Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: AloHv9Xe703Sxo9mlXkApCS78PIfRKtovyddk8ORA0c=
Subject key identifier: 59:12:4B:99:68:ED:A0:D8:C8:DC:8E:9F:7B:17:13:D9:2D:8C:58:7B
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 0198D472B284710597878FFEBD67DE734385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0F1C
Signing time: Sat 23 Aug 2025 01:02:23 +0000
Manifest this update: Sat 23 Aug 2025 01:02:23 +0000
Manifest next update: Sun 24 Aug 2025 01:02:23 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: fs/TDYE0tdSSh4jgny5uH2W4ZWuL6QYliR1p5ue/FD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b2:84:71:05:97:87:8f:fe:bd:67:de:73:43:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Aug 23 01:02:23 2025 GMT
Not After : Aug 24 01:02:23 2025 GMT
Subject: CN=59124b9968eda0d8c8dc8e9f7b1713d92d8c587b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:43:35:1d:a5:2e:69:bf:51:9e:6b:00:8b:
45:6f:5c:75:9a:7a:86:2a:93:2c:d2:a3:58:53:6d:
30:e7:a0:f0:e2:a1:69:62:f4:5a:a3:68:81:7e:3d:
68:09:49:1a:fa:4a:6b:d5:ee:69:4f:05:71:f2:cc:
78:55:ee:d8:97:c4:cb:9f:8e:1f:e8:bc:79:75:c4:
bf:26:25:8e:74:b5:21:f8:86:ff:86:77:dd:4d:6c:
e9:c2:69:d2:e9:37:4b:d8:81:8e:b1:a2:dd:9c:e2:
93:c8:46:45:02:e2:46:47:39:36:44:b7:d3:11:7c:
9f:ac:30:91:48:a9:8c:3f:ce:7e:33:03:57:ad:53:
e7:74:04:bc:bf:8d:34:83:75:cb:f7:9a:e7:55:ea:
ae:db:9b:b2:e6:71:8d:49:a1:0c:68:9f:05:a2:d8:
32:72:ea:12:82:bc:0a:bd:5e:98:88:39:61:14:4f:
30:6b:f1:49:a5:b5:cf:28:97:ba:81:e5:4e:b8:ac:
93:33:9e:26:94:70:f9:30:fe:31:c1:7c:0f:b5:9a:
ec:89:a5:b2:e3:8d:55:39:79:3e:4f:ed:f8:fb:a3:
25:0e:fd:07:c8:ff:bb:bc:99:19:b0:b8:63:7f:12:
f2:0f:d3:ba:f5:4d:76:85:a1:97:01:bc:6f:b3:f0:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:4B:99:68:ED:A0:D8:C8:DC:8E:9F:7B:17:13:D9:2D:8C:58:7B
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a8:14:13:9e:11:60:cd:37:17:4e:6e:6c:43:72:c7:6c:5f:
3c:13:1a:bd:a8:b1:7a:fc:73:9f:9f:4c:82:85:5e:85:18:53:
17:42:20:53:e8:1c:ec:a9:77:77:9e:6d:72:65:12:e8:56:d5:
1a:f2:98:29:2a:0d:5b:c6:28:6d:f9:63:b9:d0:20:4b:c0:e3:
65:bd:a9:e6:8c:d1:22:80:a0:1b:c9:e0:af:b5:e1:35:4e:ac:
a8:7b:97:9e:39:b3:b7:8d:89:f8:83:9d:41:d5:e4:62:b4:3e:
01:33:bd:2f:31:eb:d6:a1:05:c8:9b:9c:d4:cb:e4:b1:9a:40:
18:75:47:8d:c1:88:d7:ad:fc:d2:56:cb:9c:86:bf:9f:67:38:
e6:15:59:0c:47:04:19:b1:d3:37:be:e5:ba:ca:ac:51:dd:80:
d2:3e:47:65:db:ac:e0:52:04:01:f6:c5:6e:a5:d1:04:e3:60:
04:4a:e2:56:bf:e9:fc:94:8c:e7:6a:82:78:b3:e7:14:19:32:
5b:d7:d1:fc:39:f6:f2:a1:e4:1c:16:d3:d8:38:70:ce:ff:3d:
22:03:65:34:87:37:c7:bf:86:42:09:b4:63:a2:57:b8:e9:38:
6a:35:03:1f:4f:e8:d7:98:f1:cc:fb:cb:e6:c3:ba:36:07:60:
df:ce:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:03 2025 by rpki-client