Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: 0ysdTbRlVh9SV42UQ+nptVJTQbHzG10tebbGBMoeosQ=
Subject key identifier: 08:90:5B:BB:67:69:E6:D8:FF:00:0C:52:2A:6B:F6:92:33:D2:39:54
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019753EB8C650B889C9B37233F0F21C8C46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 0174
Signing time: Mon 09 Jun 2025 09:00:35 +0000
Manifest this update: Mon 09 Jun 2025 09:00:35 +0000
Manifest next update: Tue 10 Jun 2025 09:00:35 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: hRGGYG9Nj7Rz7qX5ZtQr+492gGzRjZ++VxtN87CpNX8=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:8c:65:0b:88:9c:9b:37:23:3f:0f:21:c8:c4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Jun 9 09:00:35 2025 GMT
Not After : Jun 10 09:00:35 2025 GMT
Subject: CN=08905bbb6769e6d8ff000c522a6bf69233d23954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:8c:4c:53:49:0b:47:18:d0:88:9a:68:df:
d9:af:c7:31:27:dd:de:85:4e:b5:4d:e7:59:bb:1a:
ed:47:a2:dc:58:02:bb:8e:55:cb:74:51:98:fe:2f:
09:c7:7d:92:b3:ae:6b:7c:73:2e:52:d1:54:49:c4:
ba:b8:62:9c:cb:58:15:76:d6:a2:2d:e4:35:df:3a:
c8:2c:d4:6a:92:6e:7f:bf:a6:2c:47:3c:4f:75:59:
0c:9f:c1:d5:f4:19:af:77:77:67:0e:94:92:60:f6:
55:02:53:3b:1c:3b:6d:56:c7:e2:ae:e1:c7:37:c5:
3a:30:b6:1f:1a:4d:d4:84:cc:a4:06:43:c7:04:3b:
f5:2f:47:3c:14:c2:e6:5a:e1:03:6e:14:c1:b7:39:
84:d9:79:f2:09:b1:92:1e:e3:d5:ae:0b:ff:74:06:
16:24:81:86:da:d2:d1:af:db:2e:22:ef:7e:e0:b7:
1d:3c:14:7c:d1:68:14:92:87:c8:a6:e2:c6:e6:cc:
db:bd:be:28:0b:24:47:a7:a0:a9:d9:7e:dc:e6:42:
ec:a0:2f:b7:63:74:04:be:44:e3:ed:0b:21:ec:a9:
f8:b9:12:bc:6b:6c:65:be:fa:5c:cf:0e:5b:1d:16:
97:8c:d5:44:05:07:5d:62:b9:ec:e7:42:d7:2d:45:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:5B:BB:67:69:E6:D8:FF:00:0C:52:2A:6B:F6:92:33:D2:39:54
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5e:ea:85:90:07:f3:ef:e5:97:de:bb:db:89:fb:cf:ac:13:
0e:6f:a4:61:2d:da:89:50:d1:89:72:ff:07:25:1a:37:cd:0a:
67:0d:19:94:bf:f3:7f:8e:9d:30:79:06:05:57:f5:1c:4a:ad:
28:9f:f8:61:37:96:52:a6:f4:39:bd:b6:a0:13:b9:16:85:88:
c1:70:53:2a:26:7c:a5:93:dc:2e:89:85:2f:10:4f:6a:b0:08:
98:de:c2:8d:29:f9:28:0c:92:f7:b3:3f:70:5a:13:e1:9d:74:
c6:2a:3e:ec:5f:66:bc:4e:d2:1c:13:69:99:91:84:ed:78:16:
d1:88:77:f6:7c:3f:ff:0c:29:42:7f:47:61:73:6d:de:67:a8:
d0:9e:be:b5:73:83:ab:58:77:ca:45:0b:c6:59:d1:75:46:ef:
9d:ce:2d:1e:ff:f6:ed:e6:c7:1c:6c:a9:9c:a6:9f:18:2f:8e:
2c:1e:f7:2b:e9:28:91:62:e7:ce:84:ae:ab:2e:e2:4c:5c:4b:
75:96:9e:7f:27:a1:ea:bb:4f:2f:62:72:8d:23:b3:c4:0e:3c:
2a:a1:00:92:3e:bb:1b:50:62:99:39:bc:0b:96:e0:ef:56:2b:
e8:d4:2a:7f:73:2e:fe:02:c0:63:a7:64:a5:93:00:53:c8:03:
85:f4:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:33 2025 by rpki-client