Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: xRPsGW2CIamjHJQLWrdZA6ljJXMygoraoYgihQrM040=
Subject key identifier: C9:EB:F9:4D:75:A8:C2:98:BA:B2:88:8B:B3:5D:3C:A0:1E:A6:F9:1B
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019A4EF4CA1768C18505AE18BFBDCF8AFCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0FE0
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: wnV9hVVTbktmoLat1QukxRL0fUpROrjh7LkG3FJHtN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ca:17:68:c1:85:05:ae:18:bf:bd:cf:8a:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=c9ebf94d75a8c298bab2888bb35d3ca01ea6f91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:b0:c1:c1:74:b5:7b:67:bd:31:fa:43:69:
31:04:bc:64:57:18:ad:1e:8f:03:fc:4b:91:64:a7:
8a:f5:53:64:5b:90:dc:db:89:37:6a:df:a8:15:95:
96:5a:2a:bc:f2:b1:b7:94:0d:00:0f:8d:64:85:5b:
d2:f7:54:61:06:00:d7:92:2d:5d:0e:20:e2:c5:3e:
e0:ab:81:92:c7:ff:f5:dd:48:36:4e:ff:e9:87:42:
86:63:27:ed:ea:37:fa:d6:bf:40:d5:5d:1b:14:6f:
92:59:24:a2:93:54:f8:ba:7a:cb:10:89:11:e2:9a:
35:d5:26:55:75:3d:0d:07:1d:3c:4f:b3:a9:c3:1a:
e0:75:63:1b:e6:cc:5f:ec:42:82:a5:4b:70:06:96:
f1:8e:42:b4:f0:3c:11:62:ae:40:3e:0e:32:f5:fe:
5a:4b:44:be:96:84:eb:7b:93:38:4e:e3:b9:a1:a1:
6b:ff:58:72:3a:ae:79:ba:ff:21:f1:e0:ea:51:c8:
68:04:08:77:b7:d5:0a:a9:cb:68:24:28:1f:bb:0d:
29:65:e6:e7:28:1b:09:7c:9a:99:6e:df:e2:f3:c2:
26:17:41:8d:c9:c5:5e:0a:11:fb:11:e8:7f:f6:36:
18:86:92:20:1a:ec:2a:93:0f:f1:9b:3d:2c:ff:c2:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:F9:4D:75:A8:C2:98:BA:B2:88:8B:B3:5D:3C:A0:1E:A6:F9:1B
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0b:e1:8b:05:e3:34:ec:6d:f2:cc:04:6c:1f:f4:63:83:b2:
c0:a4:10:da:2f:5d:aa:27:ea:4f:85:12:30:e8:99:0e:8b:b8:
ce:f8:03:f8:a9:6a:42:41:fb:90:92:89:77:7d:e4:96:98:c1:
3f:59:3e:fc:66:16:55:06:18:d6:53:65:0b:1f:5c:00:a2:30:
17:21:97:28:68:11:b6:9f:14:df:65:e5:32:04:12:c3:9f:0c:
00:63:7e:29:c4:f9:d8:99:f0:32:74:b0:86:6e:87:b8:51:a7:
3b:fc:85:bd:a3:ff:3a:08:d6:fc:04:b4:63:a3:d3:30:d2:97:
23:ea:1e:b7:6c:04:66:ce:2c:9e:3d:4c:65:73:76:f0:8f:44:
53:13:33:bb:d4:81:e9:8e:d6:2c:1e:2b:f5:7e:6d:c0:3f:a3:
58:07:e4:08:45:7c:c0:b5:b8:3f:de:31:b3:32:20:e8:86:9b:
85:00:1c:54:62:7e:90:12:2c:e2:ce:25:4d:31:6f:5c:dd:30:
0b:84:3a:28:71:13:40:f5:7a:be:ae:ab:e8:35:3a:12:30:3d:
92:6d:b3:79:41:f1:7c:4a:22:b7:0f:9d:a9:9f:ac:89:c1:cb:
da:47:7c:a3:89:49:d2:64:07:8e:0d:8e:56:14:64:21:75:bb:
80:38:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:06 2025 by rpki-client