Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: Ff9pZ5+JVgfPyRN1EeT/x84YA+sxKvPyOC4f/zXHAg0=
Subject key identifier: DA:57:CE:38:20:B4:8F:FA:0B:22:40:88:B1:71:29:2C:04:3B:F8:4A
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 019A4EF4078B89975782196064A863E69688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0B93
Signing time: Tue 04 Nov 2025 13:00:06 +0000
Manifest this update: Tue 04 Nov 2025 13:00:06 +0000
Manifest next update: Wed 05 Nov 2025 13:00:06 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: VxUfqSActEU+cAiVsG8H+F1X5rEPmZUGE6mHVDK8SmY=)
2: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (hash: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:07:8b:89:97:57:82:19:60:64:a8:63:e6:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Nov 4 13:00:06 2025 GMT
Not After : Nov 5 13:00:06 2025 GMT
Subject: CN=da57ce3820b48ffa0b224088b171292c043bf84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:19:00:32:ab:13:ef:39:4f:c1:e7:91:2d:
db:cb:47:bd:40:32:22:36:ca:d1:bd:c1:7f:88:37:
ab:bd:cf:61:25:b5:f5:87:9d:53:ca:39:a2:51:77:
00:3a:2d:39:02:a5:79:af:8c:9a:ab:c1:68:14:4c:
bb:53:3a:17:b4:6d:f0:df:a1:44:b7:e8:ee:b5:7b:
55:23:8a:5e:2d:d1:78:bf:51:4a:e9:e6:47:3e:f4:
ae:c6:9c:01:d1:01:e1:d8:28:45:db:42:e9:8b:90:
55:11:fb:9a:f1:d1:65:61:41:ae:c0:4a:bc:e3:07:
a1:7a:7b:54:dc:87:22:6e:aa:a1:69:b6:a9:0e:52:
38:d0:f3:52:40:9b:33:9d:ce:60:28:80:92:14:a6:
74:89:87:fb:8d:35:a1:ee:27:ed:4d:07:25:46:d3:
c2:3a:2f:67:11:63:2b:c1:0b:21:21:32:68:0b:93:
fc:6b:f4:d1:56:00:82:66:93:64:5e:07:dc:64:ef:
35:9f:48:fb:f8:af:96:cc:12:1c:08:b3:6b:23:15:
13:a0:99:d8:9f:c4:e2:2b:a1:bb:ae:b6:34:f0:7f:
6d:af:5f:e4:3b:a2:41:de:99:96:0d:86:7b:cd:ba:
04:0a:00:3d:2c:5e:fa:5c:b8:11:47:35:a3:54:05:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:CE:38:20:B4:8F:FA:0B:22:40:88:B1:71:29:2C:04:3B:F8:4A
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:d3:e1:5d:fc:fb:f6:5c:98:97:a7:73:38:ab:08:5f:90:
f2:73:66:dc:ea:d1:71:a0:5f:26:5d:d2:0d:01:51:77:bd:e5:
82:1a:61:92:08:c2:d0:04:e7:c9:8b:9d:d6:5c:b8:84:62:a3:
50:31:e2:73:a3:a1:3c:5b:ea:fd:80:12:b1:e8:d8:3f:e0:fc:
3f:ae:7d:99:51:ff:22:6b:32:fd:bb:42:6e:e6:6a:a1:69:f5:
ac:fa:3a:c9:47:9f:8e:dd:b4:3b:35:cc:bf:b5:30:07:71:61:
a6:f6:a9:21:c9:0f:5a:46:15:91:38:ab:e9:19:75:54:c8:e3:
3a:6e:d1:68:2c:49:45:e2:fe:bb:3e:99:36:8f:72:fb:a2:87:
0b:eb:d2:69:a8:7b:76:4f:47:5e:2b:d1:6b:cb:c7:f5:f0:96:
76:33:5a:e8:d2:dd:ae:fc:48:f4:d4:ae:11:1e:19:6f:e4:24:
5f:5d:d3:d0:6b:1d:47:7f:ac:57:20:a1:ec:b0:45:95:22:fc:
04:54:89:c7:2e:6a:11:99:ca:8b:c8:d9:72:96:15:50:4f:fa:
40:64:77:6f:42:f0:78:c0:56:95:13:e6:a8:13:73:fa:b0:71:
1f:db:49:7d:de:69:05:33:7f:59:60:ce:61:3f:dd:9a:f9:18:
22:16:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:05 2025 by rpki-client