Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: zKu7rYjDkXT33O71zKknOmJ1UWHyg9IKLqVCt/H7ZFA=
Subject key identifier: 6C:53:0C:E3:BE:9B:97:CD:F1:CA:A4:56:B9:98:B2:10:A7:5C:39:A8
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 0197B6A041DF8867FCC381CEBA348F51EB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 01A7
Signing time: Sat 28 Jun 2025 13:00:45 +0000
Manifest this update: Sat 28 Jun 2025 13:00:45 +0000
Manifest next update: Sun 29 Jun 2025 13:00:45 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: 9a0HIWTz9IiCnZSj2wAmYaei5wTwwLlNNoIQ+MPN/i0=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:41:df:88:67:fc:c3:81:ce:ba:34:8f:51:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Jun 28 13:00:45 2025 GMT
Not After : Jun 29 13:00:45 2025 GMT
Subject: CN=6c530ce3be9b97cdf1caa456b998b210a75c39a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:62:a2:d4:63:ba:03:33:89:53:be:ba:ec:
c2:3b:f5:80:f9:29:38:ab:dc:44:f2:c5:1f:92:7a:
2a:33:30:c2:94:2b:63:fe:50:0e:96:45:8c:06:f0:
a8:6a:16:86:f1:65:77:24:8b:e4:d4:dc:55:33:90:
e9:d3:1a:24:d7:38:45:64:92:37:9b:d2:34:27:5e:
09:fe:25:fc:07:34:61:01:38:72:ff:01:26:c0:9c:
8f:35:c0:6d:6e:a7:44:37:1f:cb:6a:ce:7d:c7:38:
52:46:cf:53:3f:95:b2:6d:8d:61:84:42:01:66:ee:
a3:17:3a:a7:87:98:1f:60:28:5b:43:d2:49:ba:9c:
07:54:6e:7f:4d:d0:42:80:fb:1e:66:bf:55:06:93:
5e:be:cb:da:17:da:3d:b8:d8:35:bd:42:2b:b2:62:
0b:9d:13:db:01:a0:a9:5a:76:de:f0:5e:9f:59:43:
3a:d6:36:e3:32:02:54:89:ca:a0:80:6e:11:ac:1c:
42:4a:3d:68:04:fb:f3:79:94:90:50:b7:09:5e:41:
87:c0:e9:37:68:39:9c:e9:1c:22:5e:e6:60:ee:f4:
cf:54:c3:e3:c4:57:5a:75:fb:83:0e:77:40:ad:9f:
74:3e:ca:40:9c:c6:e1:19:6f:3b:fe:a8:6b:5f:d9:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:0C:E3:BE:9B:97:CD:F1:CA:A4:56:B9:98:B2:10:A7:5C:39:A8
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:25:28:d5:5c:1a:62:93:d5:f4:4f:cf:86:d9:8f:66:d5:8b:
51:cd:4c:aa:0b:fa:28:bd:b1:68:d5:bc:a5:91:8c:b9:b4:a0:
f4:38:ed:73:24:97:20:a6:14:29:24:22:17:e8:3f:79:1d:f6:
0c:db:b2:28:b8:15:4d:96:50:75:4d:a0:12:ba:3c:2d:ee:ed:
07:42:35:2f:a8:ba:bb:d0:73:47:dd:f5:30:6d:f6:75:84:7f:
b0:c6:10:d8:ed:ad:ef:85:76:f1:f8:89:3b:57:50:b1:19:5d:
7c:a7:65:53:a8:ab:8d:80:4a:6c:19:ae:91:d0:61:3d:5a:86:
07:a8:6b:5e:19:f0:d4:aa:8d:0e:6a:1a:39:e1:35:4b:db:7d:
63:68:53:35:b3:f4:9e:e3:07:8e:2b:b2:86:a6:93:81:2e:f2:
ae:21:28:3b:4c:1d:32:61:ac:45:51:65:04:8a:79:46:a1:be:
89:1a:34:85:dc:21:45:f3:a4:d9:97:f1:97:8b:82:56:e4:9f:
e9:f9:cb:01:1b:b1:0a:7b:e6:d9:53:6c:39:aa:69:32:68:f9:
aa:4b:1a:15:c6:84:a4:29:5a:fe:82:74:c8:b0:11:af:2f:81:
93:c2:cb:9d:37:cd:85:94:a1:b0:55:fa:86:1f:7a:2d:44:e2:
a2:7c:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:19 2025 by rpki-client