
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier: G0yCscpuo6ZlUenuqVjNOd2NNEspdFQ2OhID9ni4MPY=
Subject key identifier: 37:34:38:B9:AF:A7:A5:60:AF:CA:41:64:0A:B0:5D:74:5C:CA:99:27
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial: 01974C69C726511001E69ED6C44A0E44809C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number: 06D5
Signing time: Sat 07 Jun 2025 22:01:30 +0000
Manifest this update: Sat 07 Jun 2025 22:01:30 +0000
Manifest next update: Sun 08 Jun 2025 22:01:30 +0000
Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: 8mCG99gASPHv/NbK7jz7BCHB65jSpVrHQcaui8tI8xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:c7:26:51:10:01:e6:9e:d6:c4:4a:0e:44:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
Validity
Not Before: Jun 7 22:01:30 2025 GMT
Not After : Jun 8 22:01:30 2025 GMT
Subject: CN=373438b9afa7a560afca41640ab05d745cca9927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:9b:cb:9d:73:a9:8a:39:7b:b5:39:d7:2c:
ea:9a:0f:6a:b2:cc:6b:a4:b7:44:0b:76:34:63:5b:
6b:e9:14:33:95:62:0d:97:97:75:17:6f:cf:ca:8b:
8f:d9:bd:91:1a:f8:fd:10:11:88:ad:2d:1e:54:03:
9e:f0:7f:1d:00:51:79:77:27:f8:c1:e4:23:67:29:
4a:16:48:b4:26:43:18:43:c0:90:78:5f:60:57:df:
45:dc:32:37:8e:58:37:9d:d7:aa:46:c0:5e:67:fa:
89:cf:e9:82:03:57:41:65:a0:48:6c:35:ed:48:98:
81:8a:e7:8e:4f:59:52:61:09:60:1e:e3:ad:94:44:
08:d9:0e:c7:c2:a5:82:06:0b:95:fa:34:ef:35:9d:
1b:b9:b2:25:3a:9c:d9:7c:83:5a:f9:d5:52:bc:28:
ce:bd:b1:64:d4:38:b5:f2:70:cb:8c:1b:98:2f:66:
bb:44:71:43:a1:ab:6c:c7:87:3b:49:39:b3:c4:d8:
46:e9:5a:31:ff:26:a5:91:46:69:54:0c:b9:1c:4b:
01:32:cd:ef:0b:44:fa:84:27:37:34:0c:db:49:55:
e9:02:03:b9:75:03:80:e1:4c:e0:91:e8:af:ee:81:
fd:88:44:0c:05:10:70:0a:45:84:63:6b:62:ae:f3:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:38:B9:AF:A7:A5:60:AF:CA:41:64:0A:B0:5D:74:5C:CA:99:27
X509v3 Authority Key Identifier:
keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:2e:5c:db:9d:1e:59:3d:ff:86:25:c0:fd:7c:a5:7c:0d:
5f:f9:1a:d4:aa:5e:f9:35:30:32:6e:af:7c:f3:b6:af:86:e7:
0d:1d:17:a3:be:ac:40:98:db:30:78:fd:42:2e:a5:6e:17:65:
20:97:95:23:a4:0f:2d:85:ab:da:40:cf:5a:39:0c:e8:37:0e:
86:fd:63:0a:c0:8a:f9:a8:2f:0b:f4:5f:ef:77:1c:c4:9e:33:
9f:cc:d4:13:2f:d7:93:8a:67:e3:8d:ad:9a:c2:6f:27:30:b7:
7b:41:d9:29:4b:6c:ae:f3:8c:39:34:3f:38:a7:bd:e2:7a:5e:
31:e6:fb:da:74:bc:78:58:ae:6b:47:20:cb:8c:a5:9c:48:22:
8b:ac:8f:b5:f1:c9:e4:d7:93:fe:63:20:34:ea:de:73:dc:6b:
cf:81:d1:8c:0a:54:c3:53:d5:87:50:48:b5:48:09:b5:fb:2e:
65:7b:f1:35:41:dd:2d:06:55:90:9a:c5:6c:b1:8f:bd:20:85:
b7:a1:d7:00:a1:d8:56:92:65:89:2a:71:66:36:07:2f:d6:8c:
d1:31:19:34:89:34:0a:b5:23:58:b9:a8:41:58:24:74:5d:bf:
a3:b0:5f:f7:40:0a:10:22:93:67:77:62:2e:af:17:9a:cf:8a:
c2:ee:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:25 2025 by rpki-client