0f:66:f3:85:3f:9b:2d:0a:c5:
54:11:cb:2f:4f:6d:bf:f5:4b:02:8a:6a:81:fd:b3:69:d6:13:
bb:f2:c2:ae:ea:6d:48:a8:82:b5:49:cb:84:98:f9:2b:ac:62:
c6:7d:fc:d2:bd:41:ba:fa:7a:c3:39:c4:c1:80:0c:dc:15:49:
6a:00:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 12:02:31 2025 by rpki-client