Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: 6kVopCI4NOuZYmmZm6G5uviu9Ea8y+N22SQph92CJ3I=
Subject key identifier: 61:C4:3A:17:58:35:5E:3F:22:96:A1:B0:1F:F1:02:C1:8A:BE:22:55
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 01978846903B36F95B99820F0AC0E12B86E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 018F
Signing time: Thu 19 Jun 2025 13:00:15 +0000
Manifest this update: Thu 19 Jun 2025 13:00:15 +0000
Manifest next update: Fri 20 Jun 2025 13:00:15 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: 2Fo+mv7/MzQDZUbLHX2Zw3Fdp3Qqag3GX15MK3I3Bsg=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:46:90:3b:36:f9:5b:99:82:0f:0a:c0:e1:2b:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Jun 19 13:00:15 2025 GMT
Not After : Jun 20 13:00:15 2025 GMT
Subject: CN=61c43a1758355e3f2296a1b01ff102c18abe2255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:75:2c:2f:c3:6e:9c:c2:a5:20:d6:0a:8d:
7a:ee:8b:ac:a7:62:0b:c4:b0:07:46:73:f6:bc:32:
be:67:2e:76:20:42:07:9a:97:92:a0:36:76:00:33:
4d:52:1c:84:6c:fc:85:1b:b2:43:3c:56:77:05:71:
93:fa:e4:d3:63:8b:d3:8b:f4:d2:5a:b2:42:ed:47:
28:d0:9d:29:be:bf:b9:44:78:df:06:82:b1:89:ff:
82:14:29:db:3d:16:61:d3:a7:74:ea:18:73:69:98:
7d:ab:68:9d:a3:eb:62:7f:0a:9c:3a:44:3c:9c:d5:
a3:69:20:22:8b:6d:0e:b1:2b:46:fd:b8:d1:c3:f9:
d8:c4:0a:8f:78:c6:9e:1a:9c:49:02:e5:c7:28:b6:
9f:7a:01:f4:25:9a:60:ce:e6:99:c8:8a:00:1f:9b:
3c:0f:74:99:a7:13:44:19:34:f3:99:01:f2:55:7d:
af:75:b8:3e:b1:f8:5a:85:01:49:fc:2c:c1:cc:dc:
64:2e:6f:99:16:c8:0f:ad:6d:c5:2f:f9:f2:c6:92:
02:2a:a3:26:94:47:31:b0:73:23:c6:c0:a4:20:26:
b0:31:26:99:7f:fb:1a:8f:85:ba:5e:7c:0f:93:a0:
d0:88:e8:1f:01:55:3e:b4:59:6f:0a:d5:3f:03:e9:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C4:3A:17:58:35:5E:3F:22:96:A1:B0:1F:F1:02:C1:8A:BE:22:55
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:60:9e:74:a8:ba:01:2e:6a:75:1d:13:8b:38:17:d8:1e:55:
0a:b0:36:82:ad:a3:5f:c5:d7:14:1a:02:af:a9:d2:d2:f9:a6:
39:0d:b0:f6:b5:cb:b4:47:aa:f5:68:52:97:ba:01:24:60:b7:
93:ce:de:c3:b6:9a:05:98:fc:97:20:89:1c:43:66:8e:46:d5:
b2:0c:41:c6:f1:8b:df:27:af:e5:ad:da:bc:45:72:b7:08:93:
0d:27:86:97:1e:34:76:40:07:43:97:ea:c1:b0:9c:3d:47:77:
71:97:96:75:16:03:b5:68:34:f1:c9:34:ad:49:7d:db:8d:e0:
e8:02:19:c7:55:d1:63:de:ed:b5:a6:ac:b5:4d:7c:96:86:ff:
db:ae:b5:87:58:9e:ef:6a:da:ed:7b:c9:4c:48:c0:0e:07:b5:
41:24:ce:05:2d:41:a8:c6:fc:96:a3:ab:ac:90:f7:49:cd:14:
a4:81:3f:7a:61:0b:8f:e8:0f:cb:57:2b:8b:a3:3e:b4:99:52:
2f:e1:d0:42:1e:79:5b:0b:0d:06:db:27:d1:c4:7a:65:f2:a6:
c3:d6:ca:1a:79:0f:f7:01:ab:7f:a8:14:1a:e2:59:c2:3c:d3:
66:40:15:bf:0a:58:4d:7d:22:5f:77:1f:d6:06:5b:85:47:45:
7c:40:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:53:42 2025 by rpki-client