Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: 14t5SM1Z3JHnBhoANJtKAhVojgc0jP1mCIhEiEnyR5w=
Subject key identifier: 31:D1:41:C4:D2:F6:92:35:85:A6:78:38:BD:CE:98:0A:95:B7:1A:CA
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 019873E3EC32FC0E516D26BA0AFF4814D309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 042B
Signing time: Mon 04 Aug 2025 07:02:53 +0000
Manifest this update: Mon 04 Aug 2025 07:02:53 +0000
Manifest next update: Tue 05 Aug 2025 07:02:53 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: P3lUK5dWwPmF8GQl+hWZy5QMAtbCWL9w7NfOiAjaVQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ec:32:fc:0e:51:6d:26:ba:0a:ff:48:14:d3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Aug 4 07:02:53 2025 GMT
Not After : Aug 5 07:02:53 2025 GMT
Subject: CN=31d141c4d2f6923585a67838bdce980a95b71aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:17:5e:11:2d:6f:e2:3c:b6:d1:f3:ef:d4:
58:94:fc:46:3b:d9:52:1c:70:ca:bf:e2:65:fc:4c:
6c:ec:66:46:18:35:8c:01:b4:01:33:be:7c:3e:03:
43:86:53:75:f5:9d:04:74:1f:e9:09:67:0d:54:37:
ad:56:36:26:53:8c:0b:e6:3d:36:1f:c2:40:6f:72:
0a:3c:4a:4e:33:4c:97:4e:bd:c5:84:7a:93:eb:56:
61:75:d5:56:3b:fa:07:d7:a1:04:35:f2:e3:68:47:
69:6b:47:80:16:39:16:74:02:19:e6:93:e9:71:cb:
32:f3:75:70:85:e2:11:1b:3d:45:81:ce:8b:e7:bf:
f9:d3:cc:e6:fa:52:b1:f4:9f:ec:01:3e:95:c1:64:
f5:90:f0:cd:0c:2d:d5:50:53:ac:6e:cd:98:72:2a:
52:e6:f8:a9:42:a6:d0:80:a0:0c:e8:00:46:f6:e5:
da:ed:79:3a:59:cc:7f:a7:7e:d9:89:57:77:7a:f1:
1a:da:04:c1:79:dc:42:47:28:3a:59:e5:48:11:0d:
67:ea:09:1f:c5:b0:1e:36:fc:e0:c2:e9:f2:c0:5c:
0c:18:9d:4c:99:53:ba:34:49:8e:a0:b8:d7:47:1e:
29:1f:51:e1:69:75:6f:f6:92:97:62:c8:86:88:42:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:41:C4:D2:F6:92:35:85:A6:78:38:BD:CE:98:0A:95:B7:1A:CA
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:63:d2:fb:dc:1d:0d:66:ed:a0:f1:f3:b6:de:85:76:ff:4a:
ca:66:82:92:74:d8:db:7a:f2:1e:4e:b1:3d:d4:dc:de:5d:44:
ec:13:0a:e6:ff:d2:d1:d4:46:82:91:45:99:54:15:da:60:3e:
70:3c:43:68:2c:1d:79:24:3b:de:3a:a1:26:d1:d6:a8:71:4d:
86:f1:da:a7:e5:33:41:02:0c:06:fd:9a:96:31:1e:c3:6b:2d:
2d:3c:f8:c0:16:24:74:5d:6e:e0:b5:23:ce:76:35:16:0b:6e:
b4:76:78:45:e4:17:f5:b9:f7:a3:e7:e0:a2:0a:37:00:32:b8:
06:29:4a:20:17:d8:f8:11:d8:9e:cf:e2:e9:f5:4b:2b:09:24:
93:11:b0:36:a6:a4:cd:c7:49:f1:ca:6c:89:c4:7f:3e:06:42:
38:e2:3a:1a:a8:51:2f:bc:e5:d1:5f:a8:af:ec:69:ae:56:e2:
6c:a3:01:98:70:64:b6:fa:f7:e6:91:b1:d1:7b:74:ee:31:17:
ee:2a:a9:ee:84:3d:87:2c:00:a6:8e:a7:73:bb:b7:b8:82:46:
6a:0d:ed:2e:37:d6:76:65:62:f2:24:c9:d4:f1:38:b7:0a:ef:
16:e6:f0:26:09:87:e4:af:82:42:c2:0f:8d:04:b8:39:9b:b8:
c7:64:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:46 2025 by rpki-client