Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json)
Hash identifier: +5pcOrgsdMmyV3m4pEsD0+i0JZ3quPNEojZmg8MjXFc=
Subject key identifier: 62:44:35:08:A5:6A:53:70:4C:4A:47:B1:1B:9B:9F:3C:9E:94:CB:65
Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Certificate serial: 0199221EA0835834BF8DA4D7DA2AAA87F587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
Manifest number: D3
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: /4iBsCA4WIk0mIBf94gWoymoH6pwODi61jRn+a/frrQ=)
2: mS5T_cqTnts2Ow3HYiSE22YiT8g.roa (hash: sSwxiZE98c89qQIhPm+kPgJf9ui8k5AIvLj+CG+uA/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:a0:83:58:34:bf:8d:a4:d7:da:2a:aa:87:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=62443508a56a53704c4a47b11b9b9f3c9e94cb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:2f:2b:6c:c4:c5:4b:50:65:26:fa:2d:4f:
c1:0f:7c:de:51:ca:f8:22:7c:b7:88:83:a9:d3:b3:
74:01:a7:50:0b:c0:c2:4f:33:a0:3f:eb:10:90:8e:
3b:ee:b9:9f:18:5d:c3:4b:9c:8c:5d:9a:94:af:7f:
26:51:f0:7d:99:12:77:5f:96:30:9a:61:87:d8:5c:
2c:ba:46:95:40:22:33:57:c9:54:9a:67:8a:35:47:
f3:8f:f6:47:45:89:82:89:af:36:71:43:5a:f9:a3:
74:4a:82:67:31:22:f0:32:c4:b7:02:fb:86:6e:61:
75:01:fc:11:af:01:74:38:21:23:fa:3e:9f:ba:4e:
f6:40:ca:86:e8:e3:2b:19:78:c5:d8:fa:12:bf:fd:
11:9f:14:28:4a:b4:2b:66:6b:2c:1a:42:ea:c2:2c:
c6:66:70:ab:52:e5:10:3d:09:83:fc:cb:df:d4:51:
cf:6f:79:50:0a:6d:0c:ad:5b:69:96:b2:44:dc:b9:
2a:2f:e7:ee:bc:a3:36:cc:aa:3c:5a:80:98:b6:73:
88:e6:81:b9:8b:83:a4:aa:65:54:90:fd:63:70:3a:
93:48:69:0f:63:22:a7:85:1f:8a:41:e5:59:5d:1c:
56:72:6f:2e:f5:2e:31:04:b3:84:9f:55:55:18:de:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:35:08:A5:6A:53:70:4C:4A:47:B1:1B:9B:9F:3C:9E:94:CB:65
X509v3 Authority Key Identifier:
keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:70:ea:de:54:ba:29:ca:9b:77:7c:94:6b:6d:21:8e:65:3a:
04:56:1a:15:f7:67:1f:30:ed:cb:84:c8:de:37:12:1a:47:43:
76:31:10:56:46:42:46:b4:1b:42:b3:5d:29:54:dc:27:d1:ca:
93:e0:b4:5a:2e:ec:ba:51:e1:8b:04:89:9c:79:c0:d1:c8:ae:
a7:34:37:da:43:49:ab:7b:07:52:fb:4e:0b:17:0e:f1:6d:24:
3a:db:1f:be:aa:e0:b6:2d:2d:38:d9:d5:bb:d1:b9:b1:6a:02:
30:e1:9a:03:dc:ec:f9:d4:dc:1d:38:99:e5:55:26:f4:cd:bf:
06:c3:73:47:4c:a3:0b:c2:1f:77:a1:30:e0:7c:95:a2:65:f7:
50:c2:f3:5c:67:f6:79:f2:ea:f5:d1:8c:6f:96:a2:e3:f7:ff:
a2:3a:ec:d2:b6:d4:3a:b1:47:da:49:ad:d7:9c:fb:aa:86:ad:
f4:56:fd:1d:f1:76:a0:84:1a:96:7d:c6:5d:5c:74:06:c8:42:
34:4f:c9:95:1c:46:4f:1d:71:bd:af:da:63:ba:44:b4:23:e3:
ec:d8:2f:0a:dc:2f:5e:94:b5:f7:f0:65:c2:79:c9:27:d3:24:
ea:6b:c3:c8:be:13:69:1f:d9:04:83:e2:1c:e9:0e:91:77:d6:
05:51:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:16:31 2025 by rpki-client