Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: U8RGuL6lpselSTqEqxti8i0BU7rChdF56LaOiKOP3Gs=
Subject key identifier: B3:68:FE:4C:3C:EC:96:AD:69:6F:0A:1D:4F:F4:12:56:B5:25:A0:52
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 019A52D1FDB401BDB0C1CB574EADA97D854A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 0523
Signing time: Wed 05 Nov 2025 07:01:24 +0000
Manifest this update: Wed 05 Nov 2025 07:01:24 +0000
Manifest next update: Thu 06 Nov 2025 07:01:24 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: gSymgxUZl30Q52x8LaY71bQLC1lQgcOpN1DbP9FhsNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:fd:b4:01:bd:b0:c1:cb:57:4e:ad:a9:7d:85:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Nov 5 07:01:24 2025 GMT
Not After : Nov 6 07:01:24 2025 GMT
Subject: CN=b368fe4c3cec96ad696f0a1d4ff41256b525a052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:84:f9:21:58:39:08:eb:1b:68:06:aa:72:
07:b0:ab:96:31:66:a4:86:7e:b5:a7:da:ce:db:bb:
b1:91:96:97:54:18:02:ce:9b:2e:ec:14:df:6b:dd:
b5:67:92:99:7b:05:14:1e:7b:ec:a3:cd:c0:0d:32:
52:7f:8d:d2:69:01:15:39:60:16:c5:3a:5b:b4:8c:
ef:56:44:b6:46:c0:69:ff:03:78:b7:b7:d3:6c:85:
d5:af:4c:ca:17:f2:d4:93:5e:1b:48:5a:61:bd:78:
6c:12:f3:be:38:04:45:b0:c1:9b:29:81:fa:9e:d5:
a3:44:d3:c7:88:3c:1f:f2:2b:bf:fa:c6:be:d1:1a:
e6:b7:a1:64:53:8e:34:42:0e:87:d6:93:10:91:ec:
e9:fb:e7:e4:2c:6e:05:05:bc:93:15:18:7d:f8:d8:
fc:03:ac:fe:70:7e:ff:cc:74:d8:ce:7a:ff:fb:7d:
65:47:2e:d9:1c:6f:9f:6d:01:7b:0b:7d:80:06:5a:
a7:6b:b4:2f:62:3d:ee:d8:b5:d6:e8:8b:5d:4d:ca:
49:d8:03:7c:b4:af:7a:f8:1e:05:98:2a:18:d9:51:
ca:ed:66:75:6d:9a:c0:d2:e8:41:4f:12:93:d6:46:
bc:da:2e:45:18:53:0e:01:63:72:79:f1:de:fb:ae:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:FE:4C:3C:EC:96:AD:69:6F:0A:1D:4F:F4:12:56:B5:25:A0:52
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d2:92:04:c9:26:ae:3c:61:40:96:96:37:3f:4a:f4:99:87:
e5:66:52:a9:48:fb:a6:f4:f3:96:1b:72:f5:2f:e4:c3:87:12:
f3:5d:91:6f:da:6f:a9:31:d3:5b:50:dd:98:b8:bb:3b:2b:2e:
56:1a:9f:9d:6f:0d:06:dc:ba:25:3d:81:1b:8c:7b:68:07:7f:
3d:ae:76:a2:45:9d:97:27:54:ff:65:b5:7c:cd:c2:80:04:3b:
bf:8e:db:d3:2a:c2:a8:6d:37:e4:dd:01:52:08:54:74:b8:a3:
07:9a:5b:ef:0e:0e:5d:20:db:d8:81:9b:40:db:63:66:21:e0:
b1:93:61:d9:f9:83:73:d7:49:4a:f8:28:79:1a:47:2f:1e:14:
40:67:73:09:83:91:70:8b:13:91:00:68:e1:1e:d9:ea:60:e4:
e3:58:b3:40:5c:ad:e0:9f:d1:71:2e:69:b6:c5:1e:4c:d6:77:
84:1a:c2:31:37:58:ff:b2:70:8b:cb:9f:fb:3c:4a:99:43:c3:
ad:d2:a4:cd:2c:da:3b:7b:b5:37:1a:5f:1f:e0:b9:33:0b:00:
34:ba:48:63:68:90:2c:dc:25:ed:29:63:b2:ed:ee:37:fd:5c:
67:92:bc:d4:ba:55:11:77:2c:62:b7:e2:ab:15:d3:5d:16:85:
d8:df:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:50 2025 by rpki-client