
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: 70uDj9owYottyqV7Df56mRnd3rSuzJXmsxdR6BWvw2Y=
Subject key identifier: 6F:E4:3B:5E:A6:C8:6F:61:34:2B:11:6A:C1:C9:E9:80:0C:2E:1A:F4
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 01987B9CC3493F6477B9A5062D40677C8EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0EEE
Signing time: Tue 05 Aug 2025 19:02:07 +0000
Manifest this update: Tue 05 Aug 2025 19:02:07 +0000
Manifest next update: Wed 06 Aug 2025 19:02:07 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: pxmvRwWHU+aM3i4oEmQzPK7IKeB8RWVr/wK8HQDJi4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:c3:49:3f:64:77:b9:a5:06:2d:40:67:7c:8e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Aug 5 19:02:07 2025 GMT
Not After : Aug 6 19:02:07 2025 GMT
Subject: CN=6fe43b5ea6c86f61342b116ac1c9e9800c2e1af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:08:d8:11:e2:62:2a:87:0b:5e:98:dc:7d:
15:cb:03:ef:aa:00:1a:35:0f:e0:68:37:f1:74:3f:
01:8e:7d:75:2c:db:fb:c0:d1:b6:22:b6:c9:60:26:
42:e4:ff:9d:28:0b:5c:3e:22:ee:96:fa:a6:66:13:
88:fc:50:c3:7a:a2:c1:e0:06:2a:11:79:bf:83:37:
9a:56:89:c2:b0:32:52:a4:82:76:6d:19:65:be:10:
b4:dc:01:fe:43:d7:07:b8:86:4c:3f:88:26:f3:02:
fa:e8:34:1b:14:5e:c0:b5:e5:4b:50:3f:19:ca:09:
b8:26:da:26:b3:f9:e5:ae:b1:57:83:ca:d1:50:8b:
b1:93:d8:de:96:5e:80:fb:9d:d9:33:b6:e9:af:6e:
6d:ea:bd:77:b4:e0:74:8f:e9:e7:fa:b9:c8:e8:d9:
8c:0c:c0:cb:27:7d:e6:fc:c9:fc:7a:28:4b:96:90:
4b:18:e9:7a:d5:2c:2a:4b:8a:a2:13:b4:eb:0c:13:
d3:56:7b:0f:77:88:be:4e:fc:51:58:b0:16:ad:77:
a5:fd:9b:32:f7:77:75:03:37:10:4f:dd:21:4d:c1:
19:74:13:f3:d4:f4:86:1a:c4:e3:dc:b0:4c:57:86:
5a:0a:ef:68:4c:2d:6a:c5:de:59:9e:da:c5:71:74:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E4:3B:5E:A6:C8:6F:61:34:2B:11:6A:C1:C9:E9:80:0C:2E:1A:F4
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:46:5b:46:bb:00:28:9a:0c:88:fa:95:60:c8:3a:53:1d:13:
0c:61:82:f3:9d:c2:53:83:ed:01:f1:2a:ee:ba:3b:a0:8f:8a:
46:9b:1a:62:af:74:af:79:6d:f8:78:66:88:12:3b:30:26:40:
32:a0:e4:f2:3b:e4:1c:89:dc:bd:9f:4d:91:7d:13:ae:20:b3:
09:c9:7a:eb:a7:16:ef:d2:47:e7:e5:64:81:c8:bf:76:06:86:
f9:e8:6c:59:68:96:ff:3e:25:dc:4c:72:51:6e:f6:2f:ca:69:
a8:e7:cb:bb:da:7f:73:e0:8a:98:a6:74:27:c3:35:ba:40:49:
4c:8f:64:de:77:f8:c5:8a:71:d5:76:59:a5:09:3a:15:c9:40:
29:60:56:96:cb:3a:ca:5e:fe:7e:3f:af:2f:0d:01:73:02:bf:
be:8c:62:5f:86:8d:56:ef:29:9e:03:2b:49:78:07:35:51:7a:
3c:a6:37:6f:1f:0e:ca:a7:58:3e:22:ad:d5:98:37:6e:29:d4:
b7:98:83:cd:3a:4b:ce:e0:0d:90:23:45:a3:79:8d:1d:b2:38:
ae:cb:f5:53:a1:2f:f7:f9:0e:50:07:1a:a2:e0:9e:3d:c2:1b:
6b:20:a5:7a:a0:01:fa:8f:b6:91:96:32:0e:8a:e8:af:bc:22:
a3:99:95:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:41 2025 by rpki-client