Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: lUwsbNpEFN3T+cT1qA+kneB14svHEhvAJp8tX7jJy+s=
Subject key identifier: 8E:4E:C2:1D:77:6C:4E:93:C9:F1:D1:F4:70:03:58:3F:9A:A3:8A:81
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 01988EEB39A4F5D0079E291E8E715AA16361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 0217
Signing time: Sat 09 Aug 2025 13:00:36 +0000
Manifest this update: Sat 09 Aug 2025 13:00:36 +0000
Manifest next update: Sun 10 Aug 2025 13:00:36 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: lpwldI0+vodtos8sZv8yu+5zCXaXLR3VeZuVu884ems=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:39:a4:f5:d0:07:9e:29:1e:8e:71:5a:a1:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Aug 9 13:00:36 2025 GMT
Not After : Aug 10 13:00:36 2025 GMT
Subject: CN=8e4ec21d776c4e93c9f1d1f47003583f9aa38a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:f0:6d:87:28:48:87:6e:eb:13:62:f2:67:
0b:6d:b3:79:ef:b4:ad:7e:fd:5c:00:4d:2f:3f:35:
3a:70:b5:46:6a:ad:06:2f:3f:81:c0:da:6e:c1:fc:
9a:1f:b5:2d:82:94:6e:4c:fd:ae:32:e5:5e:41:bd:
49:f5:9a:d0:c9:83:2a:a2:63:3d:3b:46:0b:e0:29:
fa:48:ac:3b:8e:67:9e:82:39:1c:77:b9:de:90:ba:
f5:2d:93:1c:1c:f7:a6:8c:ad:f7:34:df:63:38:ae:
72:e3:be:38:ca:f9:25:31:d0:8f:5f:23:d5:a4:63:
ff:6b:94:d8:48:18:4e:7f:24:ff:72:2c:2c:76:06:
1d:23:19:4c:f0:dc:66:43:6a:be:ca:f3:87:65:90:
a9:9f:7a:2c:5b:21:16:c7:2f:ad:bf:bc:52:73:96:
30:b3:6d:71:64:5e:2a:57:8b:56:35:fc:60:30:29:
82:03:94:ea:cb:54:07:ce:c4:2e:b1:69:c3:27:c7:
d7:9f:01:3b:3f:17:9c:6c:7d:8e:7c:b1:69:f6:8c:
5a:ea:27:96:bc:d3:a3:db:9b:b8:dd:07:da:b3:80:
09:88:20:4b:4f:de:47:9b:1b:76:da:9d:ab:66:7b:
de:a6:cc:0a:5f:ad:7e:ac:76:7d:77:60:02:2b:ed:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:C2:1D:77:6C:4E:93:C9:F1:D1:F4:70:03:58:3F:9A:A3:8A:81
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a9:c2:a5:47:56:6f:e2:1a:f3:cf:6a:c2:70:34:06:64:d2:
05:c9:04:e4:f8:3e:b5:01:33:a5:15:c3:ba:15:2a:b9:83:17:
cd:e7:8d:03:fc:ed:b1:a2:73:55:d9:e8:8a:50:8e:60:92:d5:
0e:61:c3:e9:53:68:d4:df:b1:45:b9:29:03:2b:df:7b:8c:d7:
f0:0b:59:f2:32:a2:79:c4:49:24:05:1c:8a:e4:36:e4:b8:c0:
9d:71:74:aa:81:c6:c7:bf:10:bc:da:93:d7:d6:8a:b8:bc:dc:
89:b5:54:6b:03:a0:09:55:d2:2f:b7:c1:44:7e:ca:8d:45:91:
a1:81:6e:76:33:08:9f:33:e9:0a:23:1b:6d:c4:e4:61:71:34:
0f:73:d7:1c:f1:e0:0c:99:9c:02:92:28:75:05:c2:86:e0:e5:
6a:20:f7:6f:36:44:e5:00:19:3b:0d:ee:ed:16:5b:74:a0:c8:
0b:32:ae:82:1d:71:94:f9:c0:6e:24:d9:dc:44:1a:b6:04:10:
30:27:e7:c4:bb:60:cf:f0:e9:10:03:5d:ef:68:83:03:e1:74:
62:d8:30:fe:04:4e:51:a5:b3:01:5f:25:59:7e:2b:86:88:97:
3b:14:ee:ce:f8:54:4f:68:32:86:35:c6:05:05:d5:79:d2:8a:
d2:38:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:09:04 2025 by rpki-client