Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: qaZ92gEMCRd7sZd1vz/9vi7WtgPswbHc++Sb1a1+Q2w=
Subject key identifier: B3:D6:0F:A1:C1:CE:B9:68:C4:3F:42:F9:71:E8:BA:CE:E7:83:7C:F4
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 019A232E65C0020CD3184E8BB2AC1EAD95B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1661
Signing time: Mon 27 Oct 2025 01:00:34 +0000
Manifest this update: Mon 27 Oct 2025 01:00:34 +0000
Manifest next update: Tue 28 Oct 2025 01:00:34 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: i9ZJY0oO15rzIa+Sm7f4dgdgxvt5FnqD8UGjEYuNpSU=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:65:c0:02:0c:d3:18:4e:8b:b2:ac:1e:ad:95:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Oct 27 01:00:34 2025 GMT
Not After : Oct 28 01:00:34 2025 GMT
Subject: CN=b3d60fa1c1ceb968c43f42f971e8bacee7837cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:51:cd:b0:be:4b:a0:a6:70:69:1e:0a:6e:
63:36:4e:b1:9e:f1:d7:c8:c8:e0:c1:1b:dc:db:20:
21:7f:7d:5f:ce:56:53:fd:46:f8:e3:7b:28:f6:8f:
99:b7:98:82:63:ef:47:4e:d4:b4:03:b2:4c:ff:45:
98:6d:63:4d:47:28:da:06:9c:58:08:c1:b8:7b:e9:
a1:14:d2:44:25:2c:62:7b:19:05:f5:b3:e2:8f:c7:
49:94:a0:8b:ba:be:ba:00:fc:88:e9:ac:b1:d6:04:
9e:65:d4:51:1a:5d:72:25:fa:a3:ee:9a:94:35:c1:
74:94:30:1b:c5:e6:f8:62:82:44:c5:08:2e:b8:82:
24:78:2e:54:c3:ab:e9:0e:22:c4:e9:34:38:fb:13:
a9:7b:97:cf:a7:b4:1a:9e:85:68:53:af:d1:4e:5d:
56:9d:a7:f2:a1:c5:2b:90:6f:3c:30:fb:19:0d:83:
ea:64:6d:e8:f7:95:c9:85:e8:8e:b0:2a:cf:41:80:
9b:1d:a0:2e:09:d1:36:e0:01:12:54:61:70:e6:67:
87:43:64:22:25:d8:31:bd:bb:bd:0c:de:6b:3d:a4:
8e:c1:a6:8f:f4:d9:71:65:eb:34:eb:83:ec:39:a6:
e2:05:94:c6:f2:c6:69:e1:ad:45:07:6b:4b:85:f4:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:0F:A1:C1:CE:B9:68:C4:3F:42:F9:71:E8:BA:CE:E7:83:7C:F4
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:a9:ba:0b:7c:07:c1:87:4e:f2:62:f3:2a:0e:42:9d:12:
bc:c8:9b:7f:c9:ed:a4:09:a2:18:82:72:f3:9a:cd:b9:f3:18:
ee:01:4d:e1:66:5d:8a:68:54:19:13:4e:89:79:04:b6:44:ca:
a6:2f:2b:a2:e9:3f:ba:d7:dc:29:4d:01:d6:a9:d2:2e:b5:d6:
46:66:43:b2:89:27:0f:f9:5b:80:32:50:2e:d0:8e:82:ad:5b:
b1:92:7f:19:8b:a5:03:91:55:46:b9:76:a2:18:67:95:74:2d:
b4:be:27:67:6b:60:f8:10:53:c8:4c:8f:1e:5e:cb:1a:ee:77:
6c:bf:22:43:6c:9c:37:e2:0a:38:76:7a:7c:b7:a8:f6:57:cc:
9f:57:8c:f6:41:07:0f:41:59:ad:a8:b4:9c:17:79:3e:26:23:
06:c9:05:09:b5:ba:17:32:6e:11:cb:4f:b3:00:60:83:af:f0:
14:77:5a:44:4d:e5:5e:5a:c6:77:4d:9e:59:dc:95:70:df:01:
06:7f:56:b6:da:62:93:cc:29:53:05:a7:eb:72:26:25:e4:c2:
d2:9b:5e:54:6c:62:d3:e4:60:77:8f:02:b8:34:76:11:62:2b:
9e:93:a4:a5:e4:24:dc:6f:26:78:6d:d0:dc:da:f2:be:58:28:
ce:7e:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:55 2025 by rpki-client