Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: fqksLSWPNQe0RVSxVajGJPP8wcoym63QtVyqHEPkQSU=
Subject key identifier: 59:E3:32:EF:A2:75:B0:DB:83:A4:01:83:E6:F8:EE:C8:78:92:C4:6C
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 0199239FB0C9CD95743D6A81228B1AD9DD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 0486
Signing time: Sun 07 Sep 2025 10:01:31 +0000
Manifest this update: Sun 07 Sep 2025 10:01:31 +0000
Manifest next update: Mon 08 Sep 2025 10:01:31 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: mlldWjZeymG0bq+Oazwqk3VbRZppW6cnwc6hRx1qMb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b0:c9:cd:95:74:3d:6a:81:22:8b:1a:d9:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Sep 7 10:01:31 2025 GMT
Not After : Sep 8 10:01:31 2025 GMT
Subject: CN=59e332efa275b0db83a40183e6f8eec87892c46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:dc:85:cf:82:f3:8e:90:90:c6:4a:d8:10:
f9:28:3d:b5:66:c7:b6:91:e6:ff:9c:16:64:6c:68:
aa:00:a4:7c:a5:e8:cd:ce:0a:5b:88:4d:34:a1:22:
b7:d4:d9:e4:22:4c:38:99:e8:cd:b2:a7:de:f4:d4:
0f:68:07:47:01:07:8b:a1:e1:a5:8e:7c:30:44:a6:
a5:50:69:13:e0:b5:e9:bd:92:be:bc:d1:74:07:92:
e2:24:a1:d0:f5:d1:ab:7b:af:40:82:1c:cd:30:2a:
ef:61:e2:20:2c:06:a0:5f:e8:7e:12:3f:95:b2:b1:
7d:45:c9:2c:48:74:15:21:60:61:d3:41:9f:ae:18:
dc:7e:39:a4:24:58:d3:e0:9a:55:dc:2e:47:17:9f:
1c:27:e8:ac:7a:22:e1:8d:e4:db:99:ce:9b:d9:ae:
50:ae:12:7f:42:7b:af:5b:05:21:b2:8c:6c:5d:43:
cb:ac:f0:be:55:d8:c9:c0:db:00:8f:e2:02:ed:3a:
d7:3b:3a:43:10:3b:b0:c2:a0:35:99:13:8c:77:64:
57:6b:b6:35:11:33:f7:1e:e1:88:2b:64:61:98:12:
6f:60:65:20:71:7f:a4:3d:89:29:82:31:d0:b5:12:
00:6b:7d:db:b9:46:3b:24:14:5e:be:b9:c9:e8:d1:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:32:EF:A2:75:B0:DB:83:A4:01:83:E6:F8:EE:C8:78:92:C4:6C
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:13:06:ea:25:ad:c8:3e:b7:3b:7f:4c:f5:01:85:5f:fa:3f:
4e:b4:9f:85:b6:9f:da:12:76:81:18:b8:26:a4:dd:ca:64:7f:
c8:4b:32:fb:54:f7:26:de:30:c7:24:c6:27:4d:66:96:35:68:
6e:bc:dc:40:fc:9a:9c:31:fd:c9:d9:a2:e2:57:aa:ae:dd:59:
98:e9:77:31:58:3e:62:ee:54:0d:5c:2d:78:a7:59:72:a4:f7:
a2:4e:ca:09:37:bb:67:f9:ca:7b:d4:3d:f8:fe:72:d6:ea:cb:
22:6d:83:e6:72:7d:72:91:63:b6:68:a5:ac:ce:d2:11:5d:39:
e1:77:2c:26:21:b0:40:86:39:25:2d:76:5b:fa:e2:9f:25:5d:
7a:a2:80:e0:01:fe:89:fa:3e:bf:13:c0:5a:f1:88:df:9a:b3:
59:e8:86:96:7d:db:f7:ca:53:5e:b4:49:c9:a3:4d:15:a8:58:
5f:9d:01:fe:c6:70:d9:fc:42:7c:42:e3:57:24:a4:90:1e:5d:
bf:bd:93:fe:50:3b:83:a5:66:38:8b:8d:93:ac:b0:26:f5:c0:
d9:e3:9e:44:8e:26:3a:64:df:32:ad:28:e1:b7:0b:b2:db:cc:
12:7b:c2:37:29:1c:05:ac:d7:0c:1e:d3:14:e7:a2:1e:38:06:
37:d0:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:25 2025 by rpki-client