
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier: /CGl4X6Qddv1wRDeu48vXUc/Vq/wyGnpdxLTux6TyWQ=
Subject key identifier: 22:8D:FF:34:3A:37:42:57:6B:58:06:3F:BC:57:59:78:0E:84:DD:28
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial: 019922FA152C089F55469057B62216BFCB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number: 12F7
Signing time: Sun 07 Sep 2025 07:00:38 +0000
Manifest this update: Sun 07 Sep 2025 07:00:38 +0000
Manifest next update: Mon 08 Sep 2025 07:00:38 +0000
Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: XotFuMDtT2gl2cIM4dTVkx0fSujeJnM6qbMSQMFFthA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:15:2c:08:9f:55:46:90:57:b6:22:16:bf:cb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Validity
Not Before: Sep 7 07:00:38 2025 GMT
Not After : Sep 8 07:00:38 2025 GMT
Subject: CN=228dff343a3742576b58063fbc5759780e84dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:52:da:53:71:17:20:29:7c:f7:d7:c2:61:
2d:67:82:74:80:ca:f2:e1:ea:27:6b:0b:6b:09:9e:
ba:44:ab:ea:3d:cf:b6:7f:d9:37:ad:e1:d4:ff:6a:
a4:ba:0f:c4:82:d6:f3:ff:a7:71:a2:5d:92:93:9f:
82:e5:d6:13:a0:37:ab:90:81:55:a9:9e:2f:16:f1:
f3:4f:79:a0:4f:d6:d6:df:3b:fa:be:5c:f6:df:1e:
ec:10:f3:36:88:b7:44:85:3a:a7:3f:27:02:a0:ab:
e4:3e:b2:26:9e:5c:c4:b8:47:4f:c4:1b:d0:82:84:
93:55:18:ef:1a:39:9a:b3:36:70:44:09:4d:95:da:
2d:b5:90:9d:f4:eb:59:11:5b:0f:9d:72:cb:cb:f9:
a8:0b:de:11:72:ca:b8:7e:77:8c:81:30:78:9e:9a:
3b:c4:23:3f:22:fc:22:06:d7:35:64:80:d4:e0:8b:
71:e8:47:7c:7f:32:b7:20:42:ab:4c:fe:b6:05:4b:
42:09:cc:fe:67:9e:fc:f1:ac:35:7c:b9:b9:bb:79:
02:5d:2d:19:ea:e9:45:c2:99:55:da:6d:6a:e4:43:
66:d5:7b:f0:55:94:8d:48:73:85:d5:aa:42:d9:5c:
e2:56:a1:10:f0:75:b3:75:a8:36:12:73:51:ed:ad:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:FF:34:3A:37:42:57:6B:58:06:3F:BC:57:59:78:0E:84:DD:28
X509v3 Authority Key Identifier:
keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:62:f0:b6:93:30:5e:6c:26:99:fa:ba:7d:1d:b6:cb:32:
d0:3f:b6:8c:4c:f1:80:5f:09:a8:63:e3:56:85:80:27:5b:c4:
d8:e1:8a:a1:ca:3b:f8:08:1d:9f:16:c0:f2:77:fb:a9:f7:03:
f9:e9:85:e5:29:49:7b:72:7d:14:80:8e:78:21:9f:bd:0d:ad:
6d:32:14:3f:79:9c:82:97:ba:13:db:24:b3:46:33:fb:6d:b7:
cb:65:0c:f3:a5:02:7b:60:54:75:d7:63:a6:0c:d1:46:a7:56:
df:2a:b9:8d:a1:0e:7b:8f:5b:61:a6:d9:ea:05:9b:72:9c:6f:
36:32:2a:6f:24:02:93:77:65:8b:7b:db:48:d5:58:00:44:97:
e1:81:13:b6:2d:45:f2:c6:87:07:70:9d:9e:67:21:62:1c:c7:
af:5b:1e:83:a7:66:60:39:d6:bb:35:e9:9b:ee:48:3c:6d:32:
c6:04:84:5e:f0:8a:d8:22:8b:b9:48:ae:bc:28:3f:96:49:b3:
db:b0:c5:f2:09:82:62:12:05:e9:79:af:e4:61:d2:38:65:f7:
d5:69:af:7a:e2:c0:9f:9b:96:e7:45:7d:cc:4e:71:7d:00:fe:
bb:ab:af:91:7f:f5:b4:ab:18:db:83:a1:66:dd:2d:e7:00:08:
ab:98:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:12 2025 by rpki-client