Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier: GEpMxbkxL/VJLlNlWrkBO3saOauib5sxnHudp5Ju9R4=
Subject key identifier: BE:0B:61:1B:59:20:BA:D8:EA:57:59:B7:3E:81:B8:8A:1A:00:9E:4F
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial: 019921E7B30D2CB47D5FFEA194C87AD8DE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number: 018E
Signing time: Sun 07 Sep 2025 02:00:56 +0000
Manifest this update: Sun 07 Sep 2025 02:00:56 +0000
Manifest next update: Mon 08 Sep 2025 02:00:56 +0000
Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: pwnntPXSVdF8GiLUeFIxerToGBq0vPKObR1bZEnqmMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:b3:0d:2c:b4:7d:5f:fe:a1:94:c8:7a:d8:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Validity
Not Before: Sep 7 02:00:56 2025 GMT
Not After : Sep 8 02:00:56 2025 GMT
Subject: CN=be0b611b5920bad8ea5759b73e81b88a1a009e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:c4:a4:b7:8f:17:81:ec:f2:1c:c2:c9:c3:
99:12:78:ae:7c:46:5f:f1:78:1b:46:ca:88:36:92:
b6:e8:9a:43:5d:46:5c:92:b0:f6:9f:a7:e0:d6:9b:
33:ef:c5:bb:fd:cf:d3:9f:38:74:74:ad:0f:16:d8:
2f:2d:9a:89:cb:d7:c5:d2:26:91:9e:d2:69:e7:0e:
9e:57:38:9f:7a:d7:8c:ed:5b:13:be:0e:f2:7e:6a:
0c:16:3e:ef:f0:8d:1b:95:17:93:b9:25:26:98:32:
cd:89:51:22:18:20:d1:66:2c:f1:14:74:1b:34:33:
b3:fd:08:b6:10:5b:f5:9d:6d:2f:64:2d:7d:61:3b:
87:6d:60:70:c9:fd:13:c6:31:df:17:94:ce:9c:6e:
ae:64:c2:7e:19:cd:e5:35:f3:b1:3a:06:25:55:4f:
56:03:08:5c:92:e9:2c:3d:af:a3:77:a6:e0:64:71:
bd:f0:4b:37:df:86:b6:f1:4d:ec:0a:8d:2a:63:fa:
c3:10:0f:ef:05:42:62:4c:a0:7a:c0:7f:bc:26:f5:
a3:31:ae:0a:52:83:2f:a9:9a:50:ae:a4:d1:82:54:
68:f5:39:4a:7e:ff:8d:18:45:00:f1:cd:d4:67:aa:
c6:ed:5c:b0:2e:60:47:f3:8f:69:1d:fa:1b:4f:3d:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0B:61:1B:59:20:BA:D8:EA:57:59:B7:3E:81:B8:8A:1A:00:9E:4F
X509v3 Authority Key Identifier:
keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ac:97:35:52:79:b4:4d:fa:18:da:a3:44:c3:79:24:49:0a:
c9:9a:2b:10:84:d7:f5:46:25:d1:f4:51:0d:7e:b4:f6:21:c7:
ee:17:81:d8:53:18:16:dc:f0:e4:8b:35:d9:96:e4:18:27:5e:
0d:e5:e2:dc:f8:d0:18:d7:2b:0a:a2:b9:75:13:bb:77:df:7e:
57:c2:61:d3:76:d4:59:7c:21:76:a3:47:73:2b:15:56:df:c0:
ab:c3:89:fe:e3:4d:04:7a:99:01:94:fc:12:56:d4:b2:76:49:
9d:13:93:85:63:89:db:05:95:67:43:0c:2c:f5:5b:68:f9:d9:
ba:c9:78:5a:fb:93:19:1d:97:55:83:40:49:09:14:b4:29:3c:
bb:f0:42:6b:dc:e6:9d:d0:78:ed:af:09:62:f4:ed:c8:34:46:
32:75:dd:d3:73:b0:ef:43:c6:f2:6b:74:2f:a2:cf:5f:f4:77:
dc:b6:46:44:82:f6:18:e0:a6:8d:e9:69:02:8b:f0:37:72:7c:
88:fd:b2:4e:24:d4:c2:ce:b6:99:0a:d0:fb:a5:4c:70:4b:a3:
0e:06:19:b0:1f:f9:7a:63:f4:00:b8:17:ce:1e:3f:59:34:5e:
d6:aa:97:cc:03:c3:77:81:be:52:d7:f3:45:1b:6f:c7:82:6f:
2c:97:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:10 2025 by rpki-client