Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: 67SxjYXbYy6Iq24LkWjLTPs2G3VwFBi95t1dUrhBDec=
Subject key identifier: 95:09:F2:FF:AC:C5:D4:A2:CF:AF:65:2C:69:3E:9F:86:A6:1C:35:C4
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 019A7149E287DD0F3C0BA84871A52FEDF686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 16A1
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: ohuPuxrLLgxVWgp1wmx5XsWe/j/ADYWkGIwPmLdyZJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e2:87:dd:0f:3c:0b:a8:48:71:a5:2f:ed:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=9509f2ffacc5d4a2cfaf652c693e9f86a61c35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:29:62:08:8a:dc:4a:0b:e9:2f:73:28:96:
4f:ab:90:0d:b4:a1:42:3e:75:91:ca:c5:52:3f:c1:
4e:9d:ec:44:ed:63:58:ea:1c:62:62:7b:bf:18:ee:
91:02:52:45:9d:36:1d:92:19:67:7d:0b:ad:f1:b4:
e8:36:aa:2b:6e:77:43:08:ce:30:33:fe:f3:96:e2:
ff:bf:fc:60:c1:c6:36:22:1b:32:9c:d7:d0:21:af:
73:be:32:6c:cf:1e:df:c4:6a:9b:ed:e5:ef:88:d1:
ad:59:cd:e7:15:0a:b8:84:9e:c5:fa:83:3a:09:a0:
4f:8d:14:d1:5b:75:2e:ae:77:df:54:d6:e7:08:e9:
fa:27:cd:a7:50:ea:6f:75:b2:21:74:34:fd:2c:fb:
c7:dc:7a:62:c0:61:c0:de:a3:ea:ea:77:95:c2:3f:
39:3c:69:f7:72:eb:f3:0e:a5:93:cc:54:ab:e6:89:
8e:d5:a0:c3:36:89:0b:dc:e5:a9:49:15:d8:30:7a:
6d:20:7e:5d:69:e2:d0:22:3f:19:3c:aa:57:c1:af:
e0:3b:63:e4:ee:7a:e6:28:1f:9f:bc:35:96:ab:f4:
6d:9e:39:f7:f6:68:46:a8:9d:b5:79:5e:4e:f5:11:
44:29:51:9e:af:22:1e:81:cd:00:28:eb:e0:3f:2a:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:09:F2:FF:AC:C5:D4:A2:CF:AF:65:2C:69:3E:9F:86:A6:1C:35:C4
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0c:ca:ba:0b:36:a4:53:36:b8:8e:4f:a8:05:2c:46:ff:21:
17:33:84:1b:79:d1:d5:ca:55:dd:56:7d:26:eb:bb:38:4c:fd:
80:a9:9a:0a:fe:be:84:3f:bf:5b:2b:ef:72:56:ab:23:17:cb:
a9:ba:95:1d:b5:38:b3:69:fe:5e:8f:a8:71:c2:5e:ce:3d:55:
e8:f3:1e:7f:4c:32:40:c1:4c:dd:b9:ce:71:d7:de:20:db:fc:
ea:69:67:77:d4:05:fd:5e:fa:19:af:fb:0e:89:02:bd:00:db:
16:72:b3:95:b8:61:b0:d1:1c:33:d8:36:17:dc:26:8b:36:90:
96:f7:ef:44:ef:34:21:32:32:5e:7f:87:ab:e6:55:67:d8:af:
2f:71:cd:1d:a1:93:2c:d9:46:5b:b5:d6:c0:31:3e:4d:21:21:
68:11:16:07:81:c0:b7:a8:d3:d9:a2:9c:c7:88:ea:6c:5b:2d:
58:d0:c8:2d:f2:07:02:33:dc:75:7e:2e:0b:33:ac:1c:f3:c6:
b0:15:85:de:57:f3:46:2c:e6:42:22:ac:b0:09:66:12:57:f3:
a5:f3:6c:b1:7f:a0:16:8c:a1:76:7c:94:14:ae:37:61:0e:4a:
d3:c1:05:6c:4a:f4:6f:e5:27:66:4c:a2:ea:1e:39:21:0d:b3:
3d:ff:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:07 2025 by rpki-client