Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: C/YvcT+7Mmx34HdPJF3M0fQ9b8QP/H5D7OulgYKLONQ=
Subject key identifier: 02:0B:F8:73:13:11:45:00:30:AF:40:50:4A:E3:03:0E:7B:42:4E:47
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 0198D4733E7AFE6E853749A3A81EAF80FAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 045D
Signing time: Sat 23 Aug 2025 01:02:59 +0000
Manifest this update: Sat 23 Aug 2025 01:02:59 +0000
Manifest next update: Sun 24 Aug 2025 01:02:59 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: ZqA7S3OQwTOrl7SSEiy1Pg/pJwrYurQAeA+zEY7uWnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3e:7a:fe:6e:85:37:49:a3:a8:1e:af:80:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Aug 23 01:02:59 2025 GMT
Not After : Aug 24 01:02:59 2025 GMT
Subject: CN=020bf8731311450030af40504ae3030e7b424e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:e3:c4:9a:1c:5f:af:b5:eb:9d:4f:0e:5b:
43:03:d8:e9:a1:8a:a8:a1:05:3a:2b:4d:4d:bf:f6:
4b:a2:c4:0c:8a:fe:1f:8f:13:d6:d8:96:c7:f1:53:
9f:3f:78:f7:76:79:df:cb:bc:a3:6d:c3:df:91:e6:
83:62:86:62:be:6b:0f:c9:27:fd:a1:3b:09:d4:ce:
85:86:66:39:e6:9a:0c:be:0c:58:a5:c2:08:80:1d:
87:ef:cc:b7:26:db:9f:8d:2c:7b:f6:3e:3a:73:5f:
30:ca:c8:ad:14:09:f5:21:c6:5d:7a:28:88:99:81:
2a:98:b2:8f:0c:fe:98:f4:9d:1a:7b:f8:80:6c:2f:
03:8e:5d:37:bd:eb:c1:31:a3:ac:41:20:20:c7:57:
52:9b:7d:3f:80:6d:54:5b:53:01:c6:25:c1:4e:80:
84:b1:ad:92:f7:b1:30:c5:6b:87:6d:e1:a3:a7:66:
ef:15:25:17:24:6a:3e:85:98:9a:d3:ea:f3:b8:cb:
16:75:82:78:7d:1c:9d:71:b6:2a:23:fa:8b:0c:df:
cf:43:6f:dd:c3:30:c9:11:dd:8d:50:3c:c0:76:5c:
0f:1a:bb:dd:99:d4:3e:81:58:72:3b:86:b0:b4:2a:
43:76:ef:72:cb:3a:af:12:3e:d7:b8:10:20:13:e4:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0B:F8:73:13:11:45:00:30:AF:40:50:4A:E3:03:0E:7B:42:4E:47
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:52:c0:f5:4a:20:40:b9:ca:62:3c:05:36:11:f8:14:fb:ec:
3e:cc:6e:a2:cb:05:95:d1:78:7c:49:ba:2c:0b:a9:8d:c7:7b:
96:82:26:0b:8d:21:41:e4:3d:ef:58:cb:b6:99:4c:83:be:a4:
98:50:b6:e9:1d:8d:e6:4b:0d:6c:72:16:30:71:04:f9:9c:6d:
a8:46:e2:49:44:3f:23:4d:ee:97:2a:a0:5d:c4:54:97:a6:a7:
20:40:3e:26:5b:22:df:2d:a1:bc:9e:64:38:6e:af:1a:bf:ef:
ff:8f:4e:06:e7:93:a6:61:4b:bb:7c:2e:98:ca:4e:d9:16:d9:
b1:00:51:be:f1:32:82:12:57:04:ab:89:2d:ec:c9:99:ed:ef:
9f:66:f8:bb:c5:76:e7:89:fc:e5:1e:c2:77:a9:dd:9f:13:7b:
ce:20:af:9e:4a:37:56:d5:5e:ee:75:20:80:97:b6:22:13:0f:
45:38:99:b9:bc:bc:d6:7d:49:5b:f0:ac:3e:37:78:28:2d:cf:
b4:84:d7:03:23:a2:b1:9b:6a:7c:a5:9b:5c:35:f2:66:00:72:
b3:d6:8b:de:f6:1d:ca:f2:8e:96:df:ab:73:01:23:39:1c:1e:
d4:5a:29:26:75:53:b0:d9:6f:76:5a:b0:be:a2:1f:4a:dc:f6:
78:b0:d2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:45 2025 by rpki-client