Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: HmHz51uHRpIs147nMoTYvvRoARjKJJhki844E4F5yTM=
Subject key identifier: 26:C1:A7:E5:5A:69:3A:73:E1:C7:7F:A9:82:A4:BF:5D:8A:B6:97:F9
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 0198481B720B4988CB020E1D8A38BA4BEDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 156B
Signing time: Sat 26 Jul 2025 19:00:14 +0000
Manifest this update: Sat 26 Jul 2025 19:00:14 +0000
Manifest next update: Sun 27 Jul 2025 19:00:14 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: 3OlFYSCbyyzrgSJoSTrYMv5Z7CDrgtZV/Ga/WoZ4O3k=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:72:0b:49:88:cb:02:0e:1d:8a:38:ba:4b:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Jul 26 19:00:14 2025 GMT
Not After : Jul 27 19:00:14 2025 GMT
Subject: CN=26c1a7e55a693a73e1c77fa982a4bf5d8ab697f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:65:34:fe:01:72:74:65:35:7c:aa:86:f7:91:
e1:80:5e:91:ab:6b:e4:1b:c0:c8:4d:66:29:58:44:
70:cf:96:dd:43:09:b4:1a:64:8a:7d:f7:53:97:17:
f4:12:2d:36:34:a5:1d:07:3a:5b:58:cd:44:22:68:
9c:9d:3d:8c:10:26:a3:77:f6:4f:a0:c5:c5:00:bb:
f7:6d:d6:34:cb:7e:19:bd:24:50:a1:cb:37:07:68:
15:2d:9d:72:a2:5d:59:d5:d8:0e:2a:44:ce:c2:6e:
c7:55:45:55:40:50:d8:ca:6d:eb:37:db:21:20:c7:
dc:9a:b0:d4:32:6a:e8:29:92:03:21:f7:31:ce:25:
bc:65:a3:28:6f:3d:30:61:6e:f4:d0:f9:bd:54:39:
6e:39:6f:f8:dd:d5:fe:c7:0d:38:ca:02:25:47:cc:
7b:eb:16:5f:ae:8b:17:50:e5:a9:8a:50:78:7c:79:
9a:f5:6c:b3:a1:34:d3:7e:9f:93:2c:39:58:40:9e:
0b:6c:46:28:4e:d1:fd:ed:84:93:b3:45:1a:3a:0f:
14:f0:3d:7d:7d:55:68:c7:bb:c9:8c:26:15:20:07:
88:42:76:a3:2a:1a:48:82:ba:2a:62:f6:f4:25:1e:
f6:dd:9c:1a:51:9b:79:27:eb:19:31:1c:df:1d:03:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C1:A7:E5:5A:69:3A:73:E1:C7:7F:A9:82:A4:BF:5D:8A:B6:97:F9
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:74:29:1d:c8:5c:b4:74:73:40:97:61:2d:a9:98:07:dd:22:
7c:e0:c7:31:f0:92:d6:ac:e3:df:92:bb:9f:71:34:dc:52:81:
66:3a:05:98:31:66:be:63:ad:a8:e5:8a:92:14:19:8e:49:d1:
fa:3d:d5:53:38:b4:ba:57:d1:b6:f2:06:96:23:4e:9d:74:fa:
5e:eb:50:39:c8:52:e6:91:52:9c:26:6e:9b:1a:48:b9:aa:b7:
48:a2:3f:5d:1c:7e:fc:3d:0d:f5:3a:de:d3:61:08:b3:2d:57:
9d:36:8c:3e:19:ad:e3:3d:64:ec:44:cb:1d:1a:24:b9:4f:de:
9f:bb:ea:13:03:5c:28:bd:c7:98:3b:ba:7a:db:c6:8b:bc:8e:
ed:ae:27:a5:e3:8d:a7:38:a0:24:be:54:4c:05:b2:f8:60:6e:
66:cf:65:f5:74:7d:1f:1e:07:1f:95:bd:a2:5c:92:cc:7f:17:
1b:f7:83:f4:58:ee:27:f2:68:ad:c2:d0:75:8c:1e:ee:b6:86:
55:b3:60:e3:49:26:d1:33:10:bd:f0:28:f4:0d:3b:75:d4:04:
b3:07:ab:25:a5:a1:13:ad:08:bb:ab:00:c8:41:90:a0:5f:34:
25:b4:bc:01:1b:5e:44:d3:1e:05:32:17:99:b7:a4:98:a5:cc:
5a:60:06:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG3ILSYjLAg4diji6S+3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3
YzFmZTIwHhcNMjUwNzI2MTkwMDE0WhcNMjUwNzI3MTkwMDE0WjAzMTEwLwYDVQQD
EygyNmMxYTdlNTVhNjkzYTczZTFjNzdmYTk4MmE0YmY1ZDhhYjY5N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2U0/gFydGU1fKqG95HhgF6Rq2vk
G8DITWYpWERwz5bdQwm0GmSKffdTlxf0Ei02NKUdBzpbWM1EImicnT2MECajd/ZP
oMXFALv3bdY0y34ZvSRQocs3B2gVLZ1yol1Z1dgOKkTOwm7HVUVVQFDYym3rN9sh
IMfcmrDUMmroKZIDIfcxziW8ZaMobz0wYW700Pm9VDluOW/43dX+xw04ygIlR8x7
6xZfrosXUOWpilB4fHma9WyzoTTTfp+TLDlYQJ4LbEYoTtH97YSTs0UaOg8U8D19
fVVox7vJjCYVIAeIQnajKhpIgroqYvb0JR723ZwaUZt5J+sZMRzfHQNYMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbBp+VaaTpz4cd/qYKkv12Ktpf5MB8GA1UdIwQY
MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt
YmIxZGYxYjNkMzJkLzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk
LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnQpHchc
tHRzQJdhLamYB90ifODHMfCS1qzj35K7n3E03FKBZjoFmDFmvmOtqOWKkhQZjknR
+j3VUzi0ulfRtvIGliNOnXT6XutQOchS5pFSnCZumxpIuaq3SKI/XRx+/D0N9Tre
02EIsy1XnTaMPhmt4z1k7ETLHRokuU/en7vqEwNcKL3HmDu6etvGi7yO7a4npeON
pzigJL5UTAWy+GBuZs9l9XR9Hx4HH5W9olySzH8XG/eD9FjuJ/JorcLQdYwe7raG
VbNg40km0TMQvfAo9A07ddQEswerJaWhE60Iu6sAyEGQoF80JbS8ARteRNMeBTIX
mbekmKXMWmAGyg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:15:13 2025 by rpki-client