Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: sdtljfYo1YWrMVtMlL6OSrHlnouijy7Dj/kB77b5aI4=
Subject key identifier: 9B:83:B4:3F:5F:25:CC:82:CF:9E:B1:18:49:D2:32:2D:C3:BA:A9:F5
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 0197B6A25189B1C3EF099202811BB9F770B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 03C9
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: KYXJ33Q069NINRQQg6UDR4PQQaTX/qbWLr7J3DBrulg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:51:89:b1:c3:ef:09:92:02:81:1b:b9:f7:70:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=9b83b43f5f25cc82cf9eb11849d2322dc3baa9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:ed:59:1d:e8:7f:8a:70:b7:f6:7c:c8:c5:
bf:1a:13:fb:9e:2c:84:6c:4e:1f:43:be:c8:45:31:
9f:ca:09:f7:d1:0d:92:fd:58:15:71:c9:fa:14:cb:
48:57:f4:75:e0:64:50:ca:b5:11:0b:ec:63:b9:21:
34:46:76:4c:f3:31:41:d3:d3:b9:e2:8a:0e:94:a3:
35:f3:72:dc:8f:b5:63:1a:49:cd:70:03:dd:0a:3c:
39:7e:7e:98:05:53:7d:b0:91:60:a9:fb:04:1e:a8:
9e:f0:96:c4:61:8e:0c:f4:3f:89:90:66:fc:60:12:
4d:bd:d4:eb:98:7d:f0:6f:6a:34:9b:92:26:06:e1:
2f:c9:81:df:ed:b2:d6:4e:a8:90:a8:fc:07:5f:d5:
e3:fa:28:60:b8:fa:7b:c3:ea:94:29:d5:c0:57:d5:
d2:0c:5a:d1:00:f3:75:2e:dc:a7:ff:4f:f3:5a:49:
f8:44:ee:09:7b:68:5a:02:d3:71:db:d9:4a:cf:fd:
51:e6:99:f1:9d:26:72:8b:0a:04:15:75:3d:0c:69:
4b:4c:46:91:37:c4:82:55:06:7e:69:cd:fb:1e:7e:
11:32:42:63:05:8d:f8:46:ab:37:27:87:49:9f:6f:
f9:6a:98:02:f6:9f:7b:06:e3:40:fe:73:c2:15:61:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:B4:3F:5F:25:CC:82:CF:9E:B1:18:49:D2:32:2D:C3:BA:A9:F5
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a0:60:7d:fb:65:dd:03:fb:f7:24:53:e8:41:09:44:e9:e7:
cf:8b:8a:34:f8:e6:3f:06:b9:af:67:80:2f:11:61:c8:88:e1:
a4:dc:bf:8f:88:3f:b8:51:16:28:00:f6:56:c4:ee:8c:bd:13:
7e:fd:69:8f:94:f9:da:78:7c:43:69:68:98:68:39:c4:d9:1f:
94:59:7e:db:d1:43:92:09:35:44:30:b3:5c:49:d5:2e:5d:76:
f9:f5:b0:cf:10:79:1d:94:6a:ab:17:20:f8:0c:a7:ee:8d:cc:
98:31:85:c2:71:5a:db:85:d4:fa:ab:dc:db:3c:32:bc:df:cc:
9c:1f:0a:70:f2:ad:1c:4b:4a:7a:6c:d2:9e:82:ee:ed:a9:6b:
d2:81:1e:81:e3:17:a2:b5:22:de:d9:9a:4f:fc:d8:70:0c:00:
a8:52:fd:1c:e9:f8:be:69:bc:d2:93:b9:e4:4b:51:8b:85:dc:
22:0d:79:0b:3e:eb:39:c8:3f:72:6a:e8:d4:30:c1:e4:7b:b9:
cd:79:d8:0f:f4:5a:6a:02:2a:86:c3:61:ea:7c:f6:39:63:85:
4a:82:e4:84:4a:11:a6:3b:d0:bc:a3:f8:b9:f6:d4:9a:23:e7:
3e:af:4f:8b:0b:57:d3:d6:12:48:15:33:01:61:9c:49:02:97:
59:a3:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:53 2025 by rpki-client