Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: Jvv2vCnmNBTwNPH3KCI0mG5Sl+/l/R4+23UIqBAX2rY=
Subject key identifier: 1F:48:42:DD:87:5D:8E:05:B3:50:C8:18:95:F2:25:50:58:40:B7:60
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 01963FC2611307C85E48AF04E78220D50E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 0307
Signing time: Wed 16 Apr 2025 18:00:25 +0000
Manifest this update: Wed 16 Apr 2025 18:00:25 +0000
Manifest next update: Thu 17 Apr 2025 18:00:25 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: VKKSYvD/KkeipiWS54TKB6GRT6XXCAacV2rVf/GuRZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:61:13:07:c8:5e:48:af:04:e7:82:20:d5:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Apr 16 18:00:25 2025 GMT
Not After : Apr 17 18:00:25 2025 GMT
Subject: CN=1f4842dd875d8e05b350c81895f225505840b760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:00:77:db:1a:16:1c:9d:d3:79:3e:6c:10:
ab:c2:c7:c5:5c:b9:8e:d1:23:ec:e0:11:d1:05:40:
b6:06:d0:40:c9:b6:5a:93:66:35:90:20:f7:b3:06:
40:e4:dc:17:89:f3:11:54:ea:c6:17:56:d9:bc:09:
65:92:3e:9e:3c:84:9d:ef:c2:10:5b:8c:2c:c2:21:
37:0a:5c:b0:30:3d:a8:b9:98:37:f9:29:2c:0e:02:
2f:15:c8:6c:95:50:20:b3:39:23:44:4a:d0:42:92:
47:08:cb:10:c1:eb:33:62:90:61:b6:15:55:94:a0:
fc:05:70:69:3e:69:56:15:71:2d:88:2a:b5:45:0c:
9c:77:ad:1b:93:df:4b:3d:10:11:d0:41:17:9f:c7:
8f:d6:f1:9e:96:c5:77:62:79:66:4c:53:db:2e:08:
b7:5e:e6:e5:a4:40:36:30:ea:ff:06:79:4f:04:db:
49:3b:1e:10:cc:88:1b:ba:5d:47:c8:a0:31:25:f6:
48:23:d3:30:2d:7b:3a:3b:85:a9:43:61:69:11:9b:
6a:d8:43:e2:6a:f0:71:42:82:4a:23:af:d9:98:32:
e8:14:93:28:34:eb:69:c5:c4:b0:4e:d9:2d:01:a0:
75:d9:83:0f:8d:b7:b6:a4:ed:6e:45:5c:5c:af:7d:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:42:DD:87:5D:8E:05:B3:50:C8:18:95:F2:25:50:58:40:B7:60
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e1:6a:8e:e9:05:26:19:90:97:6f:89:34:ee:b2:42:1c:b9:
00:05:30:07:c2:ff:d8:44:5c:5d:da:6b:69:27:b7:59:18:59:
58:9b:dc:c6:e0:4f:14:37:45:c5:0e:99:8c:b7:96:55:dc:a0:
a7:77:63:69:5b:e3:b6:d2:47:20:aa:0b:6f:c5:4d:26:00:a1:
7a:49:e7:be:5b:63:01:55:55:f3:4f:ce:7f:ac:f7:1f:0a:93:
3a:fd:c7:7b:4c:80:eb:00:06:26:1c:d3:50:58:ca:0e:80:78:
ef:1f:81:e6:10:d0:25:9a:30:69:98:f5:ee:78:2e:79:ac:9a:
0f:24:e4:b5:9d:1c:73:80:9e:bf:52:d7:81:bb:a4:b9:c2:04:
fa:4f:26:9f:84:86:b2:3f:d2:5c:74:a7:67:a6:91:5e:0a:13:
53:3e:fd:42:9f:ba:7f:73:b2:4d:ed:87:62:90:c0:3b:0a:cf:
d9:0e:70:a7:00:f1:47:bc:78:7f:7c:71:24:e3:07:67:f6:5f:
7d:e4:3c:81:ce:6b:7c:1f:26:cb:5c:6b:f6:9f:a0:0a:25:50:
26:1a:5a:9d:0b:b7:3c:bb:b7:c1:3d:df:c7:28:27:45:23:2b:
dc:a3:67:b0:e9:3d:6f:16:93:71:df:64:90:f7:eb:e8:c4:eb:
ef:87:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:01:44 2025 by rpki-client