Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: 3M+szsiO5Tq5f7baS9nc7CJEcxYdJPOJRhSeEUO1//8=
Subject key identifier: D7:38:B6:14:34:9B:BB:F3:75:6D:0C:60:46:19:6F:62:76:86:99:6F
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 0199379466062F72A40192F035E94C9B8D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 15E7
Signing time: Thu 11 Sep 2025 07:01:36 +0000
Manifest this update: Thu 11 Sep 2025 07:01:36 +0000
Manifest next update: Fri 12 Sep 2025 07:01:36 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: UJCYYaNbVSlEhGI5WpVCCm+7s4BUgAn1rVub3vEiK+A=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:66:06:2f:72:a4:01:92:f0:35:e9:4c:9b:8d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Sep 11 07:01:36 2025 GMT
Not After : Sep 12 07:01:36 2025 GMT
Subject: CN=d738b614349bbbf3756d0c6046196f627686996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:a9:ba:fa:87:f8:47:7f:cf:6b:77:80:70:
5a:57:dc:c9:4f:9c:7a:85:68:ca:bd:8c:c2:bb:05:
4d:81:99:79:36:88:cd:c0:51:8d:6d:ce:50:19:49:
8e:c6:31:b0:ad:be:5a:af:a5:0f:43:1e:c0:4f:a2:
79:2f:bc:fd:86:4d:79:f2:7e:ad:d8:c2:da:b4:cd:
28:1c:b5:9a:2a:d4:4a:48:6e:9b:4e:89:8a:7d:b0:
c9:12:5d:27:6c:fa:cd:93:37:4a:53:f8:99:5b:4e:
83:b8:d6:a3:1c:63:d9:b3:36:15:cf:40:00:83:f5:
0a:df:f0:14:e3:68:ec:36:ca:4e:d0:53:b3:cb:c0:
ec:2c:3b:ae:6e:17:27:fa:0d:2a:46:39:b9:9f:39:
0e:3c:a1:cf:fe:7d:be:21:c9:cc:18:47:3d:89:d0:
2c:7d:2e:aa:fa:f3:e9:a0:55:91:b3:3a:6c:cd:14:
29:64:ea:a6:28:54:d7:9c:ee:fb:ec:62:02:75:b2:
17:84:60:54:95:d2:0d:98:91:0f:6c:1e:8a:eb:fc:
c6:35:58:20:9f:85:8d:b6:9b:75:2a:31:ef:e5:19:
d4:7f:43:fa:c5:51:de:ec:e9:6e:9e:bb:bc:23:5e:
d4:68:92:b9:f1:39:9a:dc:9d:fb:ca:06:e0:9a:46:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:B6:14:34:9B:BB:F3:75:6D:0C:60:46:19:6F:62:76:86:99:6F
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:db:19:56:d6:5c:ea:83:e6:ef:73:35:37:ad:ca:e2:ed:00:
32:a4:96:ec:59:a6:0b:8b:98:f7:64:ae:1b:6f:a5:82:71:cc:
bb:ff:82:e6:29:ae:bf:0a:55:3b:34:05:e6:22:4c:4a:e9:c0:
2b:e9:50:b0:ff:e6:71:67:0a:3c:a3:76:0d:83:d3:d0:0b:8d:
23:14:27:7f:e7:97:c6:1c:9d:14:95:48:85:10:e0:05:9c:c2:
ec:25:6f:5d:27:6a:7b:00:ca:e9:10:2b:72:10:50:86:ef:21:
91:52:ac:8d:22:d9:0f:ae:94:e9:8b:2d:79:86:02:b5:cc:44:
c9:fc:7f:e7:8d:07:f6:a4:42:f5:27:69:6f:46:c5:d8:75:2d:
c3:5c:a3:5a:cc:df:86:a1:fc:1d:80:b0:f5:97:12:2f:6a:20:
aa:bf:93:98:3b:6a:4a:2b:55:4f:1e:64:fd:96:3a:3a:09:0e:
96:1e:c7:4c:11:4d:7d:07:6f:b8:45:5f:12:59:9f:3d:4b:d1:
0f:bc:2d:b9:50:cf:01:88:76:29:a0:a5:bc:b0:36:b5:b8:6e:
86:1b:55:14:8b:ac:13:aa:7f:43:8d:01:f7:f5:f8:ca:7b:39:
35:13:b8:fb:da:6b:34:4e:20:1e:a1:5b:46:d7:0b:34:b8:4e:
fa:08:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:14:44 2025 by rpki-client