Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier: Tfi8rUrrlCg6wnWwolWwQ+y/yj+KZInR4/vpWcYDBzM=
Subject key identifier: F5:C5:D3:FB:F5:ED:11:97:94:8C:32:4A:55:86:F5:56:C5:E7:D3:88
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial: 0199FDDA0641EB482A527730B8787D7C2DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number: 083A
Signing time: Sun 19 Oct 2025 19:02:27 +0000
Manifest this update: Sun 19 Oct 2025 19:02:27 +0000
Manifest next update: Mon 20 Oct 2025 19:02:27 +0000
Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: rUZ75JENIVF1NRGxE+LTCsmiJci/YdkMCvs8fesXM4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:06:41:eb:48:2a:52:77:30:b8:78:7d:7c:2d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
Validity
Not Before: Oct 19 19:02:27 2025 GMT
Not After : Oct 20 19:02:27 2025 GMT
Subject: CN=f5c5d3fbf5ed1197948c324a5586f556c5e7d388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:b0:db:f3:a3:c7:51:69:27:e2:36:20:ce:
c4:9b:ce:bd:bf:f9:3d:bc:9a:dc:0c:f7:13:1d:c7:
55:ad:26:83:56:e8:8f:2b:36:f7:fc:db:16:3f:2d:
f7:0d:78:23:3b:3d:ec:20:aa:a2:e3:89:dd:d3:bd:
5b:72:d1:ef:2f:ba:ec:71:90:8f:9f:5f:01:e2:44:
75:8d:5e:0c:63:b8:0e:01:b2:94:35:f4:68:e9:0b:
b8:75:06:36:1d:7a:14:4c:69:37:69:b4:d1:ec:eb:
22:e1:1d:5f:f6:d2:3a:c0:e6:1f:b4:b3:cc:6c:1c:
76:ce:bc:c4:f0:10:7c:47:96:72:18:d0:22:2c:f5:
c0:bd:a2:8f:70:59:70:f7:dc:7b:03:6b:99:cb:20:
c5:db:18:74:bb:37:bf:7c:2b:06:4d:42:6c:60:28:
0d:c8:33:9f:b7:b7:5e:e3:d9:8c:d9:f8:35:93:6e:
57:98:d8:df:07:92:55:56:2c:09:7b:21:63:85:a0:
53:0a:0c:9d:4e:f9:8f:ca:5e:3c:76:94:9d:92:49:
b4:ee:69:6a:11:81:94:54:b3:55:d3:84:be:67:d9:
e1:b1:17:ea:f7:ff:db:a2:c3:f9:3f:95:bf:85:83:
fc:d9:2d:6f:46:83:2e:95:ac:0a:1b:35:77:63:6d:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:D3:FB:F5:ED:11:97:94:8C:32:4A:55:86:F5:56:C5:E7:D3:88
X509v3 Authority Key Identifier:
keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8f:e4:99:f2:53:f3:75:2a:a4:49:60:25:9a:57:c0:9e:51:
45:d2:d7:80:99:b1:49:c9:2e:4e:ce:d7:f8:b5:ad:6c:b0:c5:
35:f2:7d:8b:49:96:f9:35:3b:3f:b5:35:97:6d:55:4f:96:7d:
f3:3a:30:78:99:69:14:77:46:d3:d3:e9:50:4e:e7:f9:bf:f2:
19:3d:f9:7a:be:7f:66:5a:29:61:9b:d2:e6:ea:03:7e:c2:0d:
a4:ad:53:1c:56:0e:db:ee:26:64:ef:9e:3c:ec:73:49:14:ce:
75:0d:ab:36:7b:02:89:7e:62:dd:7c:a8:11:c3:88:09:85:7f:
ab:e4:6a:15:b1:16:d4:34:7b:c6:f3:a7:92:04:1a:1d:c4:2a:
19:b0:64:48:8e:94:9f:ae:44:46:1c:0e:f9:c9:e6:f8:d1:d3:
ac:53:b0:ba:14:d0:20:9d:5d:3b:1f:97:f9:3e:a0:d2:3c:ff:
1c:12:2e:44:94:12:17:54:85:f6:f7:dd:82:7e:32:23:09:41:
13:1f:fc:7d:78:59:62:37:dd:a2:a7:0a:82:f8:03:23:05:b5:
ea:86:cb:05:cc:92:66:37:58:35:3b:39:3a:62:f6:d6:20:b9:
a2:67:13:8e:97:af:b9:8a:ce:be:11:dd:ea:f5:eb:f3:67:a6:
96:8a:d1:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92gZB60gqUncwuHh9fC3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzN2NkNzk1NDNmMWE3NzI5OWQwNjlhYTM2MTUxODU0NTMw
ZGQ4NjIwHhcNMjUxMDE5MTkwMjI3WhcNMjUxMDIwMTkwMjI3WjAzMTEwLwYDVQQD
EyhmNWM1ZDNmYmY1ZWQxMTk3OTQ4YzMyNGE1NTg2ZjU1NmM1ZTdkMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur6w2/Ojx1FpJ+I2IM7Em869v/k9
vJrcDPcTHcdVrSaDVuiPKzb3/NsWPy33DXgjOz3sIKqi44nd071bctHvL7rscZCP
n18B4kR1jV4MY7gOAbKUNfRo6Qu4dQY2HXoUTGk3abTR7Osi4R1f9tI6wOYftLPM
bBx2zrzE8BB8R5ZyGNAiLPXAvaKPcFlw99x7A2uZyyDF2xh0uze/fCsGTUJsYCgN
yDOft7de49mM2fg1k25XmNjfB5JVViwJeyFjhaBTCgydTvmPyl48dpSdkkm07mlq
EYGUVLNV04S+Z9nhsRfq9//bosP5P5W/hYP82S1vRoMulawKGzV3Y20yIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXF0/v17RGXlIwySlWG9VbF59OIMB8GA1UdIwQY
MBaAFMN815VD8adymdBpqjYVGFRTDdhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82YWYxNDItMGFjNi00ZTc2LTkwNDIt
NzE0ODFiYjBhNTJmLzEvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82YWYxNDItMGFjNi00ZTc2LTkwNDItNzE0ODFiYjBhNTJm
LzEvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZY/kmfJT
83UqpElgJZpXwJ5RRdLXgJmxSckuTs7X+LWtbLDFNfJ9i0mW+TU7P7U1l21VT5Z9
8zoweJlpFHdG09PpUE7n+b/yGT35er5/ZlopYZvS5uoDfsINpK1THFYO2+4mZO+e
POxzSRTOdQ2rNnsCiX5i3XyoEcOICYV/q+RqFbEW1DR7xvOnkgQaHcQqGbBkSI6U
n65ERhwO+cnm+NHTrFOwuhTQIJ1dOx+X+T6g0jz/HBIuRJQSF1SF9vfdgn4yIwlB
Ex/8fXhZYjfdoqcKgvgDIwW16obLBcySZjdYNTs5OmL21iC5omcTjpevuYrOvhHd
6vXr82emlorRDQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:54:44 2025 by rpki-client