Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: heobqXcn7L24BNzp4B2TBXHrBUjJHAt1uUQ1dtKldsc=
Subject key identifier: F4:1B:0E:EC:FB:77:DF:9D:FC:81:19:24:D2:BC:17:73:9D:18:FF:23
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 0198D5F1908891B474DD5B2CA9E435C83952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 15CC
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: tt2W1E+lvjBobF7s7VYabmVyz/uX/XWo4e4rnhz3SIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:90:88:91:b4:74:dd:5b:2c:a9:e4:35:c8:39:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=f41b0eecfb77df9dfc811924d2bc17739d18ff23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:d9:f1:ab:e2:80:5f:08:12:21:e1:6a:a2:
e5:b8:5b:fa:65:7b:6e:12:c4:ca:57:c6:9c:cd:05:
f1:66:db:b9:f0:af:28:fd:cc:63:00:11:69:a9:59:
e2:5e:46:1e:60:86:c8:e8:c2:36:d9:dc:bf:5b:ed:
7b:80:7c:5a:e6:1d:b4:85:a2:c1:d0:40:17:90:7f:
c9:bd:03:d9:67:d4:5b:c7:37:3e:de:22:a8:3a:bc:
87:91:03:e6:a8:d4:fc:d5:94:c3:8a:cd:c3:a8:3b:
e5:2a:15:7e:00:ab:6d:d2:cb:3c:de:67:27:39:87:
74:e0:aa:f6:5b:16:a8:ee:b0:22:db:a8:5b:29:e6:
2d:69:12:50:ee:33:5f:0a:e4:28:60:a7:28:c2:8f:
b0:a4:3f:95:29:36:2a:15:68:4a:ab:f1:97:bc:fc:
62:8a:6c:44:da:db:04:33:71:1b:70:ea:13:b0:20:
08:e4:99:98:26:96:78:cf:40:d0:9a:d1:b7:c8:70:
f4:bc:a0:bd:60:dd:8b:0f:22:e4:fb:20:6a:2d:1a:
df:72:c9:86:91:5d:c5:76:83:8f:20:5f:d7:44:93:
f7:d1:62:ab:3e:12:c4:02:fd:87:a4:d8:b3:68:66:
7d:49:43:81:57:31:e1:48:7e:c1:67:d6:60:64:c1:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1B:0E:EC:FB:77:DF:9D:FC:81:19:24:D2:BC:17:73:9D:18:FF:23
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:69:f0:8d:0a:ed:24:0f:f0:d8:34:40:c7:b4:6a:14:11:
f5:47:e3:57:9c:5a:f2:4b:78:2e:b4:6d:0e:28:9e:1c:12:19:
41:90:f9:20:26:25:2d:a7:a6:fc:38:26:c1:43:bf:6b:23:34:
38:00:a3:c9:b1:ee:6f:04:14:8e:63:75:60:74:fa:66:26:c2:
53:cd:b1:38:22:dd:8a:bb:14:f2:a5:18:5b:a7:cd:b4:7c:72:
54:b0:e2:91:b0:eb:41:d9:cf:a5:39:e9:fc:f8:91:eb:03:70:
76:c9:79:53:63:eb:5f:6d:2f:95:e8:64:81:bc:85:39:56:3e:
53:ac:b2:ce:97:86:4f:27:7a:25:c2:86:7a:f5:58:5f:87:ad:
6d:96:86:8c:4b:b6:ac:0d:99:93:91:8c:b9:c5:e7:72:21:92:
0e:1d:9c:0e:16:67:a3:de:c9:77:9e:9a:be:54:b5:ed:3c:d9:
5c:e7:06:c1:0a:00:8e:96:86:eb:20:e6:9c:83:8b:64:3e:91:
17:d5:dc:e4:ee:50:30:72:f3:20:79:f6:c6:15:df:44:a2:17:
5a:6a:94:bd:11:e5:00:54:8d:15:d5:d6:73:32:24:46:3b:ab:
1a:7e:f5:7f:4b:fa:bd:37:fe:65:8e:08:03:54:a1:32:cd:b9:
98:30:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:02 2025 by rpki-client