Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier: U9eK1iiZrxF3ofaN6tm5SaZmmb4EjMqA4qHzm3h44EY=
Subject key identifier: BA:6E:9D:F2:A7:B5:C0:D7:79:EC:54:19:C9:70:19:92:59:FA:86:0F
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial: 01976960F074F8F1BCF00078B618B25C7BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number: 06E4
Signing time: Fri 13 Jun 2025 13:00:50 +0000
Manifest this update: Fri 13 Jun 2025 13:00:50 +0000
Manifest next update: Sat 14 Jun 2025 13:00:50 +0000
Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: lLrg6zzLHel4typDl3wVvU6oAREcJVqWjcAVkSXzSns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f0:74:f8:f1:bc:f0:00:78:b6:18:b2:5c:7b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
Validity
Not Before: Jun 13 13:00:50 2025 GMT
Not After : Jun 14 13:00:50 2025 GMT
Subject: CN=ba6e9df2a7b5c0d779ec5419c970199259fa860f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:27:3a:52:82:3f:af:47:19:e4:82:16:10:
9f:ce:46:de:1c:12:9e:17:36:e1:7a:23:b1:de:88:
d3:3c:6f:c1:da:1d:93:40:0f:1f:2d:dd:c1:44:af:
c8:00:1d:89:37:ed:25:b5:32:36:2b:f3:59:07:97:
c8:48:66:38:9b:a8:d8:74:1c:f9:52:52:a0:f9:a0:
c2:95:25:33:ac:aa:4e:ee:bc:a9:d2:d1:ec:89:56:
a8:e9:ee:66:a3:e9:32:a6:d4:6d:c6:2e:7a:59:c6:
e7:50:ef:bf:0e:78:d1:78:41:87:b1:d7:c2:a6:43:
1c:3f:e5:c8:5c:c7:fa:ca:53:49:9a:23:d7:0c:c3:
8b:de:16:ef:af:0e:e6:57:98:f1:13:b8:06:dc:6e:
86:5c:ce:7f:2d:0f:39:91:2f:78:09:29:51:85:ea:
c8:5c:b8:1e:48:47:81:f6:7a:9c:a9:ad:b9:9a:5f:
3d:67:47:63:83:70:66:73:b5:c4:18:83:27:7f:86:
c1:10:2d:7f:41:eb:43:a4:3a:2b:27:fa:d3:f1:fb:
d7:cf:42:42:65:2b:c3:f6:57:c4:a1:33:ac:b0:79:
76:f0:2b:26:4a:4f:00:10:fb:0c:39:d3:c1:35:ac:
01:22:79:16:1f:05:2e:7d:fc:38:ef:9b:b0:08:b1:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:9D:F2:A7:B5:C0:D7:79:EC:54:19:C9:70:19:92:59:FA:86:0F
X509v3 Authority Key Identifier:
keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:4a:af:c4:2c:81:c7:f1:cf:fc:21:e1:4c:cf:32:cc:66:
90:b5:cc:75:7d:56:f9:f9:26:19:05:9f:82:4b:25:4c:e0:25:
02:14:fb:6b:65:ca:85:1e:27:26:c9:53:dc:a5:3b:4a:8e:f1:
2c:32:57:17:f0:2f:5f:da:16:ed:60:c7:e4:8b:82:29:dc:b2:
67:ca:29:81:b2:01:2b:f5:c8:10:70:d3:d1:ee:a8:db:cb:54:
36:a9:a8:ad:0e:2b:77:53:73:82:23:1b:d7:7a:20:55:fa:7e:
62:46:62:d2:fa:59:4e:63:83:e4:c0:e2:ef:ca:42:c2:87:b6:
27:7f:1d:8b:16:c3:42:fe:e3:4e:b9:a4:49:04:c0:36:77:3e:
82:5c:4f:f8:df:4c:2d:29:c9:32:1e:78:10:5b:b1:b3:57:24:
da:3c:35:e7:14:26:da:e0:14:b3:dc:97:a8:b7:59:61:b4:98:
26:21:ce:0a:30:83:b6:6f:18:bb:2b:4e:10:e9:ea:2d:00:ae:
92:08:f4:e0:d4:13:5c:73:5f:02:50:75:92:7f:61:98:50:fa:
59:b8:52:84:40:a2:8c:4b:a0:aa:9e:4b:81:0b:be:70:74:89:
43:36:ed:f5:53:9d:37:07:8e:b6:b5:3c:d4:81:68:1d:ff:9c:
d0:0d:bb:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYPB0+PG88AB4thiyXHvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzN2NkNzk1NDNmMWE3NzI5OWQwNjlhYTM2MTUxODU0NTMw
ZGQ4NjIwHhcNMjUwNjEzMTMwMDUwWhcNMjUwNjE0MTMwMDUwWjAzMTEwLwYDVQQD
EyhiYTZlOWRmMmE3YjVjMGQ3NzllYzU0MTljOTcwMTk5MjU5ZmE4NjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6InOlKCP69HGeSCFhCfzkbeHBKe
FzbheiOx3ojTPG/B2h2TQA8fLd3BRK/IAB2JN+0ltTI2K/NZB5fISGY4m6jYdBz5
UlKg+aDClSUzrKpO7ryp0tHsiVao6e5mo+kyptRtxi56WcbnUO+/DnjReEGHsdfC
pkMcP+XIXMf6ylNJmiPXDMOL3hbvrw7mV5jxE7gG3G6GXM5/LQ85kS94CSlRherI
XLgeSEeB9nqcqa25ml89Z0djg3Bmc7XEGIMnf4bBEC1/QetDpDorJ/rT8fvXz0JC
ZSvD9lfEoTOssHl28CsmSk8AEPsMOdPBNawBInkWHwUuffw475uwCLErmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpunfKntcDXeexUGclwGZJZ+oYPMB8GA1UdIwQY
MBaAFMN815VD8adymdBpqjYVGFRTDdhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82YWYxNDItMGFjNi00ZTc2LTkwNDIt
NzE0ODFiYjBhNTJmLzEvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82YWYxNDItMGFjNi00ZTc2LTkwNDItNzE0ODFiYjBhNTJm
LzEvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQdKr8Qs
gcfxz/wh4UzPMsxmkLXMdX1W+fkmGQWfgkslTOAlAhT7a2XKhR4nJslT3KU7So7x
LDJXF/AvX9oW7WDH5IuCKdyyZ8opgbIBK/XIEHDT0e6o28tUNqmorQ4rd1NzgiMb
13ogVfp+YkZi0vpZTmOD5MDi78pCwoe2J38dixbDQv7jTrmkSQTANnc+glxP+N9M
LSnJMh54EFuxs1ck2jw15xQm2uAUs9yXqLdZYbSYJiHOCjCDtm8YuytOEOnqLQCu
kgj04NQTXHNfAlB1kn9hmFD6WbhShECijEugqp5LgQu+cHSJQzbt9VOdNweOtrU8
1IFoHf+c0A27Bg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:52 2025 by rpki-client