Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier: wU0a22MTluvAt6y6l1s8i9QiVsuuw5Ku2FLxeKPkMyM=
Subject key identifier: CB:55:D0:1F:98:1A:AF:C7:09:EA:F3:17:EE:6D:1F:53:85:39:AD:8A
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer: /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial: 019853E8A0F13A90B2CB0078DAC104571773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number: 1601
Signing time: Tue 29 Jul 2025 02:00:11 +0000
Manifest this update: Tue 29 Jul 2025 02:00:11 +0000
Manifest next update: Wed 30 Jul 2025 02:00:11 +0000
Files and hashes: 1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: PIv22keXbOU3+8I4Ax2UI8c5FbOFRpkrfsQ0vKWvDYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:a0:f1:3a:90:b2:cb:00:78:da:c1:04:57:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Validity
Not Before: Jul 29 02:00:11 2025 GMT
Not After : Jul 30 02:00:11 2025 GMT
Subject: CN=cb55d01f981aafc709eaf317ee6d1f538539ad8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:f4:c2:bd:5b:ed:69:8b:3b:20:07:4f:46:
cd:18:5e:c5:f3:12:d6:45:b8:f8:e6:c2:dd:df:81:
5f:c2:ad:fa:23:8b:ca:29:99:a2:79:ae:97:f4:94:
6a:38:dc:8a:d0:b3:43:83:2b:48:38:7f:3a:fa:2f:
f0:bd:54:e4:8e:7a:3d:f2:93:42:36:9d:14:30:9f:
d6:3e:99:37:dc:d7:9e:8e:c3:4f:51:c1:20:01:48:
2d:4d:21:43:1d:a4:c6:ce:2d:f0:e0:1e:32:e5:76:
2a:64:75:76:8b:13:fb:f2:9b:cc:26:c1:13:9e:a9:
a4:4e:2d:5e:17:ed:24:a7:0d:09:9a:2a:e5:a0:bd:
c5:7a:a4:9e:f4:59:50:ad:40:16:74:ce:68:fe:7f:
ea:33:bf:b8:ca:67:a7:9a:77:a2:94:21:f3:49:54:
60:22:77:17:c8:df:5f:7f:2f:f4:99:03:2b:4c:a2:
1c:8f:84:a4:77:6f:38:8e:5b:c9:0a:74:4b:26:ab:
9c:10:fb:36:6b:2d:b4:43:2a:22:8e:57:a2:a7:c5:
de:9b:3e:d2:76:b0:ee:66:84:47:a0:e3:42:bd:3e:
f5:b4:2a:f7:8a:be:ec:74:b6:1f:9f:85:8b:cd:70:
7d:5b:ca:f3:50:7f:a4:1c:e6:2f:2e:65:4d:8b:6b:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:55:D0:1F:98:1A:AF:C7:09:EA:F3:17:EE:6D:1F:53:85:39:AD:8A
X509v3 Authority Key Identifier:
keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:50:b6:dd:eb:c3:ab:05:99:71:98:94:4d:ec:93:4d:43:ce:
58:c7:ea:93:41:29:71:d5:f6:92:84:6a:3e:a6:d2:24:3c:70:
1d:c0:ad:2c:a9:d8:65:4c:b3:6a:ce:7a:50:c9:90:c7:45:26:
a5:67:bb:56:65:df:0a:06:60:4d:35:5c:b0:25:87:8d:bd:d2:
9c:44:60:83:db:59:56:e6:e1:ad:fd:74:f0:3a:1d:3a:d5:b0:
56:a1:f7:5d:71:06:64:ef:15:ce:9f:1c:a7:2f:59:e9:7b:5f:
06:b7:c1:1b:4b:26:5a:a5:29:11:9c:a8:15:c9:5e:ca:48:1f:
c6:dc:06:c4:ef:27:8e:99:dc:5e:f6:fe:1e:a8:5a:fe:50:e1:
c7:2d:0d:cc:dc:28:82:87:79:cc:df:58:78:d1:e3:4f:69:4d:
96:d7:bf:10:98:53:13:62:fd:d5:79:2c:e2:06:dd:65:49:2e:
6b:06:cf:a0:e1:e2:b8:7e:07:ba:ef:5f:0f:56:b2:a6:81:b6:
f7:f0:86:49:e8:86:53:e2:d1:62:12:0a:9e:ec:04:6b:5c:df:
f2:fc:4b:94:ae:27:be:ab:cf:57:84:43:43:7b:44:c4:17:c0:
b5:ef:b3:a8:01:03:b1:b7:3a:22:fe:43:ed:3f:ef:64:31:8b:
db:81:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:33:20 2025 by rpki-client