Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier: Cb13TRlOX7s6da8pDLqmhfDc7sreoFVY80m/9NaZJ0E=
Subject key identifier: 3A:6D:49:7D:9C:81:E9:01:BF:DF:01:EA:96:DE:83:8B:CD:25:47:D6
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial: 019A71B7E8A22702AF1E21F3A3480937EC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number: 0876
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: GLPsXvlvjWUNeiw0uLbJ2tCail3ENhLf38sWKCtUPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e8:a2:27:02:af:1e:21:f3:a3:48:09:37:ec:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=3a6d497d9c81e901bfdf01ea96de838bcd2547d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:50:8c:4f:ef:b4:90:02:61:36:62:5b:29:
8c:7f:83:79:a0:37:14:37:0e:0b:dd:32:60:04:2c:
1c:b4:12:7f:0d:66:7b:b6:12:b0:ae:17:6f:77:22:
88:85:30:72:c9:9f:06:9c:26:a6:4d:a9:4e:ca:c5:
d6:57:98:9f:d4:c3:4e:b7:ae:80:01:da:62:72:15:
98:82:e2:c4:2b:32:59:27:8e:0c:74:09:b8:37:ce:
00:95:88:ad:cb:0d:bb:19:71:81:bc:cf:20:0a:21:
49:60:b0:2e:90:83:09:db:19:7d:05:cb:22:ab:1a:
ca:82:6c:65:9c:fc:b9:06:f8:3d:e6:c6:b2:7b:c7:
fd:ca:af:98:7b:d7:fa:1b:0f:4c:84:d4:bf:0b:6e:
11:5d:3c:fa:85:9f:1f:85:23:e6:1a:a9:47:10:00:
23:af:04:4e:ee:5a:5d:c4:7f:9e:30:85:51:7b:dd:
22:e0:e7:a3:a8:4b:f1:80:6d:f3:f3:cf:90:00:30:
ff:17:23:f5:5e:1f:2c:49:06:81:7b:dc:d1:e5:c4:
17:a3:b1:83:fa:dc:d3:a0:0a:63:81:fe:4d:d9:5d:
32:14:b1:1a:ea:81:fa:08:56:9d:c0:c4:55:b1:77:
6a:8e:1d:22:5d:e8:cb:c2:68:c8:49:52:a9:58:6b:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:49:7D:9C:81:E9:01:BF:DF:01:EA:96:DE:83:8B:CD:25:47:D6
X509v3 Authority Key Identifier:
keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f9:77:3f:dc:47:82:28:72:bf:87:76:ec:17:20:aa:36:7a:
21:cb:fb:f8:44:2a:79:16:e4:1e:c3:a3:56:d5:6f:8f:e3:35:
ac:a1:98:d6:95:ae:5a:b9:2e:b0:ab:9f:30:40:89:d0:32:4f:
d3:2c:0d:57:0f:e3:f4:ce:f8:e4:8d:11:95:e4:6e:0c:3d:d7:
5b:48:32:09:62:ff:be:a0:c8:a7:29:de:d5:b7:0b:b7:b2:04:
c3:96:10:fc:24:d9:7b:3e:2b:b4:2c:4d:5e:30:18:5d:cb:3c:
20:11:38:5f:73:c9:d6:70:71:34:31:ca:c9:58:df:70:c0:02:
80:0f:4d:aa:57:d8:79:3b:f1:58:2d:3f:6d:9f:03:9f:0f:93:
ce:ac:5b:a0:48:45:62:9b:f1:d1:6b:05:a7:b1:07:90:0c:36:
15:c2:9a:08:69:75:fb:88:71:8b:1e:32:fa:e5:96:8c:99:7b:
af:23:5c:b3:87:2c:85:fc:b4:45:7c:6b:3d:a5:73:e9:8d:ad:
87:cc:76:ae:d8:f0:b4:58:85:f6:fe:d7:26:6e:dc:e6:ad:2d:
35:ee:4a:84:ce:07:1d:a5:d9:94:8b:a1:0b:97:56:fd:f9:64:
31:ea:c6:dc:59:f9:36:6e:88:98:94:e9:81:cb:03:7f:59:42:
b3:6d:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:04 2025 by rpki-client