
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: gaAAdOfQp32j/CsN2yws9YhIy+rjHVKb06Xnt+GFJGw=
Subject key identifier: 27:D3:FD:05:A1:E5:21:B1:6A:E8:86:F6:80:ED:C3:73:44:F7:8B:FC
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 019A4FD009D16294F7DA66883B3A9B3096A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: 0385
Signing time: Tue 04 Nov 2025 17:00:25 +0000
Manifest this update: Tue 04 Nov 2025 17:00:25 +0000
Manifest next update: Wed 05 Nov 2025 17:00:25 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: sxRE24JH93RkXHEsVglSPNFIC0Ldv81Yhx/tJZSp9lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:09:d1:62:94:f7:da:66:88:3b:3a:9b:30:96:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Nov 4 17:00:25 2025 GMT
Not After : Nov 5 17:00:25 2025 GMT
Subject: CN=27d3fd05a1e521b16ae886f680edc37344f78bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:cf:38:74:0a:ea:7c:25:0b:5d:da:e0:fa:
47:a4:92:e9:85:df:b8:af:7c:96:f7:f0:71:9f:67:
42:77:a7:7a:c8:90:e0:87:e2:bd:c2:5b:d5:80:17:
16:ce:d8:a2:36:15:3e:00:cd:c9:80:58:ec:22:e6:
9c:fe:94:d4:cc:8a:34:07:a8:e2:af:8b:91:a5:8d:
7d:59:40:bf:98:c2:7e:27:7d:ba:45:ba:f1:c4:e7:
80:17:97:a2:36:8f:f8:31:a2:78:81:f6:d1:26:a9:
bf:05:82:ba:72:28:ea:d9:2d:d6:49:48:b0:64:79:
0a:63:ae:c4:9b:a9:ec:0c:fe:6c:29:e9:52:6b:a4:
77:57:d4:12:86:87:83:d0:db:6d:f8:61:28:2e:e7:
8b:35:62:24:14:c0:16:bb:7f:35:fd:c9:0f:6d:26:
13:df:f6:e3:78:aa:49:34:39:66:b9:d6:c8:a5:2c:
10:b3:35:52:ce:21:1a:18:b1:2b:ac:b7:e1:09:dd:
a6:67:19:cf:1e:77:f0:ab:f2:19:97:33:8b:4a:7b:
94:19:17:97:7f:d4:fa:fa:78:fc:c5:a3:ce:cb:93:
7b:6d:eb:26:7d:d2:8b:d2:3c:38:3b:61:4b:68:49:
11:89:80:19:78:88:0b:29:d4:08:d9:a4:00:e4:c0:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D3:FD:05:A1:E5:21:B1:6A:E8:86:F6:80:ED:C3:73:44:F7:8B:FC
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b6:55:72:bf:7a:e1:ea:77:ea:f2:1d:d4:9a:a2:96:25:27:
36:b6:59:72:df:b2:74:bd:a4:d0:82:76:1d:a8:1f:0e:0e:27:
e6:fc:fd:95:99:03:55:9f:bf:4d:bb:81:bc:86:d4:9f:95:02:
8f:f1:df:b8:b3:6c:51:a7:d3:f9:d8:a4:a5:9d:27:23:53:2d:
a7:84:12:b9:06:91:43:cb:a5:90:e3:f5:bc:f8:b8:5f:3a:e2:
cd:b0:cd:74:6c:99:a0:df:f8:f8:ed:ea:28:90:28:3e:20:0a:
75:f8:98:d6:4c:45:0d:e5:ba:1b:ea:25:30:b8:bc:18:2e:c2:
ae:6c:cf:e3:23:cc:b1:84:72:e6:b4:70:7c:4c:da:94:cf:e0:
68:43:a3:5a:f1:b3:fc:b8:4d:b6:94:65:ce:ae:00:f3:33:d8:
0a:3e:69:67:92:e9:25:0e:4c:a1:6a:b0:72:ff:88:f2:a3:55:
d2:61:47:0c:52:d4:dc:c9:5f:78:ed:bd:cf:23:9a:b9:a1:0b:
94:54:5e:87:82:de:2c:bc:fb:e9:e7:db:0f:d8:69:f5:0b:a6:
40:35:3b:e3:bb:1f:3e:71:30:52:be:ed:7a:c9:f8:cb:a8:20:
67:11:df:69:5e:13:31:a2:2b:d9:7a:32:8e:94:27:f3:57:e7:
77:2e:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:55:38 2025 by rpki-client