Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: 4Rokmzlxls3O7PH8lTYawMNpHw2Oh304aesAlX4FVH4=
Subject key identifier: 38:4A:46:1D:27:44:D0:F9:30:99:F5:4B:B7:A2:F4:82:57:FA:BB:23
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 019A72935998362E6BA93D3CF653DBF46FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: 0397
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: b1OCoHRP/waemawSnL9ADIOQqCQxwCQ3dGhX4qOewU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:59:98:36:2e:6b:a9:3d:3c:f6:53:db:f4:6f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=384a461d2744d0f93099f54bb7a2f48257fabb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:4a:c5:cb:6a:ae:ad:32:a6:c9:9e:96:bc:
64:55:df:27:d8:d7:99:92:7b:5b:03:30:57:67:19:
51:da:90:38:8c:1e:2b:2c:77:01:bf:4e:34:41:8c:
43:65:3a:6f:ba:17:8b:dc:42:60:0d:ce:99:b9:e4:
47:63:b3:b3:33:62:a4:d4:ab:18:61:d8:10:65:59:
83:7a:48:bd:ff:9a:a4:c9:eb:c1:14:16:77:04:2b:
e9:37:cd:88:95:77:a3:3e:22:f8:60:3c:88:92:5b:
78:11:32:e5:df:26:c8:29:6c:60:6d:c4:7d:e6:66:
b2:6b:42:e0:2b:5f:b0:a1:a4:aa:d2:9f:90:12:75:
f7:11:f1:f7:c3:2c:39:3a:91:24:50:64:7b:fb:77:
72:b9:16:7b:e1:a4:60:c9:70:34:f4:1a:f2:9e:af:
37:f5:1d:f6:5d:45:d3:f7:5d:37:88:95:15:81:a8:
2c:52:cc:8c:11:4f:21:78:7a:94:0e:bb:9a:18:09:
5f:33:85:4b:f8:9d:bc:e8:e7:e2:ca:d5:13:a8:13:
b0:a9:1b:4f:c9:71:82:40:6b:de:af:9e:e3:e7:be:
a9:52:fd:b2:b2:3c:11:59:cb:12:24:84:c0:52:2d:
87:7c:f4:df:9f:4c:a6:6d:50:ef:0a:5b:aa:91:a2:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:46:1D:27:44:D0:F9:30:99:F5:4B:B7:A2:F4:82:57:FA:BB:23
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:aa:36:4a:b7:64:82:90:4a:45:f5:1f:52:4d:e1:28:36:4c:
f4:1c:be:3f:7e:13:82:43:67:07:5d:c4:bc:93:d4:ed:15:97:
42:9a:52:ba:fd:3d:17:a1:48:3a:ba:d9:ea:a2:c2:3e:57:7e:
1f:e4:a6:c6:c5:c3:d7:75:3e:be:1a:a1:91:ee:c4:07:3c:d8:
c7:a4:10:a6:4b:d4:3f:6d:fc:bf:12:ad:a6:fa:48:29:c1:21:
7d:04:0e:30:69:3e:8b:28:1d:d0:d7:1d:b3:24:e5:c7:5b:9c:
65:d1:c5:4c:da:70:bb:dc:98:79:9e:32:6c:82:72:76:92:2a:
43:07:cb:18:e2:7a:60:7f:91:3a:b8:04:37:29:60:e2:36:d0:
64:ef:99:6d:e1:db:16:1a:4f:04:3c:28:ee:0c:d9:54:b5:ae:
94:c7:d7:3a:2b:b7:11:b8:25:f9:00:81:de:cd:e7:f4:70:77:
84:22:0d:02:57:5d:25:01:07:0a:8d:ed:52:e7:01:d5:16:6c:
b3:e3:60:8a:95:12:17:26:88:82:2f:dc:ba:67:da:9e:f5:f6:
b6:fd:76:f7:39:bf:42:78:6a:e3:0d:f6:75:a5:b6:cd:25:d7:
21:6e:93:66:5f:49:0e:50:1d:9a:91:30:db:0e:af:9e:8d:f7:
4e:27:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:18 2025 by rpki-client