Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: jb+JeC4BiA7ib+U7E8FDRJZT4h1pvnm80nVyDueL9rE=
Subject key identifier: EE:E7:0E:35:9E:5B:D9:C9:4F:A0:03:D7:D2:2E:FA:BE:D7:BF:AF:D6
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 01984AE5B646B785D3E34E4986550D8605B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 1584
Signing time: Sun 27 Jul 2025 08:00:25 +0000
Manifest this update: Sun 27 Jul 2025 08:00:25 +0000
Manifest next update: Mon 28 Jul 2025 08:00:25 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: EZPv8y2eGynAkAYbRT62Op8wGUY2dnMo+HLYfuU+cj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b6:46:b7:85:d3:e3:4e:49:86:55:0d:86:05:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Jul 27 08:00:25 2025 GMT
Not After : Jul 28 08:00:25 2025 GMT
Subject: CN=eee70e359e5bd9c94fa003d7d22efabed7bfafd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:1b:49:d6:4a:44:56:de:07:17:4d:44:be:
c4:e1:6f:de:1f:98:44:fe:7c:e4:91:26:9d:81:51:
00:f5:b7:ee:0a:66:db:21:87:b4:79:da:88:06:80:
80:87:f4:df:75:41:44:82:f9:5c:74:92:c0:2c:1b:
f3:52:51:19:1b:18:87:7b:f1:19:90:fb:ee:88:c7:
42:37:65:93:ab:2b:97:af:eb:c7:4b:13:42:6d:dd:
91:4e:c4:1a:ba:1d:5b:36:e9:ed:57:f8:da:bc:61:
cf:9f:7c:bd:30:cf:73:05:11:bf:12:51:7b:d3:95:
e1:75:8f:89:53:f3:bb:e1:42:18:cb:1e:be:24:8a:
7b:cd:cf:d3:f1:7d:50:a0:2d:55:c8:75:67:7e:1d:
92:78:ca:eb:9a:e3:1a:17:6d:ae:a9:5f:2a:66:e1:
6b:cd:22:21:48:79:ee:d1:f3:07:b7:5d:af:c5:99:
2f:50:c0:b1:e3:d8:11:62:74:7e:73:45:13:6d:68:
ba:e1:a8:ad:6f:a0:83:3c:ce:b0:29:27:0e:7f:78:
b7:61:38:9d:07:8f:41:b5:25:8a:b5:c5:e0:42:6f:
25:26:8f:85:66:ff:8c:56:36:a4:fb:3a:ed:62:15:
dd:9b:d5:d1:79:b3:4d:b8:c6:30:79:af:6f:71:87:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E7:0E:35:9E:5B:D9:C9:4F:A0:03:D7:D2:2E:FA:BE:D7:BF:AF:D6
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:10:8c:72:37:1c:de:e8:ee:24:2c:10:85:f1:a8:79:d1:
a6:13:8b:87:16:0f:dc:75:9d:4f:0a:ac:fc:11:a2:6b:1f:c4:
66:3d:17:c2:ce:bc:f8:7e:a7:3d:fb:78:5c:a4:40:2d:f7:4c:
c2:34:e8:ab:cc:aa:92:7e:d5:fd:7e:f1:2d:b3:37:8b:bc:c8:
e6:2a:f8:fc:1f:66:cd:37:dc:e2:98:be:1f:d3:4b:fd:90:47:
24:c8:64:ea:ed:c0:ad:a5:90:80:f1:c5:f5:9b:f0:7d:99:a2:
70:af:1f:23:b5:b8:27:bb:39:d4:64:60:93:b0:f8:1e:48:54:
d3:32:58:ff:07:90:49:9a:21:98:4a:ac:62:ad:e5:2f:6e:03:
da:a3:8e:80:c8:f0:63:56:fe:8f:8f:85:d4:06:92:3f:23:20:
e8:9e:9c:4c:7f:84:51:17:ff:49:ca:8d:bf:b4:b2:1a:4e:63:
0f:bb:21:66:99:ae:af:cb:a5:9a:85:62:61:f4:99:01:8d:87:
50:17:90:f3:93:17:0f:dc:f9:bb:84:80:2f:14:e5:d9:b5:7b:
07:e0:c1:09:b9:7f:57:c1:e2:d6:e4:f6:54:72:31:10:15:7e:
1a:ca:ad:09:72:8b:40:05:6d:37:6a:cd:41:96:90:da:e9:77:
1b:25:f6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:41:02 2025 by rpki-client