Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: th3/vLr5zhdwf66LGrVkWiRkYDXtb9iypUxAFSMzmZI=
Subject key identifier: D8:8D:4C:34:76:FE:4E:43:C2:48:0F:0E:FA:DD:63:10:92:E5:DE:A5
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 01976F2C702CC566DEFE6C5BE8258A270EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0E63
Signing time: Sat 14 Jun 2025 16:01:12 +0000
Manifest this update: Sat 14 Jun 2025 16:01:12 +0000
Manifest next update: Sun 15 Jun 2025 16:01:12 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: R7rW8qtI0MMYmj/pCuH4peJiG+ar1UHQAc04pF2I3QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:70:2c:c5:66:de:fe:6c:5b:e8:25:8a:27:0e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Jun 14 16:01:12 2025 GMT
Not After : Jun 15 16:01:12 2025 GMT
Subject: CN=d88d4c3476fe4e43c2480f0efadd631092e5dea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7e:0f:3c:58:33:26:38:5b:99:78:9d:4f:41:
73:85:37:25:2d:98:ed:ec:60:4a:eb:43:2e:73:07:
2e:70:e3:53:2d:b6:38:8c:f3:a0:df:54:7d:1d:7b:
62:05:08:38:45:d4:7f:38:4c:a0:78:16:bb:80:a8:
c1:a4:90:34:da:c9:8c:d0:91:20:b5:25:32:88:a9:
09:3d:39:b0:35:ba:7e:b9:a9:13:01:bc:04:5d:03:
dc:8e:3f:1c:88:d7:f2:ca:d8:fb:c0:bd:e8:c7:f2:
ef:fe:50:b4:05:48:fc:86:bf:67:64:61:9d:e4:86:
08:2f:bf:15:71:4a:83:3f:84:08:72:27:af:a4:57:
09:11:53:bb:11:8d:02:e6:f4:72:a0:94:1d:5d:31:
39:a7:1d:3c:21:d1:cd:2e:52:3e:14:16:8f:c9:b6:
47:60:c8:27:51:c8:46:e7:aa:8f:74:a1:17:f8:b3:
ef:4b:67:fa:7b:8c:e3:f8:60:1f:30:ff:e0:c7:f8:
48:e0:a2:63:da:6c:41:d3:34:6f:5d:bd:cb:a3:d5:
e1:02:ca:c8:a6:f1:e6:b7:31:d0:42:ac:5d:99:ac:
55:99:f4:cb:1e:e5:c2:de:a8:04:8b:43:59:8c:4a:
a0:ae:7a:3a:9c:c5:26:bd:de:71:b7:4c:bd:21:ca:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8D:4C:34:76:FE:4E:43:C2:48:0F:0E:FA:DD:63:10:92:E5:DE:A5
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:bb:e4:ff:49:cf:4f:d7:a3:74:5c:2c:82:c4:f1:6b:c0:
2e:c0:8d:68:12:86:3f:bd:95:ec:6a:a2:5c:66:ae:ad:93:46:
3d:49:0e:98:12:44:6e:92:a3:86:88:82:96:de:d6:8e:69:c0:
a4:a6:44:59:c6:5f:e5:15:69:42:dd:1b:80:a3:23:b6:6b:0e:
a4:bd:94:42:d5:a4:21:16:aa:fe:0f:35:53:7c:7d:63:d1:5a:
6f:01:0f:ed:29:83:bc:a8:19:1f:7b:2c:9a:aa:b3:d8:85:28:
35:95:e0:d3:81:e2:4e:83:b2:6d:ec:71:c9:1f:50:a7:9b:7e:
23:f8:ba:b2:fe:0e:65:ae:01:61:16:90:08:16:49:45:ab:48:
81:3b:3a:97:d3:bf:4b:e7:cb:4c:d8:01:65:e4:eb:9b:7c:a7:
90:24:1e:f9:cd:b9:8b:73:92:12:0d:89:ec:44:61:03:9b:22:
63:ba:71:db:3c:1a:df:48:ee:08:31:1f:73:7c:93:e8:0f:27:
20:59:7c:ce:53:ec:f9:46:87:31:3a:71:44:b0:0c:d2:76:2d:
38:66:56:de:08:d7:3b:99:dd:03:b8:5f:92:83:d6:24:76:46:
8f:94:97:1a:5c:08:96:6e:45:66:d1:07:c1:90:1a:8b:5a:94:
93:5b:53:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLHAsxWbe/mxb6CWKJw7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDJhMzg1YWQ5MzYwMzYxMzUwN2Q4OTU3Nzg4YmYxYmRj
N2UyMWIwHhcNMjUwNjE0MTYwMTEyWhcNMjUwNjE1MTYwMTEyWjAzMTEwLwYDVQQD
EyhkODhkNGMzNDc2ZmU0ZTQzYzI0ODBmMGVmYWRkNjMxMDkyZTVkZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8n4PPFgzJjhbmXidT0FzhTclLZjt
7GBK60MucwcucONTLbY4jPOg31R9HXtiBQg4RdR/OEygeBa7gKjBpJA02smM0JEg
tSUyiKkJPTmwNbp+uakTAbwEXQPcjj8ciNfyytj7wL3ox/Lv/lC0BUj8hr9nZGGd
5IYIL78VcUqDP4QIcievpFcJEVO7EY0C5vRyoJQdXTE5px08IdHNLlI+FBaPybZH
YMgnUchG56qPdKEX+LPvS2f6e4zj+GAfMP/gx/hI4KJj2mxB0zRvXb3Lo9XhAsrI
pvHmtzHQQqxdmaxVmfTLHuXC3qgEi0NZjEqgrno6nMUmvd5xt0y9IcqS5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiNTDR2/k5DwkgPDvrdYxCS5d6lMB8GA1UdIwQY
MBaAFOPSo4Wtk2A2E1B9iVd4i/G9x+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYt
ZmVkMmRjM2VjZDcxLzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYtZmVkMmRjM2VjZDcx
LzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFi75P9J
z0/Xo3RcLILE8WvALsCNaBKGP72V7GqiXGaurZNGPUkOmBJEbpKjhoiClt7WjmnA
pKZEWcZf5RVpQt0bgKMjtmsOpL2UQtWkIRaq/g81U3x9Y9FabwEP7SmDvKgZH3ss
mqqz2IUoNZXg04HiToOybexxyR9Qp5t+I/i6sv4OZa4BYRaQCBZJRatIgTs6l9O/
S+fLTNgBZeTrm3ynkCQe+c25i3OSEg2J7ERhA5siY7px2zwa30juCDEfc3yT6A8n
IFl8zlPs+UaHMTpxRLAM0nYtOGZW3gjXO5ndA7hfkoPWJHZGj5SXGlwIlm5FZtEH
wZAai1qUk1tTWA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:00:14 2025 by rpki-client