
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: LRK5xF6dPmh+GoOCZTbQAdd9PL0efSRAjpP55YU/QEg=
Subject key identifier: 60:5E:44:53:1A:CF:26:61:BE:48:F3:29:D5:46:91:99:A5:F5:AE:C7
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 0199239F03BEC3313035A21B1B8B2DF0C684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0F45
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: dONx1lnI9Cn/6cB2G/OHHvShXFtJAXpVp3CryNIP5do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:03:be:c3:31:30:35:a2:1b:1b:8b:2d:f0:c6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=605e44531acf2661be48f329d5469199a5f5aec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:dd:5f:f3:0a:e2:2b:43:48:73:7a:45:9c:
da:89:63:38:ea:ae:3b:a2:6b:21:db:ac:84:32:55:
8c:4a:16:c0:47:4a:f8:4a:8e:8b:39:78:c0:96:3a:
b2:58:19:2a:40:ca:82:5e:2e:d0:7f:0f:fd:d7:b3:
00:a7:42:47:6b:e5:88:e9:90:45:5f:f6:e5:c3:e8:
8d:ba:9d:95:4d:ce:40:67:4b:12:7d:fc:a2:47:d0:
66:2e:94:68:c2:26:b7:a9:a9:01:dc:14:42:a5:d4:
99:13:0b:b1:38:94:5b:4d:b2:d8:07:93:e7:cb:99:
a5:a1:06:cb:89:54:f4:2e:e1:1d:57:5b:b8:49:71:
5a:09:be:56:38:0c:a0:c5:fd:d2:b5:08:80:ba:b1:
e6:72:1c:a9:87:0c:19:f7:3d:a2:b7:0b:39:32:8b:
c1:05:16:ec:ba:3c:67:18:62:0e:61:d7:20:87:d5:
80:bc:06:87:a2:78:41:db:b7:f6:5b:c7:ca:ff:94:
54:5d:77:a6:a6:a2:91:92:59:ff:e6:bb:2b:a2:59:
a5:72:30:a2:d0:49:00:72:71:de:58:7f:0b:ab:b0:
99:f6:88:d2:65:fa:66:bf:5c:aa:4f:04:dd:2e:08:
3b:a8:7a:9c:cb:cd:3d:54:30:4d:b7:8f:28:3e:9a:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:44:53:1A:CF:26:61:BE:48:F3:29:D5:46:91:99:A5:F5:AE:C7
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f3:ee:bd:ab:97:16:e5:d5:24:2f:3c:87:72:27:39:92:ae:
c5:a9:6f:74:04:47:f7:65:45:2b:2f:35:2d:15:34:82:8d:0f:
b3:58:a8:d6:26:53:f2:ba:0c:2a:7e:26:c3:97:f7:a6:51:31:
fb:dc:81:a9:01:c7:e1:e9:ea:7a:e9:03:55:e7:88:ae:cc:0a:
4e:42:1c:ae:b8:0d:f4:59:8c:dc:18:9c:21:f6:a2:79:ca:3b:
97:ab:1d:58:14:32:b4:46:fe:fe:de:db:10:6c:97:24:70:33:
e8:94:d7:e9:ad:b1:42:fb:43:fd:fd:91:6c:50:32:be:ab:5e:
3c:6f:48:36:39:33:fa:18:0a:0c:bc:df:30:34:d1:26:2b:02:
46:5b:9b:ba:03:7d:07:44:29:ca:0e:d6:25:42:c8:35:5b:0b:
e6:80:7c:47:1e:53:a2:c5:d7:a8:4e:ac:e4:90:0f:8f:14:9f:
e7:d4:80:4f:c5:66:48:cd:3b:1e:29:b6:5c:27:59:c2:21:c9:
9d:ea:2c:66:61:29:b0:e7:a1:1c:dc:fb:e5:d6:58:7d:92:75:
f2:c8:83:d0:8c:c8:86:df:c5:e4:fb:96:6d:32:99:5f:2c:a8:
b6:f8:a6:c9:c0:70:ec:6a:6c:7c:6d:5c:eb:8b:31:0e:a3:8e:
f0:a2:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:04 2025 by rpki-client