Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: CcqU0GlBuPJVOID92ceipR81nSkQySSMWLYLBlwiriw=
Subject key identifier: 72:71:33:0F:C5:CF:B3:1E:43:85:50:8E:F8:F6:7A:9D:8C:2C:8F:97
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 019923A0D0B1EAED807C4A103699D274493E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0AF8
Signing time: Sun 07 Sep 2025 10:02:45 +0000
Manifest this update: Sun 07 Sep 2025 10:02:45 +0000
Manifest next update: Mon 08 Sep 2025 10:02:45 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: HI5WNkgBh3OfsupO/1jJLXOCCOu4gtLSlrccSghBXYo=)
2: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (hash: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d0:b1:ea:ed:80:7c:4a:10:36:99:d2:74:49:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Sep 7 10:02:45 2025 GMT
Not After : Sep 8 10:02:45 2025 GMT
Subject: CN=7271330fc5cfb31e4385508ef8f67a9d8c2c8f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:5c:48:5a:f3:67:e0:08:6f:8e:2a:c8:f6:
5d:6b:b8:a1:cb:5f:28:53:6c:f2:7f:79:09:50:8f:
56:c1:c2:8a:c5:da:2f:62:05:b5:ff:f8:13:d0:0b:
0a:4d:38:35:39:f8:52:e9:31:e4:1f:ba:26:1c:db:
f9:cf:96:c4:1f:bc:fb:e7:4a:bd:e8:fd:4c:00:33:
72:a5:d7:3a:31:06:37:42:e0:91:d2:ce:b8:bc:45:
9a:59:6c:db:fe:f4:5a:e0:35:5c:c3:98:13:f7:63:
1e:78:32:d4:ad:80:3e:ea:c7:96:56:9b:f2:34:67:
6a:0d:03:7d:03:7d:de:59:69:52:9e:19:8a:51:39:
0d:29:05:76:a9:9a:fa:90:33:45:13:46:50:31:ad:
34:d7:bf:e9:ed:be:0d:ad:88:2a:e4:67:90:79:ca:
9f:71:d3:ef:73:9b:4e:a7:85:cd:91:d3:1b:28:8d:
2f:2d:c6:cf:3f:3b:b2:41:ce:15:9c:b1:0f:11:4a:
8d:a0:33:cc:73:aa:88:7f:5f:8b:b9:f3:3e:cb:69:
ba:63:8b:74:74:fe:8b:6e:a2:47:cf:94:fb:c0:4d:
c2:a8:14:e4:18:5f:a4:b1:11:02:a2:b9:d3:f9:25:
f3:ba:0a:ca:d9:6d:0f:3c:25:ca:06:0a:53:fe:3f:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:33:0F:C5:CF:B3:1E:43:85:50:8E:F8:F6:7A:9D:8C:2C:8F:97
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:77:c3:e8:04:d7:11:b3:ea:5b:96:4b:35:38:d5:34:ed:96:
d0:44:26:5c:e7:8d:90:0e:76:69:3a:9b:c4:40:94:89:13:a0:
9e:f5:16:24:9b:0c:9a:ff:0f:cd:0d:67:70:4c:20:da:e5:b6:
b8:ec:1f:20:df:0e:83:fc:9f:1a:22:c7:49:14:f1:22:73:ec:
b2:d3:1d:a9:0f:fc:21:1b:18:05:3f:a2:6f:9d:56:8a:d8:7c:
ac:b8:b1:19:62:41:e3:6f:0a:76:00:95:2a:bd:5a:36:5d:d3:
f6:a1:f6:e4:22:c5:ae:c4:7c:e5:6f:a3:2c:b4:ab:b1:56:ce:
fe:ac:34:cf:d7:3b:7f:90:c0:7c:8b:d1:dd:01:7b:45:d8:1f:
d3:cc:08:d9:95:31:4b:76:e7:63:e9:f0:30:04:ea:09:a1:6c:
5a:27:92:b1:34:7b:86:bf:2d:11:3e:d7:a3:4d:0b:e6:7a:34:
d5:de:0f:c7:dd:05:68:eb:0c:8b:d8:a9:94:28:ea:ac:74:bb:
f0:11:ff:6a:44:88:31:d1:9b:99:6b:4c:ff:60:d4:bf:ff:78:
5f:0a:b9:91:dd:95:ae:1d:4e:64:ce:18:49:51:41:5e:d9:98:
bf:33:b8:32:92:85:34:18:b0:51:c9:40:d7:7b:43:57:69:4a:
e3:4f:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:09 2025 by rpki-client