Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: HpJrau8w6IRNOJ5NqI6pLyrRtMbg53moNyIk5A7IBqM=
Subject key identifier: B7:C3:4C:85:3B:83:54:8E:63:57:0D:B8:9B:E0:80:10:7F:C1:1C:6C
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 019A71B84D7009ACADD65259D33B84B348C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: aM0mym+6q+91y0i6o31qHPj1+JPHZ+spG5l0yF69yYc=)
2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4d:70:09:ac:ad:d6:52:59:d3:3b:84:b3:48:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=b7c34c853b83548e63570db89be080107fc11c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:9e:91:e9:d4:f4:4e:5d:72:3c:22:19:cf:
67:d9:1b:42:76:6b:09:22:80:bc:55:30:ac:76:95:
3e:2d:be:6d:3f:85:81:82:e1:a6:aa:53:ed:ba:cc:
20:34:89:fd:c5:7e:c9:54:b5:01:b0:47:09:65:af:
5a:63:3b:94:80:07:17:59:1c:b2:4b:e4:51:4c:97:
32:db:35:ca:ef:29:7e:c1:3e:50:37:3a:4a:cc:1e:
b8:d2:f2:55:7f:af:2c:a7:d2:07:35:aa:93:29:c7:
25:2b:a8:9a:df:ab:4b:66:20:63:36:3d:ab:3e:1d:
cc:de:83:01:ee:b2:54:56:d4:19:9f:47:66:f8:cc:
48:63:7d:63:de:90:14:f6:11:37:98:f3:47:02:ec:
ba:4a:8e:25:bb:5f:5c:a8:9c:67:f9:5e:78:de:03:
e1:7d:d9:e9:40:b7:a9:b6:e8:fd:39:c8:04:11:af:
52:bc:70:75:e6:fd:c0:b3:5d:2f:e6:e4:07:24:8d:
f7:ae:0e:95:d9:e0:79:63:ce:47:b0:98:58:e8:b9:
29:86:b9:28:81:69:64:9b:fe:ce:9f:c2:6a:2b:33:
dd:bf:0e:95:f3:54:dd:74:f9:49:d3:9b:ff:de:10:
fc:69:83:10:ee:85:c1:01:58:16:58:7a:88:b7:cf:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C3:4C:85:3B:83:54:8E:63:57:0D:B8:9B:E0:80:10:7F:C1:1C:6C
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c9:a4:00:30:ac:12:68:0d:b1:19:61:ad:db:d3:0a:3e:15:
98:e7:82:cc:1b:be:23:fe:2b:5d:15:46:74:b3:d8:15:2e:87:
21:54:4b:26:6a:c3:7c:94:6b:d9:57:f1:16:e8:a3:b4:90:fc:
d9:1f:67:ba:ed:06:99:e4:33:52:a5:64:52:ab:1a:f9:be:42:
42:7b:a0:08:1c:b0:9a:a8:8f:db:aa:f3:b2:d7:ee:ed:ea:bb:
83:6a:3f:70:01:86:ed:1d:73:81:59:01:6f:86:78:9d:5a:2e:
7f:d6:9c:76:0f:c1:63:35:23:9f:23:42:00:bf:fd:e1:df:8d:
db:db:14:91:5c:a2:93:34:b3:9d:0b:97:b9:6a:8c:ef:38:76:
ee:9f:fd:99:b7:76:82:63:27:c7:bc:2e:05:9a:dc:ee:0b:ff:
f9:4f:3e:46:34:39:6f:05:48:06:62:52:4a:3d:9e:40:d5:02:
7f:de:c0:e4:89:b8:ef:b5:61:a7:b3:ff:7d:94:7d:5a:54:cf:
fc:d9:92:8a:2e:39:55:36:79:b0:d7:4b:dd:a7:da:11:b8:a8:
2b:71:30:b7:aa:23:92:6e:3b:8a:09:af:47:a4:ac:62:c8:c4:
a0:4f:6d:2f:5e:b5:2c:ed:99:e0:b4:c7:77:a5:b3:42:31:d9:
eb:86:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:17 2025 by rpki-client