Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: M6zsaIz6igA8k6JU8CTwSIotI0LshgOabV8vDz4Oy3M=
Subject key identifier: FB:A0:81:80:7A:52:97:D5:5C:E5:9E:2F:F7:91:36:B6:66:41:FE:39
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 0196C8DFD18EBFD7C46B379C733620C37C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 012C
Signing time: Tue 13 May 2025 09:00:33 +0000
Manifest this update: Tue 13 May 2025 09:00:33 +0000
Manifest next update: Wed 14 May 2025 09:00:33 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: 6VPqLfY6O8iD+pBeP6DgkgqnOkA0FG9n2aIZ1cdT260=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:d1:8e:bf:d7:c4:6b:37:9c:73:36:20:c3:7c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: May 13 09:00:33 2025 GMT
Not After : May 14 09:00:33 2025 GMT
Subject: CN=fba081807a5297d55ce59e2ff79136b66641fe39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:88:34:9e:a0:31:a7:57:4c:3e:74:9b:8a:
25:c9:4a:cc:82:cb:a6:23:5d:ce:41:a4:51:af:12:
22:b6:eb:56:da:92:fb:a1:9d:63:8c:33:88:49:15:
98:3a:a2:55:9c:c6:0c:c5:9d:09:d0:49:38:64:3a:
df:ff:6b:f8:c0:07:55:a0:d0:99:72:ba:6c:89:a6:
f7:ea:9b:f1:25:32:63:be:4f:1c:2d:d6:62:58:af:
b6:62:f6:82:60:34:b1:02:e5:ea:83:d6:bc:02:07:
62:ab:47:64:f1:6a:35:10:17:9e:ae:6b:69:b1:76:
23:11:51:83:3a:de:64:5e:ac:50:53:9a:17:35:74:
c9:82:1b:ca:cb:58:82:4f:dd:07:57:36:51:f2:73:
50:c5:50:67:53:e8:b1:d5:a0:25:41:b7:63:a7:ed:
d3:8a:01:27:d6:05:f4:74:a4:c5:97:5d:24:d9:c2:
0c:54:c2:ca:75:68:0f:61:db:8d:4a:6f:5a:9d:51:
81:88:d7:70:e7:bf:e7:95:12:e3:a7:97:e8:ba:8d:
dc:b2:e1:f2:0b:b0:72:e5:25:15:b3:88:b3:22:fa:
26:50:76:a4:33:b9:86:ed:ef:58:f8:e8:5f:4e:43:
d6:5d:d3:8c:d7:e3:47:a9:ca:cd:de:e0:af:67:f0:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:81:80:7A:52:97:D5:5C:E5:9E:2F:F7:91:36:B6:66:41:FE:39
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4e:89:d5:b2:17:57:31:9c:0f:e7:f1:58:f4:d3:01:56:7a:
f9:52:f4:49:a4:c9:05:58:ae:f1:31:2d:0f:9a:ee:bb:6c:57:
bf:7e:1c:83:4d:65:00:c0:40:e1:b0:0a:99:a3:24:11:f1:d4:
1c:11:f5:22:45:95:f7:97:42:6c:2c:2f:0f:41:e4:93:00:2d:
ce:11:51:0e:20:e6:38:99:9e:96:38:80:81:9c:cd:97:64:97:
8e:29:d4:27:0e:f1:48:3b:c4:13:86:82:52:67:c7:bb:f1:d1:
8f:dc:b1:f9:87:7f:ce:f3:5b:e6:81:13:6f:4a:a5:25:61:bc:
b2:6c:b1:42:54:13:af:bc:b8:f1:f3:c6:72:68:9b:1e:7b:02:
58:3d:5b:b5:08:20:d0:4e:02:56:5a:54:fd:b6:69:5b:a7:22:
b3:eb:bb:22:d8:9d:b4:a5:03:0d:dd:7a:26:45:c0:9d:08:4d:
b5:12:9b:e4:b8:d1:88:80:01:1f:12:e7:f2:a5:c4:cc:5b:8e:
cd:7c:3f:89:7d:7c:04:f7:c5:e3:21:ab:17:ef:64:90:b7:fa:
37:ea:89:6e:a1:8c:3d:5c:e6:16:96:90:44:12:1b:c3:19:62:
1b:ae:4c:8a:af:41:03:89:7e:88:16:59:c2:8d:20:8a:c7:ca:
3a:88:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:34:31 2025 by rpki-client