Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File: cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier: sXGsTrfzy0iO/XckFDTAVYoNUycHWmzWsMH/zjqoaig=
Subject key identifier: 63:3D:B9:D9:5B:9F:6C:94:07:87:6C:55:A5:37:1B:C5:A2:CB:F6:EB
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer: /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial: 019A7293D06E76F46FEF48D6AC5CCE55611A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number: 03BA
Signing time: Tue 11 Nov 2025 11:01:20 +0000
Manifest this update: Tue 11 Nov 2025 11:01:20 +0000
Manifest next update: Wed 12 Nov 2025 11:01:20 +0000
Files and hashes: 1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: Pmf2vfM1sxeqEZmzGYqzwNXmVYSnvB5Ha73VsXPNVZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d0:6e:76:f4:6f:ef:48:d6:ac:5c:ce:55:61:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Validity
Not Before: Nov 11 11:01:20 2025 GMT
Not After : Nov 12 11:01:20 2025 GMT
Subject: CN=633db9d95b9f6c9407876c55a5371bc5a2cbf6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:09:11:7c:87:80:c8:45:8e:f3:1c:34:a6:
fb:3b:f1:d1:0b:7f:43:3f:de:0b:de:c8:8a:a3:94:
44:c6:f7:a7:71:36:64:75:ad:71:7e:6d:ec:14:a6:
a9:b8:e6:5c:b9:37:80:8f:fc:0e:ff:53:46:b7:a1:
21:db:02:29:1a:5a:2e:25:9c:f7:9f:42:a6:9a:d4:
cc:51:46:30:93:55:d3:c3:52:dc:42:23:d6:76:1b:
f6:ca:3e:3e:47:25:98:78:04:59:3f:c9:4c:1e:f0:
e2:96:fb:d9:95:fa:bc:31:00:e6:66:06:20:9e:8f:
b2:20:45:4b:67:81:ef:c7:45:ef:3d:d0:f9:28:19:
9e:9d:31:46:1b:29:4d:60:67:31:e9:af:50:d0:29:
7f:82:96:51:76:4a:df:0c:04:c8:fc:b5:f6:ba:11:
22:2c:ea:9c:1d:7d:b7:2e:a2:1e:a4:e5:7e:3a:03:
65:67:44:7c:c3:e5:af:a6:d1:6e:f4:1d:a3:c6:8d:
d7:32:8e:4d:12:fe:58:08:6f:e2:82:4d:50:ce:07:
b9:63:e4:05:4c:ce:e6:b1:a3:c7:da:da:1e:8e:0a:
62:32:b6:6d:86:7f:32:bb:64:cf:52:2f:43:91:bb:
38:08:33:e1:d0:1b:3a:03:17:53:51:65:19:21:22:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3D:B9:D9:5B:9F:6C:94:07:87:6C:55:A5:37:1B:C5:A2:CB:F6:EB
X509v3 Authority Key Identifier:
keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:af:7a:64:3b:fd:12:b4:e8:f7:95:fa:d8:1c:c7:7a:c9:a1:
e3:28:ee:45:b4:12:0e:e5:c3:ad:b2:f2:de:a9:cc:b0:93:32:
f2:ba:0a:f4:49:4d:bd:9e:57:da:f1:63:eb:16:33:81:a1:31:
43:31:3b:80:c2:80:fb:45:18:81:b3:6c:35:6c:54:8c:2f:74:
95:e1:b7:a3:90:e5:1c:05:f9:ab:3e:59:9b:17:88:bd:7d:bc:
71:0c:c1:a5:88:ca:d8:9f:f1:04:69:0f:6a:c6:db:ad:46:79:
69:f9:f6:d1:07:ef:4a:6c:5b:27:bd:5e:5a:ab:60:8a:54:85:
3a:70:0c:e7:fb:83:f0:5f:3d:e9:e8:20:c5:eb:ef:d9:05:23:
9a:0e:9f:1c:9d:16:36:11:35:a2:15:0f:4f:87:53:ae:1e:e4:
74:b9:16:2a:df:20:1a:ea:10:88:84:c4:c7:2a:65:a7:43:a3:
ae:88:11:fd:e4:cf:d3:67:6a:7b:8a:4e:ce:d4:93:88:c3:0b:
06:9c:53:68:f6:04:64:f5:be:8b:78:0c:81:87:ba:82:0e:0a:
57:95:31:23:b2:cd:45:a6:14:db:ff:3c:35:6a:9b:d6:d0:77:
eb:e7:3c:41:72:95:ce:99:6d:21:84:4a:ea:38:3b:36:55:d9:
63:6e:8e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:52 2025 by rpki-client