Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: EG7IAH4ZfrVGLFIlkKLkfTZzi6SbIciPSs7A0w8zKog=
Subject key identifier: 13:E6:6D:C5:CD:F8:CF:78:05:88:B1:4E:9E:C6:F9:FF:D2:90:2E:D4
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 01968924E934546812016CC4EF9D556DC8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 010B
Signing time: Thu 01 May 2025 00:00:19 +0000
Manifest this update: Thu 01 May 2025 00:00:19 +0000
Manifest next update: Fri 02 May 2025 00:00:19 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: PFVqBkDb7wvJjLRBfKt6BoGbwOtjshQ0v+y15Z8xDk0=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:24:e9:34:54:68:12:01:6c:c4:ef:9d:55:6d:c8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: May 1 00:00:19 2025 GMT
Not After : May 2 00:00:19 2025 GMT
Subject: CN=13e66dc5cdf8cf780588b14e9ec6f9ffd2902ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:33:23:ee:a6:af:c6:8c:aa:10:01:47:8d:
b8:76:61:23:97:d6:eb:c5:81:48:dd:66:4c:cb:ae:
30:06:53:09:8a:51:54:0f:08:cd:d3:77:a0:a4:fe:
ab:29:3d:a7:55:6a:20:eb:fc:4c:d2:a1:a8:24:e8:
4e:fc:5c:6e:bf:df:b6:d1:3a:13:47:3a:2f:d5:fc:
f5:5d:2f:7d:8f:a1:e1:1a:f8:dc:b4:83:13:ca:82:
ba:e9:4e:8d:cb:f7:84:88:e7:e2:66:0b:c6:c7:4e:
88:0d:a2:60:0a:ec:d0:d3:e0:58:80:69:13:8b:19:
48:7c:60:c2:d5:9c:fa:22:49:0f:36:f3:5d:12:1f:
5d:38:c2:98:45:5b:8c:e0:3f:99:d4:cf:8f:e1:81:
c5:7d:3c:00:41:ee:4d:a6:a8:97:22:4f:0a:36:f5:
22:00:f7:1a:d8:0e:28:9f:8c:f5:8d:28:1b:a0:24:
26:8c:92:eb:2b:3d:ba:7a:ea:c3:00:22:5a:5e:35:
27:a3:ee:e3:f2:e1:a7:e6:b7:b3:1e:23:11:ef:9b:
1c:1e:e0:56:ed:14:55:07:d6:c0:86:ea:94:3b:d8:
25:d6:ef:06:e8:a4:32:c0:ea:60:55:32:08:b3:b7:
8c:a1:92:6a:fb:84:00:70:66:c0:70:a7:bb:08:68:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E6:6D:C5:CD:F8:CF:78:05:88:B1:4E:9E:C6:F9:FF:D2:90:2E:D4
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:91:8a:c0:bc:6e:02:56:b2:36:8b:ab:d3:01:cf:0b:75:6f:
51:5f:73:14:05:9a:fd:9e:56:b1:c9:92:03:f9:68:e5:00:3e:
c9:5c:25:52:b3:c5:34:65:2c:f6:c0:f1:50:eb:c4:cd:70:d7:
20:8a:61:24:6f:57:24:e4:7b:e3:95:f1:ec:08:81:2f:3d:4e:
7d:e2:ea:df:01:2c:c5:9f:57:e8:af:a5:64:66:fc:a8:b0:9a:
bc:e9:98:db:d9:dd:56:9d:d8:61:e3:76:d5:dc:12:f3:ab:cf:
79:a6:33:e5:c7:a0:d2:5b:db:26:f1:09:08:c8:7a:3f:48:fb:
b9:6d:10:fb:6d:77:85:d3:d7:0c:df:fb:48:dd:f8:93:b3:73:
67:33:89:70:e4:30:d8:69:cf:a0:32:b3:ad:a4:5e:be:eb:68:
59:e2:ca:c5:04:41:75:c5:fe:2a:5b:20:52:74:72:93:fc:2f:
95:80:50:38:2f:60:78:96:c5:17:cd:b1:01:5b:39:80:a1:b2:
f1:73:e0:23:df:2c:0f:57:50:64:2c:19:fc:de:6d:30:94:59:
f9:04:5a:5e:00:18:8d:ab:88:00:d1:1e:36:1f:62:d0:e3:c7:
94:62:5d:e6:fa:06:9e:a9:da:42:6f:53:ce:36:b7:00:93:91:
8b:3c:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:55:04 2025 by rpki-client