Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: ebZUy8+VYFW2ebLI/x90RESTtLMGPs0nOFoiWEuetC8=
Subject key identifier: 50:28:C5:BD:52:DF:83:7E:93:F4:B6:3F:C4:C4:E9:63:B9:5F:94:CE
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 0196B7475EAA4602A8FC7F51AF480AB5BB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 14B3
Signing time: Fri 09 May 2025 23:00:29 +0000
Manifest this update: Fri 09 May 2025 23:00:29 +0000
Manifest next update: Sat 10 May 2025 23:00:29 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: HJmYAHiUu/e6QWCBNOFAanMPGSsS7KV73kKe2jKLtAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:5e:aa:46:02:a8:fc:7f:51:af:48:0a:b5:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: May 9 23:00:29 2025 GMT
Not After : May 10 23:00:29 2025 GMT
Subject: CN=5028c5bd52df837e93f4b63fc4c4e963b95f94ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:0a:c0:f0:93:10:91:cf:1f:f4:2b:19:db:
77:65:25:d4:2f:eb:cc:87:d7:0f:47:59:85:7a:cf:
30:15:3f:89:b7:67:6b:d3:98:e2:41:18:e3:88:6b:
51:5a:8d:dc:f3:f3:64:43:1f:b0:7d:3b:ad:93:ed:
b6:ba:2c:2e:b2:85:7e:94:85:50:d1:92:68:21:8b:
d7:4d:09:5c:ef:a3:c2:fe:15:dc:01:a3:f9:28:7d:
3c:b7:dd:20:b0:68:db:84:b4:b8:d3:61:88:86:fe:
63:5e:ef:76:a5:c9:8b:63:94:0a:dc:0f:52:03:d8:
37:fe:57:4d:c2:64:e7:ad:4d:31:ed:64:73:25:12:
cb:e4:87:20:df:46:d4:b2:ab:7f:eb:26:11:a1:ba:
99:8b:ac:90:b0:05:e9:30:b4:43:c6:3a:5a:39:45:
cc:df:b7:fc:31:09:85:0e:36:81:14:a6:76:f8:ae:
54:21:61:74:f5:24:02:9b:eb:b8:ba:06:4b:8d:b6:
78:e9:c9:00:79:e3:90:bc:64:80:87:04:d9:fa:80:
ac:70:4a:af:f0:fb:93:89:42:f0:ad:52:ff:d0:f6:
60:cb:a1:b9:ff:b2:0c:61:fc:a6:56:b9:e9:66:a6:
c2:1b:7d:5a:e6:b5:6d:ad:a4:b6:77:84:d8:c4:7a:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:C5:BD:52:DF:83:7E:93:F4:B6:3F:C4:C4:E9:63:B9:5F:94:CE
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:63:91:d0:57:e3:a6:3c:65:61:f2:4e:cd:82:2c:99:25:61:
e5:eb:81:63:3e:0d:5d:e8:44:9d:1e:37:08:ad:54:ea:0c:4d:
c5:df:fd:10:04:71:9e:ba:8d:d9:c0:06:50:7d:d3:c1:1f:6f:
f4:8a:5f:d4:e1:78:64:59:79:2e:df:b5:a5:17:9f:f8:81:49:
90:d9:bd:37:c0:dc:72:18:93:66:1b:82:cc:4f:68:fd:bb:79:
5d:f7:b8:b2:42:a4:08:14:18:ca:93:6c:e8:1c:83:71:c5:45:
34:a1:55:e1:13:16:0b:ca:c4:3c:e6:b7:26:13:33:38:ff:5e:
43:13:17:73:1e:60:b6:12:c2:2f:29:ea:91:64:2e:b4:53:09:
00:ab:75:ad:dd:67:42:37:f6:da:2c:cd:3f:9b:d4:5f:fc:f7:
a1:31:6e:0a:eb:16:b9:c0:b1:2d:55:ae:95:fb:22:39:4a:df:
7b:b0:bf:e3:51:7e:0e:ee:9e:20:71:bb:34:19:a1:56:d7:37:
b2:76:55:30:db:07:56:75:51:fb:91:61:4c:d6:15:b5:cc:79:
44:ed:d2:52:6f:5e:3c:c0:19:40:d0:d5:e1:65:97:a5:86:7b:
6f:8e:42:6a:26:a6:70:a0:9e:43:bf:1c:ec:6f:69:fe:2c:4b:
d1:30:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:55:48 2025 by rpki-client