Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier: 0p4uMSGmxYvEr8iDUeLCddq5K01vcKg7ZcEp0/6B/ZM=
Subject key identifier: 9F:E5:95:BA:A2:E9:6F:53:F8:77:3D:A7:93:03:1B:00:87:B2:8A:28
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial: 019A50E2D82DBC34BA1670FBAB084E4A8C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number: 0865
Signing time: Tue 04 Nov 2025 22:00:35 +0000
Manifest this update: Tue 04 Nov 2025 22:00:35 +0000
Manifest next update: Wed 05 Nov 2025 22:00:35 +0000
Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: Z/wVptqS9bsi//8XdQdm5Sm0akWhwXIx8pfxG7Iirj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d8:2d:bc:34:ba:16:70:fb:ab:08:4e:4a:8c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
Validity
Not Before: Nov 4 22:00:35 2025 GMT
Not After : Nov 5 22:00:35 2025 GMT
Subject: CN=9fe595baa2e96f53f8773da793031b0087b28a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:0b:3f:7e:a2:ba:36:ca:ee:e4:ee:0b:2e:
54:07:40:f2:b5:7b:70:02:f2:59:b1:61:64:9a:6f:
54:14:08:41:c4:b2:7e:da:2a:b3:08:88:a0:5f:8d:
76:04:6f:7d:3c:71:58:e9:f5:d2:33:78:fc:80:f8:
7c:e2:3d:6a:f0:28:d5:20:31:69:c4:90:00:46:4b:
34:b3:43:67:27:41:2d:42:05:a9:4e:57:4b:cd:d8:
60:59:ca:f8:2f:0b:22:53:b6:09:06:6e:de:ac:42:
9c:51:bf:a0:26:b4:81:fb:59:d3:c0:ab:75:c7:f9:
f5:5c:9d:d1:f7:05:5c:a5:8f:db:50:f4:bd:45:07:
86:ca:61:4b:f9:33:34:90:51:54:6a:33:5b:30:96:
a7:eb:9f:b3:6d:07:39:7e:0a:17:98:e6:22:d6:04:
c4:b7:e5:04:2d:a4:0b:48:1a:e8:1a:77:86:cd:c9:
48:93:2f:fa:cb:e5:28:01:5b:70:e2:ac:e4:80:45:
7b:c9:a4:4a:de:06:15:49:03:ac:17:8f:eb:01:f8:
f1:7e:ea:a4:49:34:32:76:d7:04:e5:24:1a:69:8b:
fd:88:7e:f3:b6:15:b1:39:f9:ea:63:51:43:80:f5:
e7:06:9f:ef:9d:25:f6:fa:83:d1:af:1d:83:6f:31:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:95:BA:A2:E9:6F:53:F8:77:3D:A7:93:03:1B:00:87:B2:8A:28
X509v3 Authority Key Identifier:
keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:13:a2:e2:e0:12:a9:4b:1d:7e:dd:53:a4:e3:80:53:8d:e7:
2b:dd:c6:71:80:89:85:c6:97:d5:0f:b7:4d:d6:16:37:ba:87:
f6:57:f6:62:03:af:59:80:02:7e:48:ee:e8:3a:dd:33:b7:c1:
3a:19:68:15:d4:b8:b4:ca:a3:f2:a3:2d:7b:b6:2a:84:bf:17:
51:3d:fc:ef:e9:36:b7:ff:b5:ac:0d:c9:8e:3a:a1:dc:4f:4c:
e4:82:ee:99:81:e1:39:19:44:ec:28:eb:bc:f1:9b:46:59:ee:
8c:fc:d6:f2:35:b2:73:7e:6d:0b:5b:3e:c4:ad:b2:4a:b0:88:
d1:e8:f2:a2:2c:cc:73:c6:51:f6:0c:ad:26:41:5a:c3:88:f8:
12:a1:d6:00:7d:1b:a4:3b:ed:31:df:8f:fc:17:81:be:48:3c:
ec:20:a5:4c:94:72:b9:d0:74:54:3e:08:d9:b8:bd:96:38:1e:
d3:1c:a5:ec:19:1b:18:42:e0:56:8d:b8:20:33:bb:3a:17:40:
dc:80:91:5e:82:0c:4f:62:06:58:e5:c2:44:3c:7d:cf:3e:c6:
44:aa:fd:88:13:fe:85:f9:44:7f:98:ab:e7:7e:60:25:f0:5e:
36:82:fd:89:c7:52:5c:00:53:1c:88:5b:e4:33:f6:d9:e4:70:
d5:0d:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:29 2025 by rpki-client