Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json)
Hash identifier: OZCq6Mxs6whCR6PMajGg/uhQOBPjrplF8f8KDTKp4TM=
Subject key identifier: A6:EC:EE:51:9F:34:DD:1B:AF:91:4F:88:F6:F2:82:93:64:D3:E1:0E
Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Certificate serial: 019A722667EA9023AD96DCC6AA57308E2A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
Manifest number: 0181
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: catZXWW+/oc8a/dPCF8kOLmgmZuAAM9w/MQmbPgCzUA=)
2: mS5T_cqTnts2Ow3HYiSE22YiT8g.roa (hash: sSwxiZE98c89qQIhPm+kPgJf9ui8k5AIvLj+CG+uA/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:67:ea:90:23:ad:96:dc:c6:aa:57:30:8e:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=a6ecee519f34dd1baf914f88f6f2829364d3e10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:74:69:a8:a9:2f:d6:82:eb:8a:06:89:e6:
31:27:85:5d:a9:36:aa:e7:0c:47:4b:72:43:9a:f2:
07:3b:2e:a4:e5:9c:00:09:6d:dd:b1:74:0e:47:3e:
65:cf:cb:b9:d1:5e:df:f8:23:39:7e:7f:79:90:24:
f2:67:85:9a:de:cc:25:af:da:ae:95:7f:6b:42:26:
03:94:8b:3a:ca:20:c6:85:a8:77:10:23:0b:2c:aa:
30:36:45:bc:b9:2b:31:35:0a:62:c7:2c:34:5a:20:
da:bf:85:b8:34:0e:fa:c0:43:51:1d:30:b4:11:a4:
ae:3e:6d:de:bb:f4:13:50:be:4c:1f:95:40:da:ee:
fe:31:1a:a3:16:46:87:83:bd:87:7b:0f:a4:12:18:
c7:e5:ce:be:24:06:2a:2e:d3:df:3c:76:cc:1b:51:
d7:ed:63:43:34:8c:91:4d:bf:12:de:90:36:af:66:
44:61:68:8c:f0:48:d7:62:bc:21:62:e7:bd:23:bd:
b8:44:d2:67:b7:0f:55:01:06:ec:56:42:7c:87:43:
54:c1:1e:6a:3d:f6:6b:a3:90:ca:cf:fe:53:01:10:
28:6a:b8:f8:97:c4:66:61:11:39:6e:44:e1:4e:b1:
df:47:ab:35:4a:ec:c7:66:cb:17:cd:fd:3b:ca:a7:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EC:EE:51:9F:34:DD:1B:AF:91:4F:88:F6:F2:82:93:64:D3:E1:0E
X509v3 Authority Key Identifier:
keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7c:94:13:ea:0b:dd:fb:b8:b5:6b:8b:3e:0c:dc:0e:5f:16:
f0:21:cc:5e:f2:2f:e0:bb:65:c2:1c:93:11:fe:13:13:c3:03:
fd:e1:b8:d6:4f:55:d0:f9:ca:01:b0:a0:c7:05:71:03:82:17:
65:e6:69:f2:db:57:ca:38:ab:aa:1e:64:b6:11:f5:26:f7:0d:
73:52:58:0f:54:5a:f2:61:fe:74:c8:73:63:87:87:57:43:80:
66:01:c4:1a:56:f4:4c:80:fd:18:b3:10:ac:6b:b5:2e:bf:ac:
29:a1:c7:3f:bb:43:de:9d:9e:bb:d6:1e:c8:bb:44:ae:48:81:
68:31:85:f4:74:23:2c:27:cd:78:58:9f:8c:2e:83:fe:19:2b:
d3:3d:fe:57:c4:29:1f:aa:63:85:f8:be:a0:86:4d:1e:e9:c0:
6d:66:83:0e:21:78:48:fe:b2:d2:64:69:b9:52:40:ad:30:4b:
5b:3c:7b:d9:0c:16:9b:25:43:08:8d:89:5f:ca:82:b6:27:1f:
93:36:91:e2:5b:e7:d3:98:f7:82:6d:9e:e6:70:70:aa:71:4d:
8b:9c:b0:c6:17:d5:83:be:b7:5c:f4:d7:13:7b:15:ff:95:1e:
a9:c9:bc:53:92:06:bd:85:af:27:46:38:1c:63:b6:f8:d4:aa:
70:b6:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:46 2025 by rpki-client