Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: 6bKfyaw4v3/r1v5UExP0NYvF2MANMap6S82Ws13If/I=
Subject key identifier: 72:19:42:05:82:16:AE:5E:35:74:F6:3A:E7:F0:93:7B:22:EA:A1:43
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 0198D4729235BB62F05CE6337F77B29254EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 023B
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: 9w4gNDU3sjTMVYayZpzo4Gh8t6NGwEUfcyrMe417EgQ=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:92:35:bb:62:f0:5c:e6:33:7f:77:b2:92:54:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=721942058216ae5e3574f63ae7f0937b22eaa143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:45:07:36:9d:bc:53:70:9e:14:02:d7:61:
14:bc:a6:f1:6c:61:28:ed:92:c6:92:14:0c:05:b6:
6b:09:bb:f5:75:8c:b1:0c:4a:7c:0a:5a:28:9f:b1:
6c:c5:af:f9:73:e2:fb:d8:25:6b:7f:57:ed:55:3e:
e0:87:f0:73:95:23:ac:e3:f0:01:e1:32:c3:ec:3f:
d5:70:54:5f:4f:4e:08:59:45:05:73:49:a4:b6:fb:
6c:ad:b4:4d:db:c7:63:cb:b4:b2:5a:0f:4b:c4:e2:
87:d0:07:cf:37:ab:50:e7:9a:ed:6e:a7:ca:1e:94:
95:9c:c1:bc:30:d2:fe:f3:29:3f:5a:97:f1:94:21:
37:59:1c:54:cb:f3:7c:0b:75:95:1e:f1:d9:4f:ae:
5d:88:80:2c:93:02:d1:6c:53:fa:e9:ca:a6:46:70:
26:d2:f5:ec:f2:89:7a:33:1c:0f:15:22:1a:21:c5:
15:25:ad:78:13:e6:5f:f4:a3:4a:0b:67:96:5e:9d:
e0:81:8d:d9:55:9d:06:9c:ab:32:4e:82:eb:3a:25:
d7:60:c6:1b:f9:00:f0:dd:8d:72:39:49:90:e6:dd:
76:4a:94:f3:6b:88:4d:50:3f:97:33:9e:d7:5b:f0:
6d:18:5b:f0:66:22:5d:df:59:e5:4b:1c:96:cb:48:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:19:42:05:82:16:AE:5E:35:74:F6:3A:E7:F0:93:7B:22:EA:A1:43
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:60:c8:52:b3:51:ca:52:97:ee:c2:9d:4b:4a:e6:f6:20:07:
b9:ae:82:a4:ab:5c:c7:9f:5b:b3:0f:4b:18:71:43:f2:b4:4f:
67:a4:7c:aa:ad:b6:48:19:9b:91:a4:36:ca:4c:b4:11:88:80:
1b:cb:f8:b3:97:f6:78:2e:85:64:36:dd:4c:42:2f:7c:96:b6:
ba:22:30:5e:88:95:68:af:16:f6:84:65:68:81:04:8a:90:d5:
8e:25:09:62:48:c5:38:df:93:0e:b9:ee:26:f3:6d:e3:ea:a7:
8f:ae:4a:cc:67:74:09:24:ba:64:26:c6:62:10:9f:e2:06:34:
84:00:95:8d:ac:32:fe:b1:84:b9:e0:a5:30:19:a5:94:03:01:
16:c8:b2:d1:6f:03:e1:ce:f5:2c:fb:ef:bb:d9:27:a3:7c:7f:
a2:a8:09:ac:9e:b5:85:15:83:56:6d:99:44:68:33:de:03:bd:
d8:9d:d5:a0:a1:09:50:ed:05:d5:2d:28:38:6b:fc:f8:16:8c:
03:16:ff:2f:94:75:8b:25:a2:f6:69:47:91:2d:8a:19:c9:f4:
e4:b0:b8:1c:6b:17:69:40:87:af:ff:7e:74:6b:3a:b0:19:e0:
f3:8a:ee:c8:68:24:52:09:14:78:3f:4d:d0:5b:09:0d:94:f9:
6f:17:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:14 2025 by rpki-client