Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: iv3Pih9SZX+y0qfs9iwH4V7aQI8N3a0DHQYn1KD8fV8=
Subject key identifier: A2:75:C4:E2:28:DB:BC:56:08:86:00:B5:85:62:9E:70:0B:64:5B:32
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 0199FF59775A78DD17847FA1C7402FC6E904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 1666
Signing time: Mon 20 Oct 2025 02:01:17 +0000
Manifest this update: Mon 20 Oct 2025 02:01:17 +0000
Manifest next update: Tue 21 Oct 2025 02:01:17 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: 1s75e7cHxnJhIsEp9DjnERAJPN/2GI9VyjBjahJHVlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:77:5a:78:dd:17:84:7f:a1:c7:40:2f:c6:e9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Oct 20 02:01:17 2025 GMT
Not After : Oct 21 02:01:17 2025 GMT
Subject: CN=a275c4e228dbbc56088600b585629e700b645b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:f5:09:f3:91:84:db:b2:6d:cf:45:35:07:
7b:48:9f:75:c0:e2:7f:34:b1:cf:6b:6a:6c:5d:77:
e0:38:8c:c0:93:c9:ee:77:3a:22:07:37:d3:bf:92:
4d:ee:01:08:af:d1:05:83:a9:81:4b:37:7c:ca:26:
70:a2:44:bd:fe:c6:82:50:3f:73:0b:b0:fc:1c:b3:
da:81:a2:28:4e:3c:a1:00:0f:0d:1a:63:25:1b:17:
c4:13:f9:5b:60:f5:15:2c:cd:92:4b:f6:bb:49:89:
de:fc:b5:d3:a3:ca:a3:d8:89:f6:5a:90:a6:c5:29:
44:e7:b2:96:df:9c:bc:b8:1a:66:4b:b1:cc:21:33:
1d:f2:41:c0:ff:b4:12:13:56:26:c5:d8:85:19:b6:
f2:d0:f9:d2:72:fb:70:18:55:d5:75:4d:3d:36:36:
77:3a:ea:f1:60:50:57:53:c6:e8:65:e4:53:3b:1f:
d0:1e:cc:52:19:b0:9e:61:2a:08:f2:a4:b6:0f:57:
d8:0c:a9:5c:5b:55:72:9b:fa:db:e3:f8:e1:cb:77:
bf:b2:c0:0a:89:0c:1b:fc:e8:40:7c:b3:29:02:f5:
9d:20:3d:6e:b0:ed:69:4b:02:d6:fb:bf:9b:18:b9:
b7:b8:a4:51:5b:e3:a9:d5:6a:cf:54:20:28:80:36:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:C4:E2:28:DB:BC:56:08:86:00:B5:85:62:9E:70:0B:64:5B:32
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:f1:ab:9a:5d:e0:56:61:94:3c:54:08:77:77:24:b1:4f:
28:f5:15:66:f3:76:2b:12:0a:a6:46:fc:d3:dd:c8:2a:40:47:
65:de:7d:4d:9e:c9:22:56:25:a2:52:09:98:2a:d2:e2:88:d8:
bd:58:f9:1d:f8:21:c3:57:b8:9a:51:be:c7:49:73:58:bf:14:
1b:3a:3b:5e:1d:f6:8c:3f:ca:35:e8:b2:20:ef:14:04:8b:fd:
bb:c6:70:b6:41:a3:11:e8:bb:f7:3c:b2:03:22:8c:d7:ce:07:
c5:e0:d0:4c:46:85:26:a9:8e:24:5a:53:e1:b0:fe:8c:4c:39:
77:e0:7b:64:4e:09:21:78:e0:48:de:de:34:b3:7b:6c:b9:c4:
70:3c:cf:95:f8:c1:b8:9a:29:37:5e:77:94:47:11:fa:78:9a:
01:ca:70:77:3f:a2:0d:74:08:db:a8:0c:f4:d6:a7:2a:91:57:
2b:ec:a9:78:98:cd:b8:98:e1:2d:b3:d1:af:06:86:79:37:97:
b8:4a:48:99:8e:56:21:6b:af:bf:3c:bf:8e:53:1f:14:c1:a1:
17:92:05:56:c7:6e:a9:67:f6:f9:b7:b7:11:a5:47:80:c7:0d:
8f:f7:43:8f:f8:ad:9c:0a:1d:bd:7f:2b:1e:5c:30:7d:68:aa:
25:06:ba:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WXdaeN0XhH+hx0AvxukEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGVkZTFlN2JmNjcxOTllN2FiNmY1ZWQwMDQ5ZTk2MDgz
MTczNjIwHhcNMjUxMDIwMDIwMTE3WhcNMjUxMDIxMDIwMTE3WjAzMTEwLwYDVQQD
EyhhMjc1YzRlMjI4ZGJiYzU2MDg4NjAwYjU4NTYyOWU3MDBiNjQ1YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroT1CfORhNuybc9FNQd7SJ91wOJ/
NLHPa2psXXfgOIzAk8nudzoiBzfTv5JN7gEIr9EFg6mBSzd8yiZwokS9/saCUD9z
C7D8HLPagaIoTjyhAA8NGmMlGxfEE/lbYPUVLM2SS/a7SYne/LXTo8qj2In2WpCm
xSlE57KW35y8uBpmS7HMITMd8kHA/7QSE1YmxdiFGbby0PnScvtwGFXVdU09NjZ3
OurxYFBXU8boZeRTOx/QHsxSGbCeYSoI8qS2D1fYDKlcW1Vym/rb4/jhy3e/ssAK
iQwb/OhAfLMpAvWdID1usO1pSwLW+7+bGLm3uKRRW+Op1WrPVCAogDbvfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ1xOIo27xWCIYAtYVinnALZFsyMB8GA1UdIwQY
MBaAFMBO3h579nGZ56tvXtAEnpYIMXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzkt
OWU3MWY2YTg0ODAxLzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzktOWU3MWY2YTg0ODAx
LzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3/xq5pd
4FZhlDxUCHd3JLFPKPUVZvN2KxIKpkb8093IKkBHZd59TZ7JIlYlolIJmCrS4ojY
vVj5Hfghw1e4mlG+x0lzWL8UGzo7Xh32jD/KNeiyIO8UBIv9u8ZwtkGjEei79zyy
AyKM184HxeDQTEaFJqmOJFpT4bD+jEw5d+B7ZE4JIXjgSN7eNLN7bLnEcDzPlfjB
uJopN153lEcR+niaAcpwdz+iDXQI26gM9NanKpFXK+ypeJjNuJjhLbPRrwaGeTeX
uEpImY5WIWuvvzy/jlMfFMGhF5IFVsduqWf2+be3EaVHgMcNj/dDj/itnAodvX8r
HlwwfWiqJQa6Qw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:58 2025 by rpki-client