Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: hXehQyp+gaQ/dXLTrO07HHDYVcDMupw03b4n3ZhLuPo=
Subject key identifier: B1:C5:63:16:B4:21:6B:1B:F7:8B:05:0D:07:DB:FF:89:62:5F:DE:F7
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019A209B68656F750590171FC01BB5DAE704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 02E7
Signing time: Sun 26 Oct 2025 13:00:46 +0000
Manifest this update: Sun 26 Oct 2025 13:00:46 +0000
Manifest next update: Mon 27 Oct 2025 13:00:46 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: gukYLKUkYxME6uB6NlCMGHlwmktj5RUm4pUuTRFouFc=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:68:65:6f:75:05:90:17:1f:c0:1b:b5:da:e7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Oct 26 13:00:46 2025 GMT
Not After : Oct 27 13:00:46 2025 GMT
Subject: CN=b1c56316b4216b1bf78b050d07dbff89625fdef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:c2:e7:17:88:18:3f:f9:73:43:95:d4:83:
af:14:88:75:94:6c:e1:bf:c3:ca:02:d5:19:99:56:
4d:f7:43:34:6f:98:f7:2d:d7:d1:3f:f3:74:19:19:
77:47:a4:82:8b:0f:c5:a6:43:f8:3b:cb:6c:0e:29:
18:78:dd:e6:49:6f:92:2f:3a:fe:e2:17:bd:b5:6f:
1f:8f:f4:3a:29:3a:5c:91:c1:91:8e:40:e7:5e:e5:
8b:a8:42:b3:a4:61:61:0d:22:c4:c9:d5:3a:5d:9c:
70:2c:1e:db:2c:fa:43:87:13:51:0f:2c:58:94:c7:
b6:86:07:3c:2a:b6:8a:15:9f:27:6b:35:58:4c:99:
e0:3d:87:1b:24:de:bb:25:e3:e5:94:17:04:b1:3d:
d5:05:2c:fb:22:c8:ab:ec:c5:f9:45:d5:50:f3:15:
93:7e:3c:7b:96:50:bd:b6:57:18:c6:72:98:f9:ad:
a6:0a:85:6b:a5:b3:0e:13:31:c7:14:bc:2e:fc:d6:
34:cf:56:06:d3:ea:b6:bd:e4:58:b0:5c:de:08:9f:
c6:c6:8b:e1:d1:d1:1a:5d:5a:66:2e:93:12:fc:0b:
30:04:f3:57:a1:3a:aa:01:d1:c4:ea:5e:bb:c4:dc:
bb:3d:29:c1:22:09:94:8f:90:06:5d:a0:07:3d:0d:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:63:16:B4:21:6B:1B:F7:8B:05:0D:07:DB:FF:89:62:5F:DE:F7
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c3:62:ab:15:72:60:18:74:26:9d:8f:b5:41:8f:f1:c2:c8:
38:3f:ef:53:b8:af:c4:b3:48:90:23:1c:39:f8:3c:ca:88:ba:
33:52:e1:bd:87:b9:b3:37:c5:d8:f7:c6:f2:6f:aa:33:b1:62:
01:23:52:e7:e4:d0:f2:e4:0e:c5:e2:8b:3f:4f:15:78:d5:c4:
57:ee:7d:22:1c:dd:fa:94:82:86:35:46:81:dc:70:6b:4b:cb:
46:9a:7a:c8:a6:58:c8:8f:48:42:3d:2a:23:66:01:47:18:54:
db:26:e4:0b:18:a9:a3:c0:d8:e4:fe:7d:c3:48:4f:3d:30:fb:
17:3b:52:f1:bf:31:62:ae:08:9d:76:21:6d:89:69:58:07:06:
85:3b:04:2c:0e:2f:4c:57:79:a5:96:78:19:9e:cd:a6:5c:8a:
46:97:c1:2c:29:9b:e7:d8:86:ef:56:ef:14:fc:e4:af:b0:30:
5b:a6:b6:c0:9f:90:05:8f:43:19:b9:37:06:b7:ea:e3:88:42:
a2:6f:cb:5f:04:a3:cf:92:2b:ed:f1:60:f5:aa:68:d1:eb:99:
3f:3e:ba:5a:6b:60:7b:33:73:16:a8:a4:5b:99:0a:33:43:c1:
3f:96:a4:d9:d1:43:42:29:0d:04:02:76:04:fd:c3:4b:ad:55:
8a:85:c8:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogm2hlb3UFkBcfwBu12ucEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MjgwYmU5YjM0ZDljNjY5YjgwMjBlNTRkZDZhNDg1ZTMx
N2Q3MmYwHhcNMjUxMDI2MTMwMDQ2WhcNMjUxMDI3MTMwMDQ2WjAzMTEwLwYDVQQD
EyhiMWM1NjMxNmI0MjE2YjFiZjc4YjA1MGQwN2RiZmY4OTYyNWZkZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtHC5xeIGD/5c0OV1IOvFIh1lGzh
v8PKAtUZmVZN90M0b5j3LdfRP/N0GRl3R6SCiw/FpkP4O8tsDikYeN3mSW+SLzr+
4he9tW8fj/Q6KTpckcGRjkDnXuWLqEKzpGFhDSLEydU6XZxwLB7bLPpDhxNRDyxY
lMe2hgc8KraKFZ8nazVYTJngPYcbJN67JePllBcEsT3VBSz7Isir7MX5RdVQ8xWT
fjx7llC9tlcYxnKY+a2mCoVrpbMOEzHHFLwu/NY0z1YG0+q2veRYsFzeCJ/Gxovh
0dEaXVpmLpMS/AswBPNXoTqqAdHE6l67xNy7PSnBIgmUj5AGXaAHPQ195QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHFYxa0IWsb94sFDQfb/4liX973MB8GA1UdIwQY
MBaAFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAt
ZTBhMDQ1MDc1OTg0LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAtZTBhMDQ1MDc1OTg0
LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcNiqxVy
YBh0Jp2PtUGP8cLIOD/vU7ivxLNIkCMcOfg8yoi6M1LhvYe5szfF2PfG8m+qM7Fi
ASNS5+TQ8uQOxeKLP08VeNXEV+59Ihzd+pSChjVGgdxwa0vLRpp6yKZYyI9IQj0q
I2YBRxhU2ybkCxipo8DY5P59w0hPPTD7FztS8b8xYq4InXYhbYlpWAcGhTsELA4v
TFd5pZZ4GZ7NplyKRpfBLCmb59iG71bvFPzkr7AwW6a2wJ+QBY9DGbk3Brfq44hC
om/LXwSjz5Ir7fFg9apo0euZPz66WmtgezNzFqikW5kKM0PBP5ak2dFDQikNBAJ2
BP3DS61VioXI7g==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:11:46 2025 by rpki-client