Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File: w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier: vYODPKDDBC61IeogNXZjihus8hLJW7GMfTY6ECVOuwI=
Subject key identifier: D9:07:1B:38:98:7B:8B:3E:14:79:4C:A5:FF:F4:41:2A:98:93:A2:EC
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer: /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial: 0199FCC65A0BE6738834F1721629666062BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number: 0669
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: C3GnFuMBfn2JHgLyYCLU24Tbcunbb+erhraOBC+N8bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5a:0b:e6:73:88:34:f1:72:16:29:66:60:62:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=d9071b38987b8b3e14794ca5fff4412a9893a2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:28:42:47:0c:16:17:d3:44:77:ac:c4:ff:
d8:79:9f:64:3d:24:53:b5:8d:c3:6f:a5:94:bc:64:
88:4f:29:39:0a:c0:69:f4:51:05:a1:39:b5:f2:dd:
1e:ff:f1:9a:a7:79:aa:a0:b7:cf:0c:d5:af:93:b8:
a1:e2:87:a8:07:e3:4d:44:33:25:2a:5f:77:b0:20:
82:3d:d7:a2:00:64:f8:a6:21:69:26:1e:4b:bc:92:
13:e6:5a:b5:8e:5e:21:38:9b:6c:77:28:63:a6:94:
d5:09:04:4d:80:0f:5e:48:cc:08:48:15:6f:72:18:
ce:96:4c:6f:a0:6c:16:a7:52:f6:ca:07:e0:39:2c:
2f:fa:17:ae:d4:3a:6b:a0:34:df:10:fc:5a:b1:d5:
cb:fe:61:e3:c7:0d:15:d7:47:77:85:97:88:10:7b:
d8:f1:75:d3:3d:85:23:7d:e4:4b:fa:4d:79:1e:c6:
ff:6a:2b:e6:eb:a8:cf:24:f6:ab:ed:31:54:f9:8b:
1a:13:89:d7:98:6c:b8:5d:55:76:45:31:7a:06:1d:
c6:ba:53:dd:8c:90:4f:d6:d4:d5:6e:23:c8:cd:0f:
1f:9c:02:7f:0e:50:ff:45:8e:b0:3b:8b:ea:51:42:
d1:bf:1d:f6:b6:f5:6f:64:b9:57:0f:0d:3a:ab:3c:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:1B:38:98:7B:8B:3E:14:79:4C:A5:FF:F4:41:2A:98:93:A2:EC
X509v3 Authority Key Identifier:
keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:09:61:a9:be:f9:87:df:89:b6:02:49:6d:a0:4d:8f:17:83:
f5:b8:3b:07:8a:f3:a8:14:63:16:3b:96:22:ca:bf:94:c6:31:
8e:75:a9:05:eb:f0:37:99:a0:9a:bf:9c:37:32:64:88:b8:b7:
3e:a1:13:46:b5:0f:74:8f:57:2a:6e:53:af:02:01:da:1f:18:
b5:59:fb:a7:79:6e:05:b8:41:53:d1:f4:6f:d2:7d:ff:03:46:
46:56:4e:68:2d:d0:3d:f4:b3:7a:12:a1:b9:80:1a:1f:ef:a4:
84:25:fd:f6:6a:da:bc:d4:0a:89:25:b5:93:a1:27:d1:09:32:
55:06:fe:10:6d:86:7a:d8:5b:29:df:3d:b2:fd:21:db:2c:a3:
d3:07:f0:d1:ee:98:27:15:ce:91:c2:74:f1:d7:36:68:d1:5a:
57:22:12:3d:76:84:0a:a2:3c:4d:4a:e3:b8:90:00:63:df:b0:
6b:20:e4:f7:a0:78:7c:9f:81:9c:ab:81:24:0a:74:07:d9:d0:
04:7a:56:38:f5:70:1d:92:44:50:bc:2b:43:5d:40:8a:ab:5b:
bc:11:80:b2:22:da:9a:82:d0:c8:93:d7:65:2a:95:cb:08:2d:
a9:a9:aa:54:da:d2:98:01:9f:75:01:1f:4e:18:e8:68:9b:1a:
09:84:d8:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xloL5nOINPFyFilmYGK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTNjMzY2Y2JiOGM1YzdmNzM1OTE5ZDE1MGEyZmFmMGMw
OGY4NWYwHhcNMjUxMDE5MTQwMTIxWhcNMjUxMDIwMTQwMTIxWjAzMTEwLwYDVQQD
EyhkOTA3MWIzODk4N2I4YjNlMTQ3OTRjYTVmZmY0NDEyYTk4OTNhMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OMoQkcMFhfTRHesxP/YeZ9kPSRT
tY3Db6WUvGSITyk5CsBp9FEFoTm18t0e//Gap3mqoLfPDNWvk7ih4oeoB+NNRDMl
Kl93sCCCPdeiAGT4piFpJh5LvJIT5lq1jl4hOJtsdyhjppTVCQRNgA9eSMwISBVv
chjOlkxvoGwWp1L2ygfgOSwv+heu1DproDTfEPxasdXL/mHjxw0V10d3hZeIEHvY
8XXTPYUjfeRL+k15Hsb/aivm66jPJPar7TFU+YsaE4nXmGy4XVV2RTF6Bh3GulPd
jJBP1tTVbiPIzQ8fnAJ/DlD/RY6wO4vqUULRvx32tvVvZLlXDw06qzz1CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkHGziYe4s+FHlMpf/0QSqYk6LsMB8GA1UdIwQY
MBaAFMOjw2bLuMXH9zWRnRUKL68MCPhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQt
OTc3NGJjMjI2Y2NlLzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQtOTc3NGJjMjI2Y2Nl
LzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAlhqb75
h9+JtgJJbaBNjxeD9bg7B4rzqBRjFjuWIsq/lMYxjnWpBevwN5mgmr+cNzJkiLi3
PqETRrUPdI9XKm5TrwIB2h8YtVn7p3luBbhBU9H0b9J9/wNGRlZOaC3QPfSzehKh
uYAaH++khCX99mravNQKiSW1k6En0QkyVQb+EG2GethbKd89sv0h2yyj0wfw0e6Y
JxXOkcJ08dc2aNFaVyISPXaECqI8TUrjuJAAY9+wayDk96B4fJ+BnKuBJAp0B9nQ
BHpWOPVwHZJEULwrQ11AiqtbvBGAsiLamoLQyJPXZSqVywgtqamqVNrSmAGfdQEf
ThjoaJsaCYTYEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:58 2025 by rpki-client