Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: PTtOcc9mM2wvjlRbFi47+XAZwBJpIdwNT3YEvVT4ZVY=
Subject key identifier: D4:76:D9:12:E5:F1:A8:B8:05:29:8D:B0:B6:C3:72:CD:99:3F:CD:D1
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 0199FCC65417F90EF33A85CD171E3B1C38B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: 035A
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: NJnKLNfLY7V6+JwPxvuKfydp5NuIvPnHod8PQMSEqHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:54:17:f9:0e:f3:3a:85:cd:17:1e:3b:1c:38:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=d476d912e5f1a8b805298db0b6c372cd993fcdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:b6:e9:ac:25:31:57:38:9c:cc:0d:c5:f0:
7c:6b:24:27:3a:43:81:00:3b:10:2f:df:8c:91:b6:
9c:96:3a:0d:c7:c0:2c:3d:57:fc:3a:a6:f7:ac:d0:
15:79:12:ba:fa:69:4d:43:e3:5b:f6:b8:59:23:ad:
a2:f0:33:24:28:a8:aa:10:7e:01:56:d0:5a:86:af:
d6:95:af:21:ef:63:f5:a2:9f:d5:4d:92:2d:7a:27:
16:7c:d0:7c:8e:13:55:4d:12:01:d5:3f:62:23:d6:
07:6b:90:07:ac:f3:47:33:c9:88:1f:37:2d:2e:8a:
65:c2:87:31:e0:3e:32:a3:7a:c9:46:b2:70:55:8f:
33:ba:99:f7:59:a9:5a:e0:92:97:aa:49:f3:30:4d:
b2:45:b5:43:9d:02:98:49:02:41:e8:2f:b6:de:77:
3a:57:a2:97:9e:5a:7d:56:9d:d9:7e:b8:4c:11:05:
06:13:f2:8c:6a:1d:c3:ec:80:7e:4e:ea:9c:89:ed:
62:29:86:3f:d0:4a:0a:46:52:e9:e8:48:23:4b:f0:
d9:93:bf:b9:5e:4a:b9:63:ba:50:e9:1f:c1:22:7c:
b4:cf:ad:9c:b6:48:e6:36:59:eb:f9:93:9c:eb:6d:
67:b2:5d:da:2e:92:6a:a6:9a:3e:77:0d:5f:30:54:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:D9:12:E5:F1:A8:B8:05:29:8D:B0:B6:C3:72:CD:99:3F:CD:D1
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5b:be:c9:1b:6a:b3:44:e1:9a:3a:60:e9:5f:c9:ce:75:26:
a0:ae:ff:1d:87:97:e8:8d:05:02:94:50:9c:ae:59:3e:45:41:
49:e5:34:82:86:8b:35:4e:c7:86:a1:59:3f:44:c9:f4:d2:8c:
26:96:db:5f:e5:85:70:c4:57:d3:44:fa:bc:d8:b5:0f:f1:97:
09:86:c1:98:e2:a6:2f:73:fd:e7:4f:77:d6:18:6a:ec:a4:82:
a0:10:fe:61:4c:83:76:da:79:4f:7b:63:03:fd:42:25:d1:9d:
5c:67:ba:76:67:af:88:dc:c7:f6:49:4a:88:31:63:1d:6a:c3:
fe:16:7b:4e:ac:b6:93:b4:c6:31:ac:0d:cf:34:06:f1:cc:3b:
3d:63:fb:9d:f9:8a:fe:0b:2a:9c:59:2a:8a:78:38:53:fe:6e:
4f:89:79:75:0d:e9:dc:fc:8f:ba:a5:bd:59:0d:9e:35:c1:63:
ff:a9:d1:44:73:61:85:cb:61:46:e7:d0:c5:2e:1b:40:c2:4b:
4b:d2:1d:b5:b3:73:14:b5:3a:ac:56:30:73:bd:1c:5b:5c:c6:
42:95:a5:14:d6:26:03:4d:64:26:cb:ff:3d:e7:88:11:d9:a9:
17:75:9f:1d:c2:cd:59:52:12:83:58:22:9d:02:06:8c:72:c3:
19:d2:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:39 2025 by rpki-client