Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File: 564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier: 4gHZX8TJVwh88FeohbKh3rMW1VSrQ0oPcZE/gXV7lqw=
Subject key identifier: E8:4C:1C:22:0D:02:75:C1:97:1D:06:38:DA:68:B8:F5:76:0E:BE:CF
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer: /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial: 019A71B8F2A80AFD0D56AE5CAB4B8CA2A55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: vx9weA/DDVVDBJ3P1aa5XjVVEannEuv0JtmpNCEud6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f2:a8:0a:fd:0d:56:ae:5c:ab:4b:8c:a2:a5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=e84c1c220d0275c1971d0638da68b8f5760ebecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:30:c6:7e:12:5c:42:9b:ed:82:bb:cf:8c:
c0:18:1e:2d:8a:0f:c2:69:d3:0d:4a:27:6a:41:f9:
64:4e:5f:b7:6b:fa:bc:c5:92:b5:1e:3b:d6:2a:aa:
0d:b3:42:08:91:0f:22:8d:d3:70:4b:52:d5:da:a9:
7d:79:63:9e:e3:73:9b:67:16:e1:db:af:df:25:b7:
da:2a:b2:5b:84:6e:48:57:4d:25:e7:97:cb:51:25:
95:74:29:30:c7:d9:3b:a6:27:ea:2c:17:e2:bc:4a:
a2:0f:ab:e2:68:be:15:21:54:3f:f4:a5:19:c3:1e:
98:80:97:4b:ad:60:03:3f:5d:59:0e:1f:bf:22:e9:
da:b7:5d:13:a8:72:cf:82:d6:00:8f:c8:76:f2:8f:
97:0c:f6:37:af:0a:f4:2e:2d:64:40:b8:b3:68:c5:
60:f7:f3:19:94:17:87:ef:06:aa:c7:2a:ef:14:d4:
a3:08:22:41:39:2b:2c:26:91:73:77:d4:24:dc:21:
de:12:02:6e:92:c2:72:a9:ba:b9:87:ff:d1:ed:fc:
40:7a:7c:f7:d7:46:46:64:8d:45:ee:c0:7f:98:02:
d2:86:4d:72:81:a8:2b:6a:4b:2a:81:fd:7d:ee:a7:
e2:f8:dd:d5:05:16:19:d1:09:ad:98:f6:d2:e6:1b:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:1C:22:0D:02:75:C1:97:1D:06:38:DA:68:B8:F5:76:0E:BE:CF
X509v3 Authority Key Identifier:
keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5e:9e:4e:a9:7a:88:9f:68:a8:19:2e:3c:bd:7e:fe:26:1c:
ea:19:b5:24:fd:74:c1:52:58:f5:af:6a:a3:3e:71:c1:d8:35:
c7:08:42:be:3f:e6:88:f6:ac:1d:4c:bf:7a:d0:e5:5e:1a:68:
00:7d:4f:ac:5b:01:31:65:b6:67:0d:9d:bf:62:d4:7c:4f:81:
d7:91:94:e5:bc:a5:95:ac:fd:de:2f:93:ba:fa:3a:48:bc:0c:
58:b6:ba:46:64:c9:ef:e6:d8:e5:e1:7b:40:67:9d:a3:87:ac:
89:40:5f:b1:47:26:4c:70:21:ad:00:20:78:96:c9:d3:eb:15:
0d:62:7f:b6:2c:d4:9b:ba:5c:4e:b9:52:80:65:da:01:8a:b7:
95:fc:02:61:04:4e:27:76:ad:65:aa:72:e0:5a:0f:d1:99:a8:
54:39:fe:5f:ab:50:7b:1b:c2:0b:78:18:18:2d:81:16:ce:b2:
da:fe:ff:a5:14:c2:23:2a:f7:87:87:7d:02:cc:a0:96:8b:c8:
c9:81:14:9d:8e:db:67:9a:1c:9e:34:9e:69:17:35:2f:1d:8f:
7e:b5:50:6f:e6:0c:6a:28:c1:f8:bd:f7:72:9e:ef:47:0c:04:
de:72:b2:35:b5:aa:65:89:1a:5b:17:16:35:48:7d:1a:fa:99:
e0:08:21:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPKoCv0NVq5cq0uMoqVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwYmM2YjU2NGE1NzNlMzdiOWQ3OTdjYjc1ZWJiMWI3
NmUwMDEwHhcNMjUxMTExMDcwMjE3WhcNMjUxMTEyMDcwMjE3WjAzMTEwLwYDVQQD
EyhlODRjMWMyMjBkMDI3NWMxOTcxZDA2MzhkYTY4YjhmNTc2MGViZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGowxn4SXEKb7YK7z4zAGB4tig/C
adMNSidqQflkTl+3a/q8xZK1HjvWKqoNs0IIkQ8ijdNwS1LV2ql9eWOe43ObZxbh
26/fJbfaKrJbhG5IV00l55fLUSWVdCkwx9k7pifqLBfivEqiD6viaL4VIVQ/9KUZ
wx6YgJdLrWADP11ZDh+/Iunat10TqHLPgtYAj8h28o+XDPY3rwr0Li1kQLizaMVg
9/MZlBeH7waqxyrvFNSjCCJBOSssJpFzd9Qk3CHeEgJuksJyqbq5h//R7fxAenz3
10ZGZI1F7sB/mALShk1ygagraksqgf197qfi+N3VBRYZ0QmtmPbS5hsFrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhMHCINAnXBlx0GONpouPV2Dr7PMB8GA1UdIwQY
MBaAFOeuC8a1ZKVz43udeXy3XrsbduABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMt
OWIxMDdiZWY5MDMwLzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMtOWIxMDdiZWY5MDMw
LzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ16eTql6
iJ9oqBkuPL1+/iYc6hm1JP10wVJY9a9qoz5xwdg1xwhCvj/miPasHUy/etDlXhpo
AH1PrFsBMWW2Zw2dv2LUfE+B15GU5byllaz93i+Tuvo6SLwMWLa6RmTJ7+bY5eF7
QGedo4esiUBfsUcmTHAhrQAgeJbJ0+sVDWJ/tizUm7pcTrlSgGXaAYq3lfwCYQRO
J3atZapy4FoP0ZmoVDn+X6tQexvCC3gYGC2BFs6y2v7/pRTCIyr3h4d9AsyglovI
yYEUnY7bZ5ocnjSeaRc1Lx2PfrVQb+YMaijB+L33cp7vRwwE3nKyNbWqZYkaWxcW
NUh9GvqZ4AghOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:35 2025 by rpki-client