Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: X58dDbogl/40y30uIHkulOFm+nazWvEC2XjZp58+Ggg=
Subject key identifier: 89:BC:CE:13:67:99:56:BA:43:9F:4A:13:68:D7:33:FF:10:F8:22:8F
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 019873E34ED52069EF693F0C5AA975E8A298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0A9D
Signing time: Mon 04 Aug 2025 07:02:13 +0000
Manifest this update: Mon 04 Aug 2025 07:02:13 +0000
Manifest next update: Tue 05 Aug 2025 07:02:13 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: TZSNJlDfy5rVessg7A+pjeZAiNJZq0u1aC2moRrIWtg=)
2: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (hash: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4e:d5:20:69:ef:69:3f:0c:5a:a9:75:e8:a2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Aug 4 07:02:13 2025 GMT
Not After : Aug 5 07:02:13 2025 GMT
Subject: CN=89bcce13679956ba439f4a1368d733ff10f8228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:37:fb:ea:ed:2e:fe:70:38:66:5e:3a:d2:
bc:8c:00:0f:cc:6d:b3:94:ab:d2:31:fa:f8:04:20:
31:4f:0c:11:f5:e1:f0:fa:de:d5:64:d6:c8:c4:18:
02:fc:2c:0a:85:8f:b6:e4:1d:e6:a3:0b:bb:da:93:
d0:18:d6:5e:ff:10:61:3e:dc:ae:9e:22:90:64:c2:
9d:3f:19:c3:33:45:c5:48:0b:46:e8:8d:02:44:55:
21:4e:59:a6:64:17:4d:bd:08:84:13:ae:f9:a6:f0:
38:b5:03:3a:43:f5:f1:69:04:74:53:99:23:b4:d9:
bb:6d:02:d4:19:07:5f:24:c5:c0:4a:ff:8a:58:12:
06:8f:90:a2:46:d8:dc:41:a8:3e:fd:98:4f:f8:d9:
d5:f8:a8:4a:26:8d:8f:51:17:db:5b:6a:65:32:a0:
4c:92:24:a2:16:a5:2c:5d:41:30:73:5e:88:d1:9c:
ac:37:e3:f5:e9:d6:20:5b:68:76:12:12:33:f1:b0:
c6:25:70:e7:ce:6b:29:8a:e1:07:68:d2:81:f7:b6:
29:9f:4a:18:da:07:c7:94:d2:3c:19:0f:25:e4:81:
58:fb:1d:d1:ae:f9:06:20:fd:6b:72:4e:36:93:1f:
a2:54:aa:b3:91:4e:d0:6c:d0:0c:5b:4b:71:fd:c6:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:CE:13:67:99:56:BA:43:9F:4A:13:68:D7:33:FF:10:F8:22:8F
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:7b:d4:f0:7a:a6:23:6e:8e:cc:9f:d6:57:48:6d:4f:f6:
8b:78:a6:78:28:d9:6a:11:4e:0b:b4:77:3e:5b:9d:3f:75:81:
84:34:22:0d:6b:49:28:fa:e2:f1:f3:d0:f4:12:b3:21:68:ef:
23:67:4b:04:13:26:29:18:c4:54:76:3a:3b:be:d8:d3:ba:1b:
ad:73:73:3b:03:4a:13:b1:45:c8:a4:a7:33:3a:b1:33:e8:0f:
de:ec:f9:fa:60:c8:90:63:fc:7c:8d:8c:40:72:ca:41:dc:2f:
97:7d:40:4b:98:c1:74:ba:4b:14:1b:f0:6a:8b:45:6b:fd:29:
b2:f2:20:6d:2a:4a:39:38:11:bc:44:18:84:0b:43:d1:f1:24:
47:d6:64:ec:28:d3:c5:b0:b5:57:11:01:7e:56:f7:66:6b:bc:
af:42:0e:53:1f:49:dd:3d:69:61:15:29:dd:c1:85:ef:73:d2:
c9:87:ae:3a:80:ab:f6:af:b9:cb:68:05:8e:55:09:12:2b:f7:
da:73:6d:79:66:dc:a5:90:d8:6a:c8:47:ee:2a:1b:9c:72:1c:
1b:21:85:84:8c:67:39:61:f0:66:3c:bc:0f:64:c8:56:8b:ff:
72:db:10:9e:c5:3f:3e:4c:bf:fe:0b:47:da:55:5c:cb:da:14:
e2:35:fc:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz407VIGnvaT8MWql16KKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDUxNTk4ODJlNzdhNjdmNzk3ZjhmOGI5OTZiNjJjNGVi
YWJjMjAwHhcNMjUwODA0MDcwMjEzWhcNMjUwODA1MDcwMjEzWjAzMTEwLwYDVQQD
Eyg4OWJjY2UxMzY3OTk1NmJhNDM5ZjRhMTM2OGQ3MzNmZjEwZjgyMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKU3++rtLv5wOGZeOtK8jAAPzG2z
lKvSMfr4BCAxTwwR9eHw+t7VZNbIxBgC/CwKhY+25B3mowu72pPQGNZe/xBhPtyu
niKQZMKdPxnDM0XFSAtG6I0CRFUhTlmmZBdNvQiEE675pvA4tQM6Q/XxaQR0U5kj
tNm7bQLUGQdfJMXASv+KWBIGj5CiRtjcQag+/ZhP+NnV+KhKJo2PURfbW2plMqBM
kiSiFqUsXUEwc16I0ZysN+P16dYgW2h2EhIz8bDGJXDnzmspiuEHaNKB97Ypn0oY
2gfHlNI8GQ8l5IFY+x3RrvkGIP1rck42kx+iVKqzkU7QbNAMW0tx/ca1kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm8zhNnmVa6Q59KE2jXM/8Q+CKPMB8GA1UdIwQY
MBaAFOPVFZiC53pn95f4+LmWtixOurwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMt
ZTEwMTQ3N2VmYjhhLzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMtZTEwMTQ3N2VmYjhh
LzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvN71PB6
piNujsyf1ldIbU/2i3imeCjZahFOC7R3PludP3WBhDQiDWtJKPri8fPQ9BKzIWjv
I2dLBBMmKRjEVHY6O77Y07obrXNzOwNKE7FFyKSnMzqxM+gP3uz5+mDIkGP8fI2M
QHLKQdwvl31AS5jBdLpLFBvwaotFa/0psvIgbSpKOTgRvEQYhAtD0fEkR9Zk7CjT
xbC1VxEBflb3Zmu8r0IOUx9J3T1pYRUp3cGF73PSyYeuOoCr9q+5y2gFjlUJEiv3
2nNteWbcpZDYashH7iobnHIcGyGFhIxnOWHwZjy8D2TIVov/ctsQnsU/Pky//gtH
2lVcy9oU4jX8RA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:34 2025 by rpki-client