Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: rcB54L7ZYGitV8UKlZ+Xid2SPmGwWar7Z/lTVXwtZM0=
Subject key identifier: 5D:9B:7D:35:48:5D:D7:77:CA:2E:BE:06:7F:AA:B2:50:65:06:92:99
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 0198D65F62D931B056C50353EAADCBE0585F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0AD0
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: BHiZ0Xe3mR9FDZLZFTqAquRHaR1wI8MqDfuKs6g2XMM=)
2: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (hash: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:62:d9:31:b0:56:c5:03:53:ea:ad:cb:e0:58:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=5d9b7d35485dd777ca2ebe067faab25065069299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:2e:27:2d:16:6c:6d:be:ab:dc:28:6b:4f:
f7:19:50:ef:63:33:c2:35:02:0e:89:ae:a7:fa:ed:
e7:c7:10:56:5c:80:33:d8:f9:38:e7:aa:ef:44:e2:
db:10:cf:7f:16:15:26:91:e2:d0:7e:0d:f5:ae:f6:
3f:a5:10:51:53:ac:a8:75:2c:22:b1:1a:d1:cd:3f:
e0:e9:83:d6:7d:fe:17:82:35:7d:2f:a0:d6:1b:a2:
30:d1:3d:7f:13:96:51:81:6d:63:89:57:62:63:49:
ba:e9:e2:1b:27:44:fd:e8:ce:68:dd:88:b7:9c:59:
d6:b7:4f:b5:a7:92:10:c5:c0:d0:67:85:0b:8d:d1:
84:ce:b2:d3:e6:9f:d7:33:08:33:1b:fc:fc:f2:43:
77:59:da:03:3b:10:9a:c1:ca:b0:04:f4:49:d8:f1:
14:03:6e:ab:7c:77:b4:c4:a7:ee:9c:71:1f:17:83:
96:4c:fa:59:c2:82:82:69:a5:0e:86:c7:62:5e:65:
05:6f:82:2b:0a:c8:e3:6c:54:c1:a8:95:15:c0:c1:
68:78:c1:85:ab:7c:e7:e8:d1:14:9e:d0:13:0a:9f:
79:fe:ef:dd:e7:7a:b8:7c:a4:ef:80:28:d5:63:db:
7a:bb:d6:fc:cc:9c:5d:68:10:c9:ff:71:97:2f:1d:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:7D:35:48:5D:D7:77:CA:2E:BE:06:7F:AA:B2:50:65:06:92:99
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8a:12:c2:bf:af:44:d6:d9:a3:b3:da:50:30:39:4e:37:26:
66:2e:58:b4:c5:4f:46:34:9d:a7:13:c8:6a:5b:65:55:e6:5b:
b7:8b:c4:a5:f9:9c:09:b7:48:f7:c4:10:29:eb:80:27:db:59:
bb:58:b3:1f:d4:16:52:b6:1e:87:99:e2:c8:51:be:2a:cd:23:
09:0c:07:89:03:d3:48:31:7a:2f:22:e2:2e:9b:ab:d2:54:b3:
b3:c3:4f:c6:d2:37:c4:8d:e7:03:97:2c:64:84:91:d3:bb:06:
83:34:7f:8c:1d:0c:38:2c:e0:8d:7e:2a:24:e2:c8:c6:bd:49:
df:fe:7a:86:b1:f7:a8:e4:bb:24:a2:06:fc:fd:12:c2:aa:f7:
cb:44:67:16:3c:90:c0:59:0e:7e:d3:e7:0a:60:2c:70:54:7d:
b6:37:08:78:4f:f4:d0:dc:8a:6b:7f:a9:db:fd:33:cb:9f:fc:
7e:cd:9f:11:04:9b:6a:f6:13:fa:ea:22:96:26:00:c0:65:7c:
39:8b:72:c7:01:69:62:69:3a:b2:64:f1:d3:09:ea:29:90:b7:
5e:d5:0e:94:83:d4:e3:a3:6e:53:7c:35:91:56:9b:22:52:fd:
49:ef:a5:9b:f2:6e:40:d6:0f:cf:03:f3:b8:5e:99:f8:67:aa:
fb:ba:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:44 2025 by rpki-client