Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: jnZj2FTPYrzcikq0Ldkie19raGprt0f1eCFCx+OfEro=
Subject key identifier: AC:A1:1C:69:50:19:58:EB:E5:3C:D2:0B:4E:D6:E7:17:C7:D8:54:40
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 0197B82124C20F8EF6D4FDEFBE75CB69354E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 1538
Signing time: Sat 28 Jun 2025 20:01:09 +0000
Manifest this update: Sat 28 Jun 2025 20:01:09 +0000
Manifest next update: Sun 29 Jun 2025 20:01:09 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: cWGASwGhkwe/YYYS1fN/8uU+5NNVD03cu8Tv1CPHkSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:24:c2:0f:8e:f6:d4:fd:ef:be:75:cb:69:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Jun 28 20:01:09 2025 GMT
Not After : Jun 29 20:01:09 2025 GMT
Subject: CN=aca11c69501958ebe53cd20b4ed6e717c7d85440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:43:17:13:eb:bb:7c:e0:84:4f:bb:81:44:
cb:84:2e:e9:d7:13:12:53:14:28:91:a8:99:f1:c8:
55:62:ae:68:e8:b3:d0:e6:46:94:d0:6b:9b:b6:ef:
a7:9c:73:72:fe:e6:fe:41:8e:72:b5:48:f2:5a:ff:
f5:ed:d0:6a:71:c7:22:a4:b0:b7:68:79:dc:bd:00:
6a:79:8f:6a:63:14:5f:c2:72:09:82:88:d6:11:13:
5e:aa:f8:d4:58:49:c0:85:3d:d4:8c:70:60:e8:88:
9d:6b:1c:64:6d:f7:fb:50:d4:7b:ca:7a:1d:b4:8c:
f8:30:ff:83:5b:92:c9:6e:7a:23:8d:81:fc:95:67:
c2:0b:23:1b:42:a2:70:9c:c7:d5:1d:9d:e5:27:8b:
6e:63:43:74:fe:ac:4c:d1:60:75:3e:d7:b9:e3:20:
ac:8c:a9:93:0f:11:e1:5f:67:60:1f:e1:c9:07:76:
6e:ff:8c:05:be:de:71:4d:a2:02:05:de:ae:85:27:
39:c8:0c:7d:ae:a5:18:32:00:ae:c5:f6:c1:5d:ef:
86:fa:9a:52:e0:dc:de:7a:2a:d6:59:0d:ff:78:27:
b0:36:43:e4:ec:e7:f2:0d:45:58:8e:6a:a3:47:19:
b0:54:0c:02:e6:33:ac:7f:45:2c:0f:bd:ba:28:27:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:1C:69:50:19:58:EB:E5:3C:D2:0B:4E:D6:E7:17:C7:D8:54:40
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:87:9b:55:49:02:0e:89:c4:a7:6c:5b:b6:fa:ea:28:d4:71:
61:58:12:9d:bd:c9:b8:ed:3a:d1:d9:40:ac:c7:bf:4e:7f:61:
37:20:f8:67:a2:4f:d4:11:6b:65:66:ba:6d:b2:44:68:1d:84:
4c:fd:ff:d6:0a:b2:91:09:90:e6:95:72:dc:a2:23:c3:1d:87:
a9:41:0f:92:3d:eb:ce:22:c6:ef:cc:40:84:cf:bc:02:b2:c8:
34:f5:c0:72:5b:bd:1a:45:89:ee:30:a2:0a:c1:1c:95:ca:94:
42:b2:14:65:55:18:fa:01:c7:4f:8e:bf:da:b9:b7:27:bb:74:
7b:47:5e:32:1f:7d:e6:1e:0c:27:77:fa:13:61:76:14:04:c6:
82:a3:46:cc:1c:35:77:05:7b:6e:ea:3a:58:dc:b7:af:1a:ce:
95:69:71:1f:ae:be:95:98:7b:ff:05:42:44:e8:88:d7:1d:72:
43:83:82:50:34:ed:07:45:b3:1c:65:19:cd:87:7e:aa:2a:6d:
78:82:71:f0:f9:86:33:fd:b4:cb:4b:4c:09:66:fa:63:46:0e:
2c:93:0d:1c:39:f6:46:84:85:0f:f1:07:b1:5a:89:eb:68:70:
48:6c:0a:36:ab:a8:76:4a:0f:bc:7c:f9:18:2f:c9:4f:f2:c5:
a7:03:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:06 2025 by rpki-client