Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: kz5uRpbSeUWK/BKcy143OfXJVHMWvi+U9Hwz8QGjPd8=
Subject key identifier: D4:0C:54:79:87:B3:2A:C0:E7:12:91:17:01:0D:6A:C7:0B:E0:F1:54
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 0199FBEB025C2A98ECB044113DE0368DB384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0FB5
Signing time: Sun 19 Oct 2025 10:01:46 +0000
Manifest this update: Sun 19 Oct 2025 10:01:46 +0000
Manifest next update: Mon 20 Oct 2025 10:01:46 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: WSRt8BR2eKEyjQcnqrpbKk1YITvSkh7rQX5rIG/tuTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:02:5c:2a:98:ec:b0:44:11:3d:e0:36:8d:b3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Oct 19 10:01:46 2025 GMT
Not After : Oct 20 10:01:46 2025 GMT
Subject: CN=d40c547987b32ac0e7129117010d6ac70be0f154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:59:48:b3:f2:c1:b0:80:6b:4a:d8:ac:7e:
14:fd:5a:34:13:4b:31:77:ec:6f:6d:d8:cd:75:a9:
72:d6:62:36:e6:16:c8:1a:37:83:50:33:c9:cf:20:
c5:b2:f6:5d:3f:1b:7e:95:07:1f:1d:df:75:15:0f:
5d:8b:b2:7b:ef:ee:45:e0:af:83:57:d9:e5:5b:6b:
ef:21:e6:cb:6d:61:1e:de:2e:e7:5d:20:ba:fc:4b:
bc:8e:aa:c6:e4:bb:09:45:95:0a:9d:21:21:ec:cf:
56:2f:e5:2a:b9:4e:5b:c4:f0:10:3b:1c:2d:d6:cf:
a8:86:12:95:fb:56:c7:9e:09:e4:7f:d8:4a:5d:72:
84:73:bf:f2:e5:c5:f5:89:f3:96:d2:80:7a:3b:d1:
17:a0:27:d5:42:fd:1e:a6:dc:03:96:0b:a6:9b:8a:
96:fe:a3:a5:01:4b:18:c7:e0:f7:46:c4:e9:a2:56:
e0:a6:34:9a:83:5c:21:5c:7d:89:cc:46:a3:0d:be:
96:7a:82:ea:87:78:35:37:0c:c7:3a:30:56:85:67:
a6:a6:5d:c7:ff:21:14:ce:06:5d:0f:fc:aa:e0:65:
19:7c:a9:00:cf:67:ff:ab:3a:32:e3:fd:fb:f3:3e:
e8:fa:0b:b4:fb:34:e7:a8:59:f7:5b:e7:2f:0d:e3:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:54:79:87:B3:2A:C0:E7:12:91:17:01:0D:6A:C7:0B:E0:F1:54
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:c3:60:20:63:f4:84:7e:c0:46:1c:02:e5:73:80:2a:e8:
84:83:8a:a1:7b:a8:9b:cc:02:ce:71:74:3e:4c:e1:a9:ca:6c:
5c:53:61:0a:30:92:c2:e7:03:11:3a:86:06:b2:c9:a8:47:71:
7f:be:7e:49:8d:14:b5:c3:48:b8:df:c9:6e:b0:46:01:ce:45:
56:9c:0a:d3:07:50:d0:28:2a:df:12:4a:b2:2c:1a:b5:08:c5:
a3:5d:1c:20:59:9d:05:65:2e:17:34:fa:0c:70:1d:3e:a7:a4:
e1:f8:38:30:f4:09:9b:d0:8f:15:eb:7d:45:b7:a1:ae:1d:0d:
34:a2:19:7d:3a:31:1c:2a:d3:f8:8b:b6:c9:75:5d:b4:62:ef:
8d:50:12:96:0e:a3:27:00:8e:23:f5:47:38:d8:19:e5:62:87:
bf:7d:27:a8:60:25:2b:02:43:66:1b:6b:f0:26:84:69:22:5e:
42:98:ad:07:96:4c:11:29:70:0f:f3:eb:e6:26:ad:ba:a2:e4:
66:be:13:87:b0:1d:b5:b1:4a:0d:85:c6:00:fa:28:8e:b2:86:
80:f0:5a:55:d6:a9:df:17:66:65:f5:84:76:c9:4d:96:98:0b:
2a:d4:dc:e8:d1:42:82:63:9e:90:dc:ee:94:41:38:11:c9:f3:
76:69:bb:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76wJcKpjssEQRPeA2jbOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDJhMzg1YWQ5MzYwMzYxMzUwN2Q4OTU3Nzg4YmYxYmRj
N2UyMWIwHhcNMjUxMDE5MTAwMTQ2WhcNMjUxMDIwMTAwMTQ2WjAzMTEwLwYDVQQD
EyhkNDBjNTQ3OTg3YjMyYWMwZTcxMjkxMTcwMTBkNmFjNzBiZTBmMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGZZSLPywbCAa0rYrH4U/Vo0E0sx
d+xvbdjNdaly1mI25hbIGjeDUDPJzyDFsvZdPxt+lQcfHd91FQ9di7J77+5F4K+D
V9nlW2vvIebLbWEe3i7nXSC6/Eu8jqrG5LsJRZUKnSEh7M9WL+UquU5bxPAQOxwt
1s+ohhKV+1bHngnkf9hKXXKEc7/y5cX1ifOW0oB6O9EXoCfVQv0eptwDlgumm4qW
/qOlAUsYx+D3RsTpolbgpjSag1whXH2JzEajDb6WeoLqh3g1NwzHOjBWhWempl3H
/yEUzgZdD/yq4GUZfKkAz2f/qzoy4/378z7o+gu0+zTnqFn3W+cvDeM3VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQMVHmHsyrA5xKRFwENascL4PFUMB8GA1UdIwQY
MBaAFOPSo4Wtk2A2E1B9iVd4i/G9x+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYt
ZmVkMmRjM2VjZDcxLzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYtZmVkMmRjM2VjZDcx
LzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOzDYCBj
9IR+wEYcAuVzgCrohIOKoXuom8wCznF0PkzhqcpsXFNhCjCSwucDETqGBrLJqEdx
f75+SY0UtcNIuN/JbrBGAc5FVpwK0wdQ0Cgq3xJKsiwatQjFo10cIFmdBWUuFzT6
DHAdPqek4fg4MPQJm9CPFet9Rbehrh0NNKIZfToxHCrT+Iu2yXVdtGLvjVASlg6j
JwCOI/VHONgZ5WKHv30nqGAlKwJDZhtr8CaEaSJeQpitB5ZMESlwD/Pr5iatuqLk
Zr4Th7AdtbFKDYXGAPoojrKGgPBaVdap3xdmZfWEdslNlpgLKtTc6NFCgmOekNzu
lEE4Ecnzdmm7kA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:21 2025 by rpki-client