Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: VfrS3GgXWeuT+Pytlm46GkqZLpMySBiQfDz9MLiUtiU=
Subject key identifier: 34:2D:7D:B6:89:7C:F2:DC:9C:23:73:9A:72:06:01:EF:DC:1B:4F:B4
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 0196AC1F9079492B60191204342C69DA93E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0DFE
Signing time: Wed 07 May 2025 19:01:11 +0000
Manifest this update: Wed 07 May 2025 19:01:11 +0000
Manifest next update: Thu 08 May 2025 19:01:11 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: 6qXRNog8rLozaOpumjVEMnOp2BD7cW5eM3wzoZ3KXow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:90:79:49:2b:60:19:12:04:34:2c:69:da:93:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: May 7 19:01:11 2025 GMT
Not After : May 8 19:01:11 2025 GMT
Subject: CN=342d7db6897cf2dc9c23739a720601efdc1b4fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:53:80:66:73:96:54:c4:58:22:da:a4:49:
b3:ba:a9:2d:06:99:91:ac:d3:4e:85:e9:f4:47:73:
bf:ee:ff:83:b5:73:63:c9:bc:60:2f:91:c0:8e:8c:
2d:a0:75:8c:de:a0:44:c2:22:cb:e7:22:79:e2:af:
8a:f0:f1:d3:f4:60:bf:78:89:40:5f:f4:18:c5:33:
b1:d9:b8:49:fa:fb:60:de:41:ae:e0:ac:52:dd:83:
7a:5f:7d:58:81:43:00:14:6a:05:9a:33:57:36:d1:
5d:6a:92:a1:8c:e0:34:db:f8:46:fd:16:77:2c:3b:
2d:17:a3:0c:6b:f9:df:64:72:16:af:1c:fd:ec:31:
e8:67:41:e1:49:ea:9e:51:3b:0f:08:20:c7:5e:86:
1b:63:d4:e5:6a:d1:bf:d6:44:3e:79:fa:6d:54:73:
66:c1:87:8b:0e:6b:ca:7f:0f:1b:10:14:e8:1b:07:
d0:33:4f:f1:67:b4:23:3a:47:34:68:24:b7:e0:1d:
8d:cb:ca:ac:83:8d:b8:10:d3:c2:22:c4:87:a7:86:
64:32:18:a7:cc:ac:32:57:32:16:86:05:30:a6:8b:
6a:61:29:5a:3c:59:fc:ae:0a:00:c0:ff:37:30:0b:
9a:94:e7:96:db:3f:76:dd:06:75:e3:1f:a1:ae:db:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:7D:B6:89:7C:F2:DC:9C:23:73:9A:72:06:01:EF:DC:1B:4F:B4
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f3:78:9c:c3:63:a9:2c:13:65:74:79:75:58:c8:8c:7d:c2:
0a:06:d2:95:67:4f:2e:1a:c9:2b:e9:f6:b1:bf:d0:1c:1e:99:
80:f4:ab:0f:4e:dc:d1:fe:bb:33:43:e0:38:5e:be:f1:3a:d6:
66:68:30:fb:b6:bb:f2:f9:5c:d8:c0:8a:c5:04:d6:b3:6d:0a:
f8:60:db:ad:ba:aa:15:4f:6d:16:e2:26:79:f3:f3:80:65:82:
86:a9:31:8c:19:d6:78:08:09:6f:ac:61:70:b5:35:99:f1:3e:
33:78:ed:22:ab:0a:75:4e:e5:5f:aa:f1:85:98:91:00:92:d0:
4e:a5:bb:5b:80:c3:16:0e:0c:32:c3:86:37:bb:88:43:99:30:
09:94:93:02:4b:1f:d1:5c:77:fa:f2:96:eb:4f:6a:6c:ab:e6:
53:2f:ed:f8:45:cc:48:62:47:c8:bc:fb:ee:eb:a5:37:e5:5a:
85:62:70:30:84:14:58:62:3b:8c:28:66:12:72:54:53:e4:b8:
8e:38:19:8a:3a:35:e4:db:be:83:7e:a1:78:75:c7:9c:d1:fe:
8b:37:c2:68:5e:da:76:81:91:47:19:38:8a:b8:12:30:5b:f0:
d2:ca:1c:f1:41:62:79:e1:ef:d7:82:57:a1:c6:19:af:7b:87:
3b:56:ff:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasH5B5SStgGRIENCxp2pPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDJhMzg1YWQ5MzYwMzYxMzUwN2Q4OTU3Nzg4YmYxYmRj
N2UyMWIwHhcNMjUwNTA3MTkwMTExWhcNMjUwNTA4MTkwMTExWjAzMTEwLwYDVQQD
EygzNDJkN2RiNjg5N2NmMmRjOWMyMzczOWE3MjA2MDFlZmRjMWI0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTNTgGZzllTEWCLapEmzuqktBpmR
rNNOhen0R3O/7v+DtXNjybxgL5HAjowtoHWM3qBEwiLL5yJ54q+K8PHT9GC/eIlA
X/QYxTOx2bhJ+vtg3kGu4KxS3YN6X31YgUMAFGoFmjNXNtFdapKhjOA02/hG/RZ3
LDstF6MMa/nfZHIWrxz97DHoZ0HhSeqeUTsPCCDHXoYbY9TlatG/1kQ+efptVHNm
wYeLDmvKfw8bEBToGwfQM0/xZ7QjOkc0aCS34B2Ny8qsg424ENPCIsSHp4ZkMhin
zKwyVzIWhgUwpotqYSlaPFn8rgoAwP83MAualOeW2z923QZ14x+hrtte9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQtfbaJfPLcnCNzmnIGAe/cG0+0MB8GA1UdIwQY
MBaAFOPSo4Wtk2A2E1B9iVd4i/G9x+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYt
ZmVkMmRjM2VjZDcxLzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYtZmVkMmRjM2VjZDcx
LzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfN4nMNj
qSwTZXR5dVjIjH3CCgbSlWdPLhrJK+n2sb/QHB6ZgPSrD07c0f67M0PgOF6+8TrW
Zmgw+7a78vlc2MCKxQTWs20K+GDbrbqqFU9tFuImefPzgGWChqkxjBnWeAgJb6xh
cLU1mfE+M3jtIqsKdU7lX6rxhZiRAJLQTqW7W4DDFg4MMsOGN7uIQ5kwCZSTAksf
0Vx3+vKW609qbKvmUy/t+EXMSGJHyLz77uulN+VahWJwMIQUWGI7jChmEnJUU+S4
jjgZijo15Nu+g36heHXHnNH+izfCaF7adoGRRxk4irgSMFvw0soc8UFieeHv14JX
ocYZr3uHO1b/cA==
-----END CERTIFICATE-----
Generated at Thu May 8 05:08:04 2025 by rpki-client