Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: eyMenj8SotqA6FGm27ZE3zOl3YE2cmZyJdR4pSsde6g=
Subject key identifier: 2D:DB:42:B8:9C:D2:A3:34:B3:A3:FF:15:6E:6B:A3:E5:41:10:46:FE
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 0199FBEB40798940F29E97F6F491FB71C0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 02D4
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: ++HW1cavxMKBqPeR7bK2K2cuBLwn4Aj+1WrFWwhmjCc=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:40:79:89:40:f2:9e:97:f6:f4:91:fb:71:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=2ddb42b89cd2a334b3a3ff156e6ba3e5411046fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:82:01:0f:54:52:44:7a:de:51:9e:20:c7:
93:58:80:40:0e:ad:d9:e5:49:a5:a9:ad:da:23:d3:
8f:1f:8a:40:69:1b:76:a0:c8:60:a7:55:a6:01:b4:
7c:58:59:8f:2e:2c:79:62:65:c5:64:5a:4a:b1:86:
26:14:e9:1b:fe:e5:9b:db:9c:fa:b5:b2:6a:cb:97:
60:48:8d:85:42:56:f0:f0:66:5a:4a:10:52:09:0e:
89:7a:99:b9:ff:44:e1:ac:71:7b:5c:30:2c:1a:c7:
c5:f2:12:73:17:79:2c:f6:70:ae:9b:c7:a1:94:62:
61:53:53:61:4f:79:98:26:cb:65:0b:ba:5a:e8:03:
5b:54:48:7e:ae:46:ec:54:ea:38:f7:74:c3:e2:b7:
59:e5:9d:a9:c5:6c:d9:4b:21:26:f8:a4:7b:96:a9:
76:24:37:02:e9:e5:3e:16:27:28:00:5c:8c:fe:7e:
11:b8:ae:8b:f2:28:2d:0b:3c:ea:9a:a6:d1:c7:38:
7e:10:30:d2:88:88:ca:21:e1:f7:cf:63:3d:06:1c:
e7:da:e7:3a:c6:17:7b:0a:9e:e4:5f:59:1a:c4:40:
d1:d6:4b:85:c2:24:4d:1e:ba:ec:fc:9f:af:98:3a:
db:ef:70:ac:88:2d:7c:28:b4:6d:e9:9e:bd:59:b4:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:42:B8:9C:D2:A3:34:B3:A3:FF:15:6E:6B:A3:E5:41:10:46:FE
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e0:ab:c4:9f:05:5b:f8:c1:40:3e:8e:b1:6a:09:c4:a5:cf:
b0:0e:e2:91:57:f5:15:8c:a2:72:6c:2d:c2:e5:78:1c:24:75:
2b:9e:e4:ec:a7:ec:ea:85:0c:a4:d9:65:47:16:de:4e:35:89:
db:1f:8a:93:e0:87:d5:ad:10:2b:c4:7a:38:2b:41:ad:a1:a2:
6a:72:7d:84:6e:2a:0e:b8:2f:34:51:b3:9b:c1:9e:b8:a8:e1:
b8:b7:f3:b8:41:da:ad:fd:49:c0:23:0d:11:59:e1:f8:e6:be:
5f:cc:14:66:e6:cb:dc:84:22:54:39:65:42:48:53:6b:f2:3b:
f6:65:a4:6f:cb:96:6d:e4:78:17:9e:41:7c:cb:0b:d2:d8:6c:
94:2b:9b:08:54:83:18:cf:2a:6b:b0:3e:66:5a:d2:1e:ae:85:
e5:6e:a3:61:e8:bb:bc:47:6d:66:fa:a0:71:05:37:b5:05:58:
7d:1f:88:58:ae:87:8e:32:23:17:10:6b:a9:ab:08:65:59:22:
4d:bf:d0:b1:ec:2a:86:17:c2:c9:8a:c2:2e:84:2e:ca:8b:bf:
a4:58:cf:4a:b2:d5:55:c1:69:7b:23:37:06:5a:b7:06:3a:5b:
36:db:cc:bd:f8:54:9d:20:8b:10:db:5d:60:8f:5d:e3:3a:55:
39:9b:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:32 2025 by rpki-client