
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: hdtEJtLFNBR9Yh4vzk/4ixIiHfoWBrB4iTlOHIgYD+M=
Subject key identifier: D5:F5:C7:D7:C3:0F:0B:28:AB:0D:F3:79:70:D2:B5:64:07:BE:9C:FD
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 0197654D09A2D427FE788C348CC57BA96F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 017D
Signing time: Thu 12 Jun 2025 18:00:36 +0000
Manifest this update: Thu 12 Jun 2025 18:00:36 +0000
Manifest next update: Fri 13 Jun 2025 18:00:36 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: ARLx2DpiG0OTXYGet8a/4yjTmQ1Z4EV28ssy1l87cBo=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4d:09:a2:d4:27:fe:78:8c:34:8c:c5:7b:a9:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Jun 12 18:00:36 2025 GMT
Not After : Jun 13 18:00:36 2025 GMT
Subject: CN=d5f5c7d7c30f0b28ab0df37970d2b56407be9cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:f3:1e:7d:25:ef:e4:90:f9:88:5f:e2:3c:
30:37:e6:e2:62:32:f9:11:54:7e:cb:05:7f:e3:dc:
60:c5:ea:cd:7f:5f:e5:69:32:58:1c:ca:54:bc:8e:
9e:5f:59:18:a3:00:4c:e1:c7:f0:7a:4d:d2:2f:99:
2d:95:6f:d0:b0:2e:26:c0:3c:cc:98:bd:c9:4f:1f:
e2:23:1d:22:9f:b2:ce:c5:6e:41:da:3b:90:4f:d9:
76:50:5a:3d:d7:4e:f8:b6:17:47:65:21:26:b3:f0:
c1:99:28:9e:36:bd:f8:71:57:10:c3:b6:83:b4:50:
10:db:97:5b:60:db:63:ff:b7:c8:00:f6:fe:a6:c2:
df:cb:58:a0:bb:d8:bb:0c:2f:43:1b:04:f4:8a:22:
f4:ae:e5:1c:38:aa:09:57:87:2d:63:55:fb:26:21:
b2:72:08:c7:a6:52:07:c1:fd:dc:0c:a9:40:c4:d7:
d2:13:2c:5d:41:0e:63:9d:23:ac:58:e9:1d:d0:6e:
7d:cb:01:77:5c:85:c1:c9:fd:02:33:1e:b0:b0:70:
b9:71:4d:f9:4b:6c:66:7b:24:e6:40:20:20:41:7c:
3a:65:4d:2a:5d:47:a8:d3:a0:9b:c3:d6:94:f3:35:
b6:dc:8a:8c:ef:cf:28:c3:59:9e:52:71:ec:46:94:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:C7:D7:C3:0F:0B:28:AB:0D:F3:79:70:D2:B5:64:07:BE:9C:FD
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1d:c2:21:a7:6b:1c:a5:87:95:7f:16:af:ee:93:20:4a:59:
c7:54:75:95:64:d4:dc:57:61:04:bd:57:83:f6:a7:3e:9a:a9:
0d:29:a3:9b:8c:2e:e6:01:5e:d2:49:16:24:6a:ab:67:38:e0:
90:6a:39:4c:62:41:d8:8d:29:c5:c2:c4:bf:d5:33:57:86:fb:
e5:14:1b:53:65:70:21:01:be:fb:9d:cb:29:e0:22:13:a2:95:
2a:39:b7:67:bd:ef:06:17:e9:9f:35:2e:5d:ab:0e:54:be:dd:
b2:e2:e2:ca:9e:9b:68:40:9f:94:04:74:ed:63:00:70:60:cf:
cd:48:bb:b3:a3:30:c5:0d:d3:91:81:69:9f:99:f5:d8:ec:a6:
3c:d3:8a:dc:a9:82:dc:3a:59:ce:f7:06:7f:0f:79:13:cd:0d:
58:48:68:66:df:bb:5f:57:a5:aa:8a:0b:9b:d7:31:11:ce:aa:
80:a3:7c:78:28:ba:6c:30:f3:0f:89:4e:85:8d:90:ca:35:86:
01:74:9d:79:74:25:ed:a3:21:54:28:c7:45:0a:1d:94:63:e0:
ca:66:9c:37:c8:ed:84:76:5a:1e:51:b6:dd:4d:90:41:2c:47:
55:ee:fa:ae:dc:b2:4a:db:cb:51:2f:6b:8e:25:80:7f:56:18:
14:f0:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:45:01 2025 by rpki-client