Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier: THIWDddAIfjwsmYHoX4QS8IEkulZOjBFvTximMs6g14=
Subject key identifier: 36:2E:83:E0:0C:55:0B:BC:A2:8C:77:69:2F:6C:58:03:80:75:F9:CC
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial: 0198D65FB28D19907D9FBD04E9DDDBEB26AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number: 07A1
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: jIydFp+qveaGjxV1bL2aG1RpsYnZ9wBVnLI3f/ZL9pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b2:8d:19:90:7d:9f:bd:04:e9:dd:db:eb:26:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=362e83e00c550bbca28c77692f6c58038075f9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:6b:e5:93:b4:84:ea:01:f9:c0:39:07:b4:
75:8c:b7:44:bc:a3:eb:f6:36:5d:6e:2a:fb:20:79:
6b:c0:e8:f8:03:f5:2e:84:a5:bd:c1:33:ff:d8:86:
c0:75:8b:de:bf:f8:9e:75:40:32:09:c3:36:a8:27:
9a:fa:7c:3b:63:e3:16:7a:a7:d9:3c:1e:1e:12:03:
a9:6c:b6:39:57:6b:58:0c:e6:5a:75:90:6b:7f:09:
cd:82:dc:76:e6:a7:ca:07:b9:2a:16:ce:c5:af:50:
15:d9:4b:89:34:95:f5:9f:6b:8d:5f:ae:76:2c:cd:
62:2a:c9:09:3e:98:4a:4c:3a:92:b7:f8:33:23:0b:
4b:87:07:a9:b4:a6:61:51:68:6d:07:d7:7e:bb:ee:
16:3c:45:0d:52:90:02:a9:f0:29:70:82:ac:12:99:
81:6b:d9:53:64:e8:f3:09:eb:b8:cb:64:d0:f6:60:
1e:6b:e5:13:60:6f:14:7a:7d:2a:d8:7d:38:19:b3:
fc:ff:f5:7e:54:c1:25:0b:c3:30:18:17:41:43:f6:
62:17:cd:00:5b:bd:00:f9:83:84:63:e4:25:71:25:
be:9e:74:aa:27:a1:80:30:26:0d:e4:b4:08:2c:f1:
6a:82:4e:db:6f:f4:af:66:b9:ab:85:ee:1a:28:69:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2E:83:E0:0C:55:0B:BC:A2:8C:77:69:2F:6C:58:03:80:75:F9:CC
X509v3 Authority Key Identifier:
keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:db:e9:c8:67:d9:c3:b3:f2:51:56:53:5b:27:1a:27:b5:de:
90:f8:b8:95:a6:f5:31:40:b8:06:19:64:3b:e4:fe:87:a5:14:
a6:e4:1b:e2:c6:48:6b:43:6f:2d:13:88:dd:dd:6c:b8:12:66:
6c:48:d4:b9:af:5f:94:fe:dd:ee:e7:5f:ef:8e:3f:70:87:b6:
85:7f:5c:5c:4a:59:b4:03:57:6b:f6:2a:cb:c2:49:a1:f1:0f:
32:a3:df:77:de:8b:05:51:f7:bd:d8:56:78:a6:6a:e2:6b:d4:
4b:b9:c0:bd:62:f5:d2:2e:6a:e3:ff:6c:79:b6:92:8b:e9:2e:
93:cd:39:a0:05:41:4b:a1:07:32:c2:a4:2f:55:db:8b:de:18:
e1:d2:c7:f7:06:36:49:16:3e:4e:bb:2b:28:95:93:da:a6:86:
49:6b:e0:86:40:19:d8:40:1f:8d:da:4e:8e:52:52:a5:e6:62:
62:ef:ff:03:ba:ab:3d:2d:73:2d:28:d1:62:a9:2d:fb:85:e1:
57:03:db:a4:a6:73:92:01:3d:79:77:f8:ca:2c:be:78:3a:fd:
30:51:15:27:0f:93:8a:c2:90:44:59:17:6c:9c:eb:b0:a1:60:
23:ae:05:5c:10:71:2c:82:a4:45:9d:1e:ba:90:f9:fd:f7:e2:
f4:53:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:53 2025 by rpki-client