Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: hf9XS7kffyQRdcdz+D5JelCxa8szlfMcbMl80YuDl7A=
Subject key identifier: 1E:BE:00:3C:B7:3E:61:01:EA:43:DF:0F:84:F4:63:74:96:86:15:44
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019921B0D0231C79D3E5F37C032DC6B574C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 0263
Signing time: Sun 07 Sep 2025 01:00:59 +0000
Manifest this update: Sun 07 Sep 2025 01:00:59 +0000
Manifest next update: Mon 08 Sep 2025 01:00:59 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: vQshnpJElo7KKYtx5XDfcpCr2f/VKq6TqOazVcRKQ/0=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:d0:23:1c:79:d3:e5:f3:7c:03:2d:c6:b5:74:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Sep 7 01:00:59 2025 GMT
Not After : Sep 8 01:00:59 2025 GMT
Subject: CN=1ebe003cb73e6101ea43df0f84f4637496861544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:1e:17:8a:9d:3c:6b:bf:8b:33:30:da:e8:
22:da:2f:71:5c:d5:9e:c2:89:4a:84:80:76:c8:d0:
2a:0d:ef:b5:13:eb:b0:8c:70:f8:86:32:88:61:39:
16:a1:59:1e:59:74:83:74:86:26:72:28:15:c4:53:
76:a6:ab:ab:43:e6:b2:da:fe:68:66:8e:8d:00:dd:
eb:02:66:27:96:02:3e:6c:a2:e1:ee:a7:a3:dd:39:
d5:cc:87:38:3e:50:83:a2:01:ad:ea:b4:77:70:55:
c1:cc:2e:15:a7:5f:ab:34:2d:b6:5a:10:b8:d3:f1:
42:38:a5:71:fb:e4:fd:71:bc:6d:a9:3b:89:7a:f9:
bd:a5:6b:9d:3b:8c:5f:4b:4f:34:2c:e4:ec:4a:14:
db:81:7f:0a:4f:bf:c1:38:dc:64:ed:46:59:e8:a5:
9e:63:fa:ef:cf:f8:2a:9b:91:9f:67:b0:b2:dc:8b:
da:9a:c5:16:61:dc:ce:00:5e:c0:5d:8c:0e:27:d5:
a7:48:d4:4a:37:c4:1f:3e:6c:2f:7f:3d:6a:d1:da:
c2:d9:2e:05:db:6a:27:e6:5c:a1:59:ef:4a:8d:02:
0c:51:9a:1d:45:41:d5:e9:98:89:0e:e0:76:f5:e6:
e0:54:7a:4a:92:28:dd:7e:cb:82:b5:e8:60:d4:5c:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BE:00:3C:B7:3E:61:01:EA:43:DF:0F:84:F4:63:74:96:86:15:44
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:49:ce:21:88:e1:c3:f1:94:b6:33:84:32:99:85:3e:69:e3:
f5:ec:9b:9f:ba:76:f0:6d:5e:0d:47:b3:14:45:08:d2:8e:7e:
a7:ca:e8:9c:d7:45:7f:e6:07:8e:a3:0c:fd:5a:2d:fa:b3:2c:
d6:15:42:e9:d5:66:be:e5:ac:e1:cb:2b:32:97:51:56:ec:13:
b6:72:ef:db:f0:9c:d3:bc:7c:73:9f:fa:bf:52:0b:a3:f9:e6:
43:22:9b:9e:18:9d:65:4f:4a:d7:b4:40:f5:f5:e8:93:55:e0:
46:1d:ee:ed:1e:d2:da:a5:aa:3e:33:dc:5b:e6:9a:09:4a:df:
64:6a:df:c6:f5:96:ba:02:99:67:20:75:b8:38:4f:28:11:2f:
74:a4:25:f3:51:40:d8:b9:5c:1b:4d:8f:c8:f9:f5:ab:88:47:
cd:36:8d:2f:26:bb:52:0a:4b:d6:1c:4e:4e:9d:d3:21:3a:c4:
65:0d:8b:2c:5e:cc:8d:85:61:71:4b:bb:df:50:b8:26:1c:e8:
e6:80:e9:bb:c6:18:02:89:ef:0d:87:ff:ca:67:cf:23:f8:be:
cf:34:2b:e7:66:b0:85:81:9f:9c:c1:82:f6:d1:09:69:2e:a1:
c4:d2:b1:bd:79:49:40:16:74:3f:8b:93:59:2e:a7:59:f7:77:
3d:76:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:52 2025 by rpki-client