Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: VRUFqrijZnHmkxFZT9q6NY9QVliyOzBxLv/6DsJz6D8=
Subject key identifier: B0:3A:0E:53:45:B8:ED:22:A4:62:66:7F:39:6B:0E:96:3F:19:DB:8B
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019A71B84777A713C35E104E8E9C5AB775CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0FF2
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: RSM+9ZsEQDf7dlg6aowO4SSEihD2U7KjfxqX467WK5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:47:77:a7:13:c3:5e:10:4e:8e:9c:5a:b7:75:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=b03a0e5345b8ed22a462667f396b0e963f19db8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:5c:49:1b:08:fc:32:7f:a0:c6:9e:0d:6b:
f0:de:ea:74:af:c6:29:3b:c9:ad:d1:4a:84:bb:76:
b9:88:bc:2c:48:ab:61:98:b7:a6:07:e0:77:4b:4a:
74:39:fd:c9:39:59:58:18:a2:7f:7c:c4:ba:d3:fc:
45:5e:30:6b:3d:51:54:08:3a:3f:be:fa:bf:ea:a5:
b1:3d:01:ec:a8:f1:0c:c4:cc:5c:c8:e2:1f:9d:48:
c5:80:77:72:37:0b:55:08:6f:9f:fd:c9:20:a1:b7:
29:1b:7b:34:00:95:40:f5:63:b4:c1:3c:5e:12:0a:
61:b1:57:d0:53:fb:4e:26:1d:5a:cd:13:d7:08:9d:
cd:f4:7c:14:ef:98:d3:ee:66:18:59:3f:95:fa:92:
33:c9:68:9f:43:10:92:62:2c:8f:93:22:95:4d:d3:
09:f2:d5:66:ee:b5:33:d4:f1:5f:22:1e:ca:b7:9c:
ff:6b:61:f3:a6:f3:26:5a:c7:0a:f2:42:6e:77:6f:
61:eb:06:48:d2:d6:ad:40:86:8c:bb:b7:f9:ea:15:
38:e4:cc:13:85:05:08:05:24:da:0f:77:fc:33:de:
13:a3:46:20:fa:36:67:47:a8:07:d8:25:c4:06:a1:
7b:1c:f4:83:7d:0a:6b:1d:9a:29:c0:cc:dd:65:2b:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:0E:53:45:B8:ED:22:A4:62:66:7F:39:6B:0E:96:3F:19:DB:8B
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:b4:31:f3:b3:3d:ce:86:0f:ca:57:50:33:a7:03:2a:06:
f3:cc:73:10:74:40:87:b0:ad:16:b1:b2:97:6c:62:77:cc:64:
17:24:34:0b:26:6c:68:dd:02:c6:87:35:69:d8:d9:7b:9a:b6:
60:be:4c:0c:41:d2:50:04:4f:6a:ff:9e:f8:f4:1a:bb:53:46:
f3:bd:e9:30:5b:9f:9d:e3:4b:6e:70:ae:a2:1d:74:9a:97:f2:
63:e8:78:07:5f:e7:0a:8e:94:3b:e1:8c:45:09:d2:da:d5:03:
5f:21:e1:cd:8f:a5:5b:4e:e6:1f:ae:36:83:ed:4b:36:d5:a8:
08:67:c0:9b:ca:5b:13:88:e2:b5:da:79:a1:62:56:d7:3a:1a:
00:43:e4:6a:f6:b5:db:ff:ce:1f:f2:65:cb:f8:4b:af:3f:74:
42:a9:55:20:6f:96:c3:85:a2:7e:80:05:04:2c:25:02:42:74:
9d:5e:77:56:56:f6:77:f7:50:f1:63:2d:7f:13:96:dd:78:fa:
63:ba:5f:20:d6:70:fb:27:03:77:91:d2:fa:b6:93:e0:9b:37:
3a:2e:6a:a2:87:11:42:d6:6b:7a:98:d2:e5:7b:f3:bf:f9:a8:
3e:4c:ed:30:28:c2:f1:04:87:ec:df:a2:30:4f:ff:8e:92:55:
e4:db:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:45 2025 by rpki-client