Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: n7lNqFzL8Qs+aAT27risrnoIkjKCbUUx6aDP0t64Ay8=
Subject key identifier: 13:9E:B2:A3:A6:D1:AE:D7:AB:9D:1E:43:63:BB:7D:69:7D:D9:FF:4E
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 019A4E86765E63A8315CC363400032F7936B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 168F
Signing time: Tue 04 Nov 2025 11:00:26 +0000
Manifest this update: Tue 04 Nov 2025 11:00:26 +0000
Manifest next update: Wed 05 Nov 2025 11:00:26 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: AETZQUVvqfD1UIwZr8/S0DNOPXepbsep7uSrqXJehHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:76:5e:63:a8:31:5c:c3:63:40:00:32:f7:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Nov 4 11:00:26 2025 GMT
Not After : Nov 5 11:00:26 2025 GMT
Subject: CN=139eb2a3a6d1aed7ab9d1e4363bb7d697dd9ff4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:28:55:35:20:87:08:3b:69:bf:66:a5:41:
d9:20:24:92:9a:6e:e9:e6:46:0e:37:90:e1:a4:52:
28:2d:83:cb:c0:19:f4:cd:9b:fe:0c:10:92:2a:b6:
f9:39:13:9d:69:e6:fb:f9:4d:9a:3d:36:60:3a:70:
87:e4:31:90:e6:ea:f9:b9:9d:1d:4a:71:11:82:9c:
63:7c:3f:b5:8c:58:4f:f9:b5:b5:56:8a:7d:65:d9:
b9:71:33:d4:eb:20:7f:68:9a:34:6d:2c:4e:4c:8e:
cc:65:94:eb:aa:3d:37:04:c5:51:2f:1e:93:31:4b:
b0:33:ab:6a:cc:46:fb:08:c0:a3:c3:06:33:fa:93:
2a:c7:59:5d:0b:a0:be:3e:be:29:dd:77:45:2c:26:
ec:41:11:82:c9:26:78:ac:8b:e0:95:32:d7:26:f7:
1e:7b:b7:08:78:74:5c:68:4c:d0:38:9c:54:25:75:
dc:ce:8e:fc:e0:68:3b:dd:21:21:cb:55:1a:8c:6b:
15:20:d9:04:c3:46:34:de:1d:4a:51:83:d0:b2:7e:
f1:02:2c:a6:69:ab:9f:17:3d:ae:e5:c7:0f:ec:97:
a7:3b:aa:8f:1d:69:69:f5:8a:91:43:9f:d1:6f:bf:
80:df:b5:16:0d:00:87:27:40:4e:fb:30:ab:a9:78:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9E:B2:A3:A6:D1:AE:D7:AB:9D:1E:43:63:BB:7D:69:7D:D9:FF:4E
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1a:57:3a:2b:6d:b3:b9:88:af:00:3c:27:9c:91:b3:34:6d:
5a:ca:05:3c:d5:c7:25:ff:f2:b9:fd:6f:32:5c:6d:0e:a0:53:
65:45:63:1f:f5:14:39:d7:40:67:f0:53:9d:30:50:31:c0:f6:
3e:18:e9:6f:2a:56:29:15:7a:30:dd:cf:38:1a:45:2b:05:e2:
6e:13:10:d6:5a:97:68:b5:47:4b:66:95:19:25:f8:ac:bb:e9:
9c:09:d0:67:cd:d8:29:4f:63:e3:a9:cd:7c:f3:2a:fc:d5:c2:
43:bd:95:a4:53:83:95:03:77:ec:7d:81:20:34:db:8f:51:e6:
5a:6b:68:f6:bc:e2:2b:26:e1:98:91:e1:29:62:38:45:bb:55:
79:f5:4d:3d:92:f4:34:bb:97:82:8e:e9:8a:6a:93:71:59:23:
69:71:7e:28:8d:d6:f2:e4:c0:e8:38:25:a7:c9:c7:2f:be:b8:
c8:11:8e:ab:02:f4:a2:d8:40:a6:64:37:52:5c:b7:e1:c8:21:
ff:04:a6:cb:41:f6:e2:b6:85:c7:60:36:37:51:99:18:04:c3:
d2:4b:4f:6e:98:26:b0:1b:ce:a4:88:20:77:e3:c8:fa:c8:fc:
ad:77:39:17:77:c9:58:a8:81:76:ec:ac:ae:ab:99:71:09:de:
73:e5:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:00 2025 by rpki-client