Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: JjtqAmfIB04K22ybJ3eYu4Ml1t5S/RQyhx2SNfkbZ6k=
Subject key identifier: A2:72:BD:11:77:7B:96:F0:93:2D:F2:E2:5C:90:49:B9:C6:02:14:7C
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 01964A469A63A83F8125BDC0D4C2728C0EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1463
Signing time: Fri 18 Apr 2025 19:01:03 +0000
Manifest this update: Fri 18 Apr 2025 19:01:03 +0000
Manifest next update: Sat 19 Apr 2025 19:01:03 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: 0rTl4N/uyOoKg02Mgbr+pffaprG1G2bE3QyPsSumloU=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:9a:63:a8:3f:81:25:bd:c0:d4:c2:72:8c:0e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Apr 18 19:01:03 2025 GMT
Not After : Apr 19 19:01:03 2025 GMT
Subject: CN=a272bd11777b96f0932df2e25c9049b9c602147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:76:35:1c:c5:a4:62:64:54:42:8f:d9:e7:
a4:56:69:3d:38:d4:e9:76:a0:c0:ba:82:42:5b:34:
14:d9:6f:e6:bd:46:2a:8e:82:39:46:23:d5:5c:9d:
d8:ef:96:99:7d:c7:fc:21:6a:d4:4b:e3:8a:c4:4d:
fd:04:f0:f0:b4:bf:b8:43:52:47:af:d0:b2:07:4b:
dd:00:e4:db:35:0e:cf:45:88:f5:af:0d:46:ba:48:
f1:9c:df:a4:94:27:f2:f7:c3:4a:eb:86:1d:06:36:
48:b8:46:4f:89:0f:17:72:e7:f9:d4:b6:9c:fb:03:
fb:bf:30:80:3d:ab:8a:07:c2:f5:17:07:54:06:2a:
dd:ca:ac:fb:e5:e0:fc:a8:95:be:ea:98:aa:c8:ee:
73:bd:a3:80:80:86:c6:4d:ce:b2:3d:a1:91:a8:0d:
1c:96:c9:b5:66:67:05:82:70:8e:59:64:e0:75:63:
e5:ff:28:b3:f4:9d:11:4d:54:3f:cb:9b:06:34:b2:
e1:44:e0:58:81:0a:83:db:a2:40:de:29:bd:7a:94:
0d:25:39:7d:94:57:ed:7d:ba:34:c2:c0:ef:c8:0c:
69:c6:95:52:b7:a0:34:49:c7:83:fb:70:86:49:45:
96:2b:0e:5d:5f:b9:c1:67:4e:a1:f1:ac:6e:6e:02:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:BD:11:77:7B:96:F0:93:2D:F2:E2:5C:90:49:B9:C6:02:14:7C
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f5:26:fa:60:31:a9:f5:4d:69:b8:3a:60:c9:d1:5e:cd:c9:
ea:11:98:f5:2a:d4:0b:33:9f:ac:41:02:bd:b9:92:03:97:44:
20:f8:61:3d:19:57:f7:7d:b5:cb:ad:32:a8:f4:de:83:fe:1d:
51:d4:17:56:80:0e:45:ed:76:4f:d6:ef:82:63:8d:80:19:8d:
9c:61:c2:fb:06:53:74:65:6d:35:b5:ca:3a:d7:8c:21:45:77:
46:3f:b0:df:e3:50:2b:0b:f7:97:ec:5e:bd:d1:e0:13:97:d3:
ae:d2:f4:cd:44:e6:80:c5:21:4d:b5:5c:80:08:7e:d9:d3:b3:
6b:00:04:15:65:c3:74:7e:fe:a4:51:ce:e2:dc:13:71:da:9b:
24:32:84:1e:83:d1:c5:f5:8a:96:2e:82:16:ac:bc:45:fd:7f:
4d:0d:98:c1:c8:0e:ce:be:0a:3c:b1:35:cf:02:99:69:60:cf:
ec:b7:69:4d:71:ef:ea:99:07:f0:66:df:2c:f2:79:64:ac:29:
6e:aa:51:68:e9:58:e1:a6:2c:62:d1:ad:f2:3b:cf:68:00:4c:
fa:c9:9d:f8:0e:f8:5e:9b:71:2a:75:6f:49:dd:b7:7b:65:c3:
43:c0:b7:e9:06:b9:3c:24:1f:ff:06:55:bb:4a:4e:8a:77:ae:
0a:97:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:03:41 2025 by rpki-client