Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier: L5ss5yqxxQXhyW+cAtZfbUxv62L+/eLjbSlpRDiA93I=
Subject key identifier: 64:7F:4B:E9:98:DF:EC:CB:EE:B1:83:94:78:54:E7:95:DF:85:98:E2
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial: 019A71EEF28B66ABC575D35791074314BC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number: 023C
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: ZA+woteY+TFdh3yXqjEKKfrCoGl2J1Nxr0QvelcNWak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f2:8b:66:ab:c5:75:d3:57:91:07:43:14:bc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=647f4be998dfeccbeeb183947854e795df8598e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:ab:4d:b0:c5:ad:50:c6:d3:80:5f:5b:cc:
d9:69:18:c1:05:76:03:3c:3d:47:b5:58:6e:54:f3:
52:a3:fb:7e:65:45:33:b2:80:54:7e:9f:43:a5:a3:
05:eb:cd:bd:75:ca:59:6c:24:0d:8f:d2:37:89:35:
c1:76:58:28:76:0e:c9:db:bd:d5:67:c4:4e:64:7b:
09:b8:52:96:33:65:22:1b:c9:51:c8:22:eb:c0:80:
29:de:89:b4:87:85:1d:8a:23:9f:03:03:e4:08:b2:
75:1d:05:f8:f8:ec:f0:76:e6:7e:84:0b:1d:b5:00:
2b:ae:03:3f:96:d1:38:76:c7:86:2c:59:61:d4:b4:
82:b7:d7:76:40:7c:00:eb:6d:bb:cf:42:8d:6c:e6:
ba:cc:d4:b1:9d:38:cb:dc:a5:32:e6:97:ae:ad:e7:
0a:e6:23:61:dd:11:4e:9f:70:96:a5:53:01:4b:aa:
8c:ea:bf:ee:85:1d:a2:e7:c8:24:f4:bd:74:36:96:
89:00:d9:8e:5c:c5:59:d2:4c:80:33:29:8f:14:0b:
8c:be:3f:76:a5:a2:56:b3:d5:4a:4c:dc:7e:2f:38:
81:4d:1b:74:ae:ed:70:f6:32:cb:55:20:47:a1:06:
1f:85:d3:05:6c:fb:36:af:71:65:b2:1d:e2:27:64:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:4B:E9:98:DF:EC:CB:EE:B1:83:94:78:54:E7:95:DF:85:98:E2
X509v3 Authority Key Identifier:
keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:69:56:3c:98:8d:c3:71:fd:2e:2a:f8:4d:bc:e0:d2:6d:59:
a3:f6:f5:a5:74:10:98:83:1a:2c:b6:e2:71:87:ab:cb:8b:25:
37:3e:fb:ae:29:9c:04:c9:79:30:6c:09:e9:dc:4a:c7:ea:c1:
e6:be:63:eb:4e:fa:8c:96:53:43:2b:16:12:9b:be:58:0b:f2:
da:3e:8b:ec:c0:0d:6b:05:d2:e7:6a:d6:31:1a:79:ee:b7:b1:
f9:a6:f3:68:df:4b:31:3c:64:77:76:d8:69:73:8a:92:e8:a6:
1f:2c:de:5f:20:bb:7f:b4:99:26:60:c8:fa:74:29:a5:01:d7:
cb:60:ab:24:fd:b9:ce:f3:3a:d1:5a:73:d8:1c:b2:db:e0:85:
c3:70:0c:56:ce:07:75:bf:77:a5:fa:8e:09:a9:c3:62:76:43:
78:b2:bb:66:49:40:b1:ac:7a:3d:16:59:00:be:a1:5d:f3:66:
91:27:b7:f6:98:fe:48:95:95:c4:a9:68:3c:e0:3c:e1:2f:ce:
5e:ed:14:41:1d:ba:39:42:7d:b6:c5:09:14:94:0b:13:51:67:
da:ee:61:2c:02:d8:9c:90:b0:2f:61:09:31:c5:62:d8:14:ee:
27:e9:86:e2:89:fa:0e:bc:21:38:85:0c:1d:d1:b6:6e:52:97:
30:ed:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:59 2025 by rpki-client