Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: 7j3E2R+65Uy09hZMGbX3D0CAh2V54L7LUVMwjdaRsTo=
Subject key identifier: 73:AA:05:44:FC:8D:BC:49:85:1C:CF:CB:24:13:A3:15:B0:08:97:FE
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 01974DE98723A04336EF87DE8EE05AA202F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 1501
Signing time: Sun 08 Jun 2025 05:00:39 +0000
Manifest this update: Sun 08 Jun 2025 05:00:39 +0000
Manifest next update: Mon 09 Jun 2025 05:00:39 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: mkXlHmdRx7jwG4AG3PAs7yX1IDPjUZNOnylf4EZDX+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:87:23:a0:43:36:ef:87:de:8e:e0:5a:a2:02:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Jun 8 05:00:39 2025 GMT
Not After : Jun 9 05:00:39 2025 GMT
Subject: CN=73aa0544fc8dbc49851ccfcb2413a315b00897fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:46:0f:97:4f:6a:49:ea:d9:8a:05:df:9d:
22:c9:4c:11:b5:cb:f6:61:0f:fe:d6:60:ca:82:a2:
5b:01:71:6b:a4:6d:21:49:19:32:25:1a:82:94:f4:
47:7f:40:c1:5b:4b:ab:b8:a0:44:78:9b:92:ef:58:
d3:8f:46:21:74:69:91:60:ce:6b:c3:e5:5e:31:d9:
5f:36:22:5e:d0:32:83:ea:88:b7:66:42:1b:22:bc:
9a:e0:5f:bd:e3:42:a3:45:f0:40:f8:92:68:63:cb:
b6:9f:4d:eb:24:e3:e2:73:80:71:61:52:f2:62:b1:
0b:db:bf:3b:ed:cf:55:c1:14:aa:c2:c1:ca:7d:0a:
b9:d2:6e:f5:74:32:12:5b:db:96:b1:42:02:59:6c:
00:2f:12:d1:1d:c8:b2:76:20:8d:7f:b5:4c:3b:03:
67:39:77:9a:68:db:01:79:35:e7:7c:04:59:68:a6:
bc:bf:8e:88:59:7b:55:18:77:c9:f2:61:a4:54:f1:
98:9d:8f:6a:c1:17:37:2a:ef:d3:75:f7:6e:03:1d:
fe:7f:dc:21:62:a6:1a:79:b5:9b:11:1e:06:6d:41:
90:65:dc:43:95:9a:3e:c3:ed:a5:cc:ae:b2:b1:95:
21:d8:db:0d:28:19:9b:92:76:90:5a:b2:ca:2e:19:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AA:05:44:FC:8D:BC:49:85:1C:CF:CB:24:13:A3:15:B0:08:97:FE
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9d:f6:17:fa:b9:29:23:b1:64:b1:0c:68:26:b4:16:67:c7:
cc:03:fa:36:94:b2:c3:bc:bd:fc:65:25:fa:e4:a1:69:c1:c8:
a3:ef:e5:b1:f1:9d:a5:d7:0b:ac:65:3e:f3:63:04:78:68:ee:
ca:d8:00:01:8b:19:5a:aa:fa:4c:6a:e9:e5:cf:df:e8:e3:13:
f9:6e:4b:a1:f5:cd:3c:37:f4:13:d4:83:d6:f0:fb:57:c9:52:
af:96:42:29:fc:9b:c2:0d:dd:0a:ae:1e:2e:c5:ed:ee:82:6f:
e3:8f:17:0b:c7:38:ec:08:50:82:43:70:c4:c5:20:56:46:31:
c3:af:06:50:23:c9:4d:bc:57:67:72:4a:be:56:23:a2:56:05:
ed:7e:85:e4:3f:48:3b:9f:83:ec:8f:b0:62:e8:b7:c6:50:f4:
44:72:59:e6:71:94:c7:b0:0d:7e:62:a2:4c:81:1c:34:15:4f:
56:de:01:4f:e9:99:db:b8:5f:5e:1d:e5:71:74:19:94:a6:80:
f1:e2:f4:59:fc:71:a2:d7:9e:79:4a:bf:cc:50:71:4c:84:c6:
7e:6e:62:c8:79:75:ee:e7:14:81:37:49:bd:31:0a:a3:14:3d:
17:4b:af:25:93:e5:ac:2b:47:20:ee:07:f3:92:f6:e1:9a:c9:
45:97:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:20 2025 by rpki-client