
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: /bnL1exd3fIFMpd2Ok95fMhKZBCdMF7PWljoqZydUhA=
Subject key identifier: D9:84:4B:55:09:9A:1C:99:7C:B7:46:1B:24:FB:1B:C7:A1:3C:F9:FF
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 0198D54DCCCF0B43B166EAFA4E0095A9ED33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: 02C1
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: 5bdgBCvZ9SR701EAz8PUAwi10MFf9xbnwzubXQqV2FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cc:cf:0b:43:b1:66:ea:fa:4e:00:95:a9:ed:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=d9844b55099a1c997cb7461b24fb1bc7a13cf9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:0a:8e:43:1f:55:71:22:0e:7b:14:f4:58:
84:32:e0:6c:29:87:bf:85:4f:2b:6c:dc:c8:4e:5d:
04:09:6c:2e:67:a8:fc:a0:cc:15:04:f4:4a:a9:83:
df:db:61:b9:d9:a9:27:dc:f1:3c:c6:d3:d8:05:81:
2a:20:53:05:3c:3f:f5:9e:22:2a:76:11:90:20:35:
f3:6a:23:23:16:92:be:7e:46:89:33:78:56:34:fe:
31:45:0b:ae:c0:81:e9:4d:18:81:66:8a:fe:c8:67:
5a:73:12:b3:18:c5:38:1a:f0:17:ae:c0:ea:85:3a:
e2:b4:fc:3f:41:65:f1:5c:1a:27:f5:a6:38:50:4d:
96:f6:ab:be:ca:8f:a0:c4:58:f9:0b:39:ea:77:ee:
19:b5:f9:8e:74:87:d9:92:62:aa:e2:cd:f3:41:e9:
42:89:a4:e2:fd:6a:10:d6:8e:1e:dc:95:b6:a4:54:
6d:27:2e:d9:b2:d7:37:bc:2e:b2:d0:f5:53:b2:94:
ba:32:1a:b9:16:4b:4c:00:21:f8:c5:42:32:37:30:
69:10:12:07:85:42:07:a6:81:b7:7b:75:37:fd:d7:
0a:fd:42:07:c4:f7:27:14:0b:7c:2e:ca:3a:a3:14:
08:e5:c4:6b:ad:eb:22:33:0f:04:a3:1c:be:bd:34:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:4B:55:09:9A:1C:99:7C:B7:46:1B:24:FB:1B:C7:A1:3C:F9:FF
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:77:d9:a0:24:7b:10:9a:4e:d3:8e:5e:99:0b:fa:ee:4c:1c:
da:c0:0a:99:cb:2c:b3:4f:a9:fc:7f:02:ae:08:b4:6f:03:ad:
89:5a:1f:65:24:cb:ba:e5:a0:7a:29:68:dc:65:b4:59:27:87:
8b:b3:8f:51:75:ba:e2:bc:7e:c3:67:28:bc:d7:5f:50:76:5f:
a5:4a:f7:c5:b1:a7:49:59:84:2c:44:e7:43:9b:36:72:bf:3f:
c4:fa:c7:4c:a0:91:fa:9e:05:0c:61:b6:ac:e0:bb:e2:ec:b6:
aa:f9:6b:40:07:d5:ee:8d:c3:5b:24:c0:71:74:31:00:a8:2e:
c5:a7:65:d4:d8:20:3d:cd:aa:9e:56:72:80:79:68:03:ca:aa:
99:7d:e8:b5:29:d9:fb:fa:39:3b:58:ac:0d:29:b5:67:86:32:
13:2a:58:23:41:0b:e2:14:e8:67:41:95:5d:23:9f:c0:22:9b:
c7:d6:e8:03:7f:dd:dd:27:84:9d:f8:f3:f6:1d:02:b8:4e:fa:
48:c4:20:e1:ad:3d:bd:26:01:35:b4:29:90:c4:d4:7a:c2:ea:
0d:b4:87:dc:0a:2d:bb:50:37:50:9f:16:de:19:35:09:66:a7:
10:6e:dd:da:fa:cd:d4:9e:9e:7a:c5:c5:74:d8:24:d9:90:44:
f4:ca:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:19 2025 by rpki-client