Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File: cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier: 9VEEWEFTRMXW5EvbrZWxVh0QLkMElxZsdV9Y6NRUFdM=
Subject key identifier: 9C:B1:D0:97:9B:DD:25:17:0C:D3:BE:F9:BD:E3:83:BD:1B:C6:C9:56
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer: /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial: 0199228CDAAD3EE09084B5BA81B08D371FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number: 030C
Signing time: Sun 07 Sep 2025 05:01:20 +0000
Manifest this update: Sun 07 Sep 2025 05:01:20 +0000
Manifest next update: Mon 08 Sep 2025 05:01:20 +0000
Files and hashes: 1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: /AVd44PQmqJmZeE9kmZiEDjX9dR7xh40QN8aEZLkzb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:da:ad:3e:e0:90:84:b5:ba:81:b0:8d:37:1f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Validity
Not Before: Sep 7 05:01:20 2025 GMT
Not After : Sep 8 05:01:20 2025 GMT
Subject: CN=9cb1d0979bdd25170cd3bef9bde383bd1bc6c956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:7f:e5:d5:32:60:fc:df:ff:dd:6e:a3:a0:
c3:90:f2:3d:56:d3:42:6f:fd:9a:fe:39:72:7f:b7:
41:3a:d2:e2:9f:5f:0c:e8:27:ee:c9:c8:d3:a3:9e:
72:2b:ed:43:b2:f7:5e:67:cd:e0:69:44:8f:83:4b:
91:e3:d1:3b:9b:cb:26:84:91:fb:56:65:46:dc:df:
ba:a9:16:2f:8d:61:f2:8f:b2:53:1a:57:0d:62:a9:
45:e0:08:67:0f:2d:a3:88:6e:ea:8f:ba:9f:21:99:
8b:b0:bf:9e:cb:f9:62:3c:7e:c8:76:d0:99:6b:61:
32:ca:35:8a:87:f3:ab:36:dc:fe:7b:de:68:ce:f5:
6d:11:c3:a3:60:7e:51:bf:ec:2e:89:df:35:f4:9e:
c2:f6:c7:5d:61:56:16:0b:ec:77:e0:aa:59:3b:17:
a7:93:28:8f:4a:c4:3b:84:67:68:a0:17:78:95:53:
da:cd:ab:b7:89:db:ec:0e:cd:5d:6d:f7:6e:d5:bb:
4e:7d:cf:cf:4d:01:5c:62:41:a4:5c:fb:c5:56:69:
15:0e:d1:bc:5b:e3:9c:ce:cc:45:28:65:af:33:55:
5c:b8:2b:56:3c:02:e8:6e:3d:60:21:4a:88:65:0f:
18:86:84:b6:2a:40:3a:15:1f:04:48:04:bf:1d:e2:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:D0:97:9B:DD:25:17:0C:D3:BE:F9:BD:E3:83:BD:1B:C6:C9:56
X509v3 Authority Key Identifier:
keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a1:6f:8a:3a:26:3c:6a:c4:a9:16:83:c9:62:6c:94:ed:f7:
82:7c:dd:49:f3:a9:24:57:9b:99:b4:2e:2f:35:22:96:7b:01:
08:cd:7c:c7:91:1e:87:dc:de:98:02:e1:53:33:70:dd:25:48:
58:3e:de:79:d5:c2:b6:1c:93:a6:f2:1f:ff:85:58:46:ec:14:
f3:53:45:af:1d:48:19:62:2b:84:29:d8:6a:22:7e:70:88:95:
ac:0b:36:ef:b3:db:1c:69:80:32:78:7c:c3:19:4e:a5:42:90:
7d:e1:04:d3:7b:c9:26:dd:e2:67:87:0a:61:c3:14:13:42:27:
76:d8:4d:e3:24:b0:38:f0:b8:df:3c:1a:04:43:3d:e8:ab:28:
cb:55:10:c0:2a:b8:4d:cf:17:0f:f0:6e:de:08:ae:0f:3d:54:
f9:f3:fe:54:91:33:50:27:db:43:21:6b:91:68:87:79:ef:59:
7a:ef:17:73:9c:51:ff:22:9b:04:31:af:8a:42:48:14:1c:f7:
da:ca:c2:8c:50:94:6f:b8:06:6d:22:10:bc:66:50:60:4b:30:
ce:c0:47:06:16:48:a6:10:24:f5:69:ee:d5:b1:af:fa:13:61:
0a:0b:10:d8:a2:85:ea:01:97:a5:a0:1a:4d:d3:ad:02:ef:92:
67:d4:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:30 2025 by rpki-client