Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier: BQQOeZi+M9rQTMMvEgXFXqCqe+4pf2/kKgBjuR5GwV0=
Subject key identifier: 63:56:02:5E:DA:1C:D0:50:B6:BF:DA:EA:D8:13:80:75:8F:DD:A8:AF
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial: 0198458884726BE5703AE436FAB240963BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number: 0756
Signing time: Sat 26 Jul 2025 07:00:31 +0000
Manifest this update: Sat 26 Jul 2025 07:00:31 +0000
Manifest next update: Sun 27 Jul 2025 07:00:31 +0000
Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: srVtUqwlDiVle44UROaSjWBsNC4WbrHL3Sqm6AkB3hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:84:72:6b:e5:70:3a:e4:36:fa:b2:40:96:3b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
Validity
Not Before: Jul 26 07:00:31 2025 GMT
Not After : Jul 27 07:00:31 2025 GMT
Subject: CN=6356025eda1cd050b6bfdaead81380758fdda8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:a1:65:4d:23:ae:ee:14:25:bf:6e:5d:b0:
34:ba:5b:0c:53:9a:63:1d:b5:c8:16:b7:51:03:bc:
45:5c:02:10:ae:7d:02:3f:98:5e:62:b1:c5:9a:1b:
4d:b5:af:f7:03:82:5c:03:6d:3b:55:df:35:f0:cd:
57:27:bf:ad:8a:c4:39:f2:22:4e:0e:f0:c0:9c:6d:
7a:e7:49:9a:e5:a5:25:68:76:8a:fa:81:f2:14:07:
5b:71:3d:8d:48:1a:3e:00:47:06:25:54:8c:88:44:
46:11:ff:0c:22:63:ec:25:e6:e7:e9:5c:db:00:ac:
7c:7a:c8:64:84:e0:b6:01:0a:5f:4b:f8:25:dc:8c:
79:e5:73:2d:d3:96:9c:b0:f6:91:bc:30:1d:b0:ae:
e7:c8:c4:3d:a6:3b:c1:e0:02:5e:21:26:6a:8f:a6:
b6:43:7e:40:c8:74:4c:1c:c3:9e:d7:0b:42:c4:7c:
9c:8b:ee:de:e1:60:cc:fb:bf:57:30:08:e2:b0:7b:
38:4d:5e:cb:22:6a:bf:c6:88:23:84:a1:df:fe:b5:
1c:86:9b:62:a2:a2:16:be:87:53:7d:59:62:ca:4e:
b8:9c:4c:d0:77:5c:4e:46:8d:dd:31:a6:76:f8:1d:
a7:22:04:d9:8a:01:21:8e:2e:50:37:f0:e2:52:6b:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:56:02:5E:DA:1C:D0:50:B6:BF:DA:EA:D8:13:80:75:8F:DD:A8:AF
X509v3 Authority Key Identifier:
keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b2:5c:c2:c5:61:93:89:d6:6f:2b:6c:84:79:fe:1f:24:ef:
5b:1c:10:73:b0:6f:6b:e7:f2:5c:1a:8f:02:5f:50:d5:6c:eb:
1f:4c:a7:aa:24:11:6d:85:15:40:14:62:fe:93:1c:b8:97:29:
f3:28:3a:e7:45:cf:0b:d2:54:37:28:67:ff:d9:a7:87:96:65:
cc:ee:ac:27:50:d3:66:c9:8e:04:5d:32:fa:35:9d:71:59:51:
a6:57:9f:71:f0:f1:b3:ce:8c:4a:ba:31:e7:f9:a0:47:8c:6e:
2b:e3:4c:6a:e1:6d:ff:9b:c9:62:ac:5c:03:f0:30:3e:17:77:
12:22:bc:db:bb:81:5f:d5:b0:f5:26:37:9a:20:7e:05:b7:35:
f8:92:01:1f:c0:31:ab:89:4b:5e:43:67:62:5a:da:61:ef:b8:
84:8c:99:60:5f:2f:a9:30:08:18:4c:33:86:b6:6c:64:66:25:
d8:be:94:25:92:c3:fa:48:66:7f:81:1f:5f:64:cd:5a:c6:43:
a4:6a:64:18:d3:36:e7:41:f4:d6:e3:61:ac:35:ca:dc:70:3a:
24:1d:f9:89:d9:5e:47:99:4b:51:e1:d9:38:65:af:01:aa:43:
8e:bf:8e:fb:ed:ea:71:75:0f:ff:04:4b:9c:ad:e9:b9:b7:ff:
5a:40:6e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:42 2025 by rpki-client