Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: LIAnO+2n27ahE6QZkZPG68QbAyJ540fYnvuRrwkAS4E=
Subject key identifier: 53:27:5E:B7:53:99:EC:19:A8:A1:0E:E2:B0:44:E8:39:87:4B:2D:9C
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 0197BB5935426F8E13866FC7653852E682DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: 022F
Signing time: Sun 29 Jun 2025 11:01:15 +0000
Manifest this update: Sun 29 Jun 2025 11:01:15 +0000
Manifest next update: Mon 30 Jun 2025 11:01:15 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: K4iZMaBVug0uwSrbVyl649251D2GZlsXpsN4Fytw3hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:35:42:6f:8e:13:86:6f:c7:65:38:52:e6:82:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Jun 29 11:01:15 2025 GMT
Not After : Jun 30 11:01:15 2025 GMT
Subject: CN=53275eb75399ec19a8a10ee2b044e839874b2d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:17:d2:c3:92:42:11:c4:d4:c7:48:32:71:
06:c1:10:e3:e4:a4:b0:9a:3e:72:00:a0:97:05:0e:
ba:62:71:da:ca:75:34:1e:86:5e:e3:66:97:a8:6a:
43:aa:7d:fc:2c:e8:ac:ac:87:be:7a:90:a6:26:87:
0b:38:23:55:55:42:e0:0a:e3:64:ba:04:69:54:3b:
17:3f:db:e0:d8:1a:a9:6e:a8:81:d9:ee:52:c8:14:
6c:ba:d0:72:84:29:ea:fc:d1:e6:f2:89:00:d3:6e:
3a:b5:5d:6c:71:f7:8e:3f:46:e1:f2:e5:4a:7f:9f:
17:b4:e3:c7:06:50:9a:4c:f8:3e:7f:96:81:34:46:
f4:e4:fc:0e:ac:6d:f6:e7:1e:73:3a:a9:95:45:eb:
12:85:f7:df:9a:c9:6f:f9:c8:b5:05:88:9d:7a:aa:
3e:91:ba:4f:63:6a:93:c7:79:34:3d:a1:30:d8:09:
55:e1:d6:28:66:9d:44:e7:3b:74:c1:6f:56:b2:20:
50:8f:9b:88:6e:81:96:1e:d4:e7:29:26:11:ec:8e:
de:88:61:23:bd:a1:23:0b:e7:b5:23:e5:d0:bb:2c:
1a:b4:96:ad:b1:8e:3f:da:c7:06:f5:e1:e4:97:0e:
2f:66:94:1d:5d:0d:c6:e0:f7:9a:da:ae:3c:36:fb:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:5E:B7:53:99:EC:19:A8:A1:0E:E2:B0:44:E8:39:87:4B:2D:9C
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a2:d8:64:7b:ba:2f:22:a8:e7:aa:ff:e6:d6:be:7b:50:cd:
ce:a3:0d:4a:80:f9:da:0e:97:06:91:f6:93:91:40:9d:48:af:
b5:61:ad:4f:62:b2:0b:59:eb:be:21:52:1a:0a:32:bd:44:55:
81:04:fe:02:56:35:6a:94:b1:8e:95:ca:f2:3b:f3:dc:0a:43:
ad:cc:24:63:6d:80:27:e2:79:28:b9:0e:77:c6:93:8b:00:84:
5a:d8:de:ad:73:ab:7d:d9:d5:9c:29:b9:14:87:8f:0d:2a:6d:
b9:cd:42:0d:7e:b6:af:f6:42:6d:9d:6a:c4:09:b4:47:d3:43:
64:8c:b9:0a:5b:a0:39:77:4e:b7:5b:0b:fb:04:d1:c8:22:12:
77:78:e2:97:68:04:69:39:ec:e5:64:a2:5b:78:4e:e6:58:14:
4f:49:50:06:da:be:ea:e0:67:34:b7:59:80:e5:ef:e0:f4:e9:
d3:be:ba:6d:83:e2:ed:49:b5:87:2d:0e:ae:15:46:db:c2:ce:
07:a9:52:f2:c5:39:69:8b:88:c8:be:8b:7b:43:a7:e4:4a:7a:
e7:07:db:29:e6:91:3f:71:37:6e:be:e1:ba:9c:a5:cf:ef:80:
46:ef:24:09:a5:23:da:c4:a6:3c:93:b7:35:68:0d:0a:ab:01:
35:3b:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:26 2025 by rpki-client