Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: cakfR+IStKCL9V0VmkcGwzlVdxQqVJFSH6uX4pF9i5o=
Subject key identifier: 03:4C:90:EA:19:35:E4:B4:35:68:2D:82:A0:B3:17:4E:D7:BD:FE:57
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 0197B6A216E9C6D2BEA88F4A701202CA99B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0A3B
Signing time: Sat 28 Jun 2025 13:02:45 +0000
Manifest this update: Sat 28 Jun 2025 13:02:45 +0000
Manifest next update: Sun 29 Jun 2025 13:02:45 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: fM6TMmRj0qt14yd21edL0o29RFvanFsdCIu4jWDClwg=)
2: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (hash: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:16:e9:c6:d2:be:a8:8f:4a:70:12:02:ca:99:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Jun 28 13:02:45 2025 GMT
Not After : Jun 29 13:02:45 2025 GMT
Subject: CN=034c90ea1935e4b435682d82a0b3174ed7bdfe57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:fa:8e:a9:48:a3:7d:c4:05:75:4a:86:36:
46:71:5b:27:32:28:6b:ef:18:f8:5f:e0:d5:a2:f9:
6e:14:99:f9:5e:87:38:ac:ce:94:87:4b:be:97:38:
61:ff:24:8f:b3:e8:e6:a8:11:32:7a:39:fd:8c:b0:
27:dd:55:74:9a:3e:84:73:2c:f9:71:a7:f1:89:d8:
c3:e2:ea:d2:86:b3:87:5d:3b:3f:76:e1:bd:97:1d:
8c:df:f3:28:98:4f:88:08:2c:f6:e2:86:3c:f0:83:
f3:81:47:e8:ae:ae:af:04:a7:5a:09:44:35:4b:de:
7b:da:23:53:2a:76:b2:18:20:ba:c3:2b:15:b7:d3:
83:2b:f4:24:83:1f:9b:f3:9a:ca:80:61:fb:08:04:
b8:79:12:97:72:4a:c1:e2:a2:d8:39:7e:df:0c:a8:
7c:f9:59:2a:8c:fd:06:05:4c:f9:fd:6a:c0:69:b6:
8f:17:58:13:b9:ce:34:70:f3:5e:77:f2:77:d5:b7:
9e:bc:aa:e1:d2:62:83:99:a3:af:b4:2f:34:4d:6b:
30:2c:7a:cd:41:79:a6:4c:8a:bc:54:df:9d:64:7b:
8e:b1:65:4b:63:ef:84:8e:80:54:50:5c:27:40:36:
dc:b2:4a:7d:e1:68:49:06:68:d4:2c:4f:00:83:5e:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4C:90:EA:19:35:E4:B4:35:68:2D:82:A0:B3:17:4E:D7:BD:FE:57
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:23:6f:8d:2c:26:d5:76:b1:53:24:15:63:c2:f5:e0:1e:0e:
45:43:6f:35:b9:86:5b:dc:46:f2:cb:b1:6f:a4:7e:c3:3d:e7:
fc:68:ee:0e:00:b6:3e:e3:b8:48:70:1c:91:82:63:9d:b1:77:
1f:cb:83:c1:5c:9f:a2:f2:95:ca:df:c9:d4:1e:d0:5e:bb:07:
ef:60:df:7f:ca:e8:ae:e0:9f:0a:5b:af:f9:1e:01:e9:fb:05:
9c:d4:07:57:51:83:10:ad:e4:48:d7:40:86:f9:c1:49:55:7d:
d0:29:7f:bf:2e:dc:81:3d:98:1f:9b:8e:2c:fe:6e:d3:23:89:
f0:07:72:c0:57:6c:08:36:e8:b8:13:56:31:0f:56:e8:99:1a:
63:64:71:b5:50:20:5c:01:8a:ef:1f:bf:a1:40:1a:1d:43:7a:
13:ff:b5:85:6c:66:d6:24:ef:dc:e1:b3:61:c9:29:73:e5:93:
05:c5:e4:f2:60:70:d7:fd:51:fb:d8:22:8f:20:7e:60:c7:e7:
80:8c:e2:1a:11:d1:d5:d8:9a:b6:c5:a2:52:32:99:83:dd:8e:
1c:0f:9d:23:f1:9e:e5:1f:33:40:42:0f:33:8c:ad:7f:f2:03:
14:75:1f:80:3f:6d:33:36:a7:73:8f:e3:b9:5b:dc:63:04:ed:
a2:e3:49:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ohbpxtK+qI9KcBICypm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDUxNTk4ODJlNzdhNjdmNzk3ZjhmOGI5OTZiNjJjNGVi
YWJjMjAwHhcNMjUwNjI4MTMwMjQ1WhcNMjUwNjI5MTMwMjQ1WjAzMTEwLwYDVQQD
EygwMzRjOTBlYTE5MzVlNGI0MzU2ODJkODJhMGIzMTc0ZWQ3YmRmZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA76jqlIo33EBXVKhjZGcVsnMihr
7xj4X+DVovluFJn5Xoc4rM6Uh0u+lzhh/ySPs+jmqBEyejn9jLAn3VV0mj6Ecyz5
cafxidjD4urShrOHXTs/duG9lx2M3/MomE+ICCz24oY88IPzgUforq6vBKdaCUQ1
S9572iNTKnayGCC6wysVt9ODK/Qkgx+b85rKgGH7CAS4eRKXckrB4qLYOX7fDKh8
+VkqjP0GBUz5/WrAabaPF1gTuc40cPNed/J31beevKrh0mKDmaOvtC80TWswLHrN
QXmmTIq8VN+dZHuOsWVLY++EjoBUUFwnQDbcskp94WhJBmjULE8Ag15f6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANMkOoZNeS0NWgtgqCzF07Xvf5XMB8GA1UdIwQY
MBaAFOPVFZiC53pn95f4+LmWtixOurwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMt
ZTEwMTQ3N2VmYjhhLzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMtZTEwMTQ3N2VmYjhh
LzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCNvjSwm
1XaxUyQVY8L14B4ORUNvNbmGW9xG8suxb6R+wz3n/GjuDgC2PuO4SHAckYJjnbF3
H8uDwVyfovKVyt/J1B7QXrsH72Dff8roruCfCluv+R4B6fsFnNQHV1GDEK3kSNdA
hvnBSVV90Cl/vy7cgT2YH5uOLP5u0yOJ8AdywFdsCDbouBNWMQ9W6JkaY2RxtVAg
XAGK7x+/oUAaHUN6E/+1hWxm1iTv3OGzYckpc+WTBcXk8mBw1/1R+9gijyB+YMfn
gIziGhHR1diatsWiUjKZg92OHA+dI/Ge5R8zQEIPM4ytf/IDFHUfgD9tMzanc4/j
uVvcYwTtouNJCA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:12 2025 by rpki-client