Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: IbTDUGITjk0lXTpCb68tjBBqVEMDMWN6PBtFv/eFazI=
Subject key identifier: 4D:6E:D0:CB:16:BC:08:52:88:64:18:75:B4:B8:8B:21:B2:06:97:C7
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 019A71B8AB2CD52DFE38176590633529B08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 0533
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: bxJx6BAWPjGMWL3bT5fRbbRq/uIjBlGwJGQlWImf2pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ab:2c:d5:2d:fe:38:17:65:90:63:35:29:b0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=4d6ed0cb16bc085288641875b4b88b21b20697c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:be:91:c7:77:0e:25:1e:b9:16:d0:97:fa:
30:df:f5:93:e3:eb:b0:c2:f8:ca:45:99:f0:07:b0:
ea:08:d7:6b:8f:ce:61:92:f9:8c:26:f9:f9:b5:f0:
c2:be:13:a6:c5:d2:16:41:71:fc:94:7f:5f:95:cc:
45:ed:35:f6:00:59:a9:38:7a:62:d2:ab:2c:93:ca:
5a:ad:6f:1c:2d:2d:17:f7:d1:f3:46:93:60:e4:74:
e5:4a:0e:aa:19:41:af:f9:f8:4e:a7:04:0c:56:22:
ba:62:a6:0d:e0:89:b1:86:a1:8e:21:c2:61:f9:57:
2c:79:41:a4:4c:ce:a4:7c:91:03:88:fe:55:17:67:
d7:02:df:e1:d1:22:db:40:cc:9a:ee:c2:8a:67:67:
37:f1:c3:8b:1f:4e:db:82:6f:d2:09:09:ed:41:bf:
62:9b:72:be:8e:a6:30:4f:fc:9a:fc:a3:9a:ad:66:
c8:1b:3a:17:f3:99:1d:18:56:29:e7:45:8a:39:3f:
0c:58:55:09:de:56:d9:f8:37:a0:06:97:f3:5f:7f:
57:34:51:27:b1:75:92:38:09:97:43:62:b0:d1:09:
97:21:3c:ae:4a:9b:70:3a:cd:b0:32:28:4e:bc:c9:
a3:33:b5:3e:cb:9d:82:1f:ba:11:af:08:37:bf:9e:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6E:D0:CB:16:BC:08:52:88:64:18:75:B4:B8:8B:21:B2:06:97:C7
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3d:47:3b:c0:72:f8:36:9b:d5:54:4a:a7:61:c1:69:16:2a:
37:1f:ef:68:6b:aa:9e:1b:7a:22:95:6d:01:67:c2:58:c7:2d:
d1:c6:4a:86:71:24:60:5c:eb:2f:63:78:cc:bb:9e:29:e6:f4:
fd:e8:6a:97:56:8e:e1:bd:86:41:7a:50:72:2e:6b:9c:b4:e0:
6b:4a:fe:61:6d:c8:ad:3f:ba:7d:fe:71:85:7c:34:16:6f:ee:
11:90:f2:a5:d5:52:2d:3f:c3:a0:33:77:1e:58:06:74:90:a1:
ed:f8:5e:50:f5:ea:f7:b5:1e:5f:44:71:e5:dd:d4:b0:79:c8:
12:d9:2c:f4:6e:fb:de:42:98:53:cc:0d:cf:f4:8b:62:1e:88:
cf:bc:98:2a:7a:e8:37:5d:3f:54:18:3d:09:c3:fc:5b:c3:d8:
71:0e:31:14:9b:30:35:16:33:35:ff:bf:50:d5:48:53:99:7a:
0d:6c:30:d3:8c:2b:2b:e7:e5:af:8e:7d:c3:82:0c:d4:2a:13:
63:0c:cb:d6:7a:d1:8d:c3:5f:c2:6c:e1:bc:e2:bc:eb:e3:1d:
ff:69:b1:80:0c:e6:6d:8d:cb:e7:d5:86:c9:71:38:39:11:02:
84:f4:7f:d9:02:2a:45:0d:34:aa:a8:e4:18:29:d9:f2:99:64:
06:23:06:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKss1S3+OBdlkGM1KbCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm
ODQxNzIwHhcNMjUxMTExMDcwMTU4WhcNMjUxMTEyMDcwMTU4WjAzMTEwLwYDVQQD
Eyg0ZDZlZDBjYjE2YmMwODUyODg2NDE4NzViNGI4OGIyMWIyMDY5N2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtam+kcd3DiUeuRbQl/ow3/WT4+uw
wvjKRZnwB7DqCNdrj85hkvmMJvn5tfDCvhOmxdIWQXH8lH9flcxF7TX2AFmpOHpi
0qssk8parW8cLS0X99HzRpNg5HTlSg6qGUGv+fhOpwQMViK6YqYN4ImxhqGOIcJh
+VcseUGkTM6kfJEDiP5VF2fXAt/h0SLbQMya7sKKZ2c38cOLH07bgm/SCQntQb9i
m3K+jqYwT/ya/KOarWbIGzoX85kdGFYp50WKOT8MWFUJ3lbZ+DegBpfzX39XNFEn
sXWSOAmXQ2Kw0QmXITyuSptwOs2wMihOvMmjM7U+y52CH7oRrwg3v5761wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1u0MsWvAhSiGQYdbS4iyGyBpfHMB8GA1UdIwQY
MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt
ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3
LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAD1HO8By
+Dab1VRKp2HBaRYqNx/vaGuqnht6IpVtAWfCWMct0cZKhnEkYFzrL2N4zLueKeb0
/ehql1aO4b2GQXpQci5rnLTga0r+YW3IrT+6ff5xhXw0Fm/uEZDypdVSLT/DoDN3
HlgGdJCh7fheUPXq97UeX0Rx5d3UsHnIEtks9G773kKYU8wNz/SLYh6Iz7yYKnro
N10/VBg9CcP8W8PYcQ4xFJswNRYzNf+/UNVIU5l6DWww04wrK+flr459w4IM1CoT
YwzL1nrRjcNfwmzhvOK86+Md/2mxgAzmbY3L59WGyXE4OREChPR/2QIqRQ00qqjk
GCnZ8plkBiMGzg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:24 2025 by rpki-client