Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: Dh7LmkZ4DZLUUfBED9aa9veKzI9w+wYKpfLGnVKg9cg=
Subject key identifier: 37:64:20:35:DF:59:E2:7C:43:1E:5B:00:D9:11:13:AF:2A:80:06:BE
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019A71B79BDE2BEC94E9A69FFCDD29976E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: 0CTPaxVtfCeGW809r2NFAAvEiqdYnPPoBf3/iVnxezo=)
2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=)
3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9b:de:2b:ec:94:e9:a6:9f:fc:dd:29:97:6e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=37642035df59e27c431e5b00d91113af2a8006be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:b2:32:35:c3:06:e8:a3:53:8c:78:47:68:
5b:fc:0f:d4:6e:98:e7:44:57:5d:3d:42:e5:8a:28:
76:2d:6d:c2:5f:2e:28:e6:31:03:76:8c:2d:ed:a1:
23:1d:ab:02:88:63:e2:df:2e:9c:b3:b6:e8:44:a1:
99:f9:67:90:4f:8a:04:eb:07:c7:8a:31:04:f4:c7:
16:b5:80:92:26:bb:02:91:78:6a:ab:a8:ea:18:6a:
84:1c:73:11:46:df:6d:8f:89:d5:1d:8c:2f:c8:9c:
24:7c:60:ce:1b:df:06:ee:62:fa:2f:f0:98:2c:9c:
d1:46:37:b0:ff:73:16:89:d1:74:a8:f9:cc:02:2c:
98:07:4a:dd:6f:f9:2e:8b:03:b1:a6:b6:26:74:43:
0d:f3:ad:95:45:56:77:3c:6c:85:18:92:49:06:52:
a2:15:31:e8:ca:cf:a9:ab:a6:9f:b4:51:b7:33:62:
5b:24:40:19:bf:7d:75:bc:7a:ae:6d:8d:b0:b0:d1:
fa:06:2e:94:8b:69:0e:9f:f5:8c:04:88:eb:af:da:
b0:86:ed:08:53:2f:55:9e:c2:c0:7e:65:ba:b8:a5:
cc:9c:b4:8b:5a:51:85:2c:1b:6b:a1:1e:15:9a:ba:
30:3b:3f:0b:20:46:32:5a:13:a4:ab:fc:74:37:a9:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:20:35:DF:59:E2:7C:43:1E:5B:00:D9:11:13:AF:2A:80:06:BE
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:ac:b8:1b:43:ac:3b:d4:ac:c4:fb:af:cb:6c:6e:b1:16:21:
2c:b7:72:43:cf:e7:9b:20:f8:fa:89:8f:c5:71:96:52:59:ec:
bf:1c:a2:18:3c:9b:8b:82:36:bc:2e:2e:de:cc:c5:c7:29:eb:
f2:8a:06:5a:aa:4f:14:f2:cb:1b:b9:0f:93:86:5f:bf:0b:1f:
4f:bb:39:b2:9a:cf:48:ca:cd:96:44:2f:58:cb:ad:e3:7b:58:
4e:6f:c8:3f:f0:32:cf:22:bd:41:f3:20:22:57:9d:61:ea:ef:
5b:5a:67:9b:99:e1:31:e0:e7:17:31:bd:1a:fd:87:b7:c4:8d:
7d:73:24:9c:40:9b:21:7f:66:4b:1f:d1:76:66:e3:53:60:a5:
26:a5:9a:99:45:b4:df:bc:21:a6:6a:a0:fd:34:c5:6b:80:17:
0e:e3:54:40:6a:8b:35:69:c8:ab:d4:74:c0:a0:c8:7c:85:a7:
65:57:2f:55:99:9b:6d:d3:60:1e:87:33:80:28:79:72:f0:88:
4e:a2:07:1c:65:f9:49:ce:9f:57:b6:0f:6f:94:66:fe:a2:a2:
28:0e:1a:ae:d0:3a:60:ac:23:eb:83:b7:e3:77:0a:7a:30:be:
e6:19:81:a9:e8:80:65:59:aa:70:a9:fb:0f:22:0c:e9:ec:47:
fe:bb:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:16 2025 by rpki-client