
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier: 4HJUZ/E0WYvwbKAtGlUmr0weQog+q/ynl1V1EGo11G4=
Subject key identifier: B3:F9:B2:16:17:2C:0E:FF:0B:EF:5C:EF:BB:CC:56:D3:F0:1A:BF:0E
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial: 0199FC217A8215354AC9B1117E0AAE43DDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number: 01FF
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: utbYQ8nbW3+ucPwJmd1ec5CxGJ4HDOFZKSyMZ0w/7No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7a:82:15:35:4a:c9:b1:11:7e:0a:ae:43:dd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=b3f9b216172c0eff0bef5cefbbcc56d3f01abf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:f6:a8:91:44:7b:94:c5:58:13:f2:35:0c:
d4:b5:5d:67:ba:8a:b8:33:4e:1e:7c:a8:02:5b:2f:
9e:a9:2e:54:89:c4:38:08:af:a6:47:3e:cd:af:a5:
9c:0e:2f:8a:93:75:df:2d:1c:0e:c6:ba:8a:13:e9:
9a:64:a9:95:7a:db:55:9d:75:a3:61:89:19:3d:5e:
11:85:bd:12:59:8f:ee:b2:3e:10:1a:16:0f:3b:47:
82:dc:14:a5:04:7f:36:41:3d:81:ea:19:1e:e4:5f:
28:d0:b3:98:82:f4:8d:94:e5:50:19:34:57:58:71:
7e:2f:ec:a2:b0:1d:cf:77:c8:70:71:73:47:5d:cf:
1e:a8:05:4f:0c:7f:a8:93:a6:7c:5e:9e:e2:a7:3c:
ec:6c:a1:d1:dc:6f:99:6d:9d:86:5b:13:46:e7:71:
96:78:68:9d:08:8d:8d:86:c6:2d:b2:45:04:87:16:
ff:37:f7:85:dc:34:53:18:5a:83:15:62:6b:e7:b0:
21:4d:a8:38:4d:b3:10:49:4c:65:6c:92:49:05:ff:
ce:2f:a3:6d:72:90:86:49:33:0d:4f:27:29:20:48:
c3:c9:66:3b:c7:8e:d7:6f:75:8e:0c:88:dc:6a:19:
d2:76:a3:70:90:55:67:9a:23:b3:d7:53:2b:b0:47:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F9:B2:16:17:2C:0E:FF:0B:EF:5C:EF:BB:CC:56:D3:F0:1A:BF:0E
X509v3 Authority Key Identifier:
keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a5:40:b1:bf:33:67:d3:83:1d:a0:fe:30:59:46:ea:09:f0:
4a:32:43:01:11:41:6c:ff:f7:f3:ca:e6:52:f2:b1:46:72:a5:
11:c6:8a:24:b8:ab:37:8f:18:52:60:6e:6a:15:41:f3:60:66:
4d:ab:d6:12:48:8b:ee:8e:5a:2d:1b:de:cb:b3:35:04:6b:e3:
0e:00:fc:89:d7:38:05:e5:af:06:2a:d2:37:20:2c:a9:4d:fa:
0e:ec:6b:9a:7f:66:c7:49:70:d7:d3:53:8c:87:88:aa:f8:f4:
a2:c1:c8:7c:d1:5c:f9:66:4a:23:7c:c6:a8:76:35:fd:bb:db:
7b:45:fe:f0:4b:f0:e0:f0:6d:e3:26:ab:3c:5f:90:2f:53:93:
bc:85:58:ac:7c:4b:9c:57:fa:ff:0d:f2:a7:d1:d6:10:e7:23:
0a:b3:d4:8b:d3:94:33:81:74:f9:c5:82:04:fd:52:2c:9d:0a:
18:86:c0:db:31:95:dd:03:5a:54:13:32:03:c1:98:79:ac:36:
d0:cb:9a:f6:af:83:e3:a6:a4:29:0a:3f:1c:83:28:bf:64:60:
8d:ed:0b:59:0e:f6:4c:23:1d:72:8b:30:cd:8a:9a:22:07:cc:
9e:c6:3a:4c:36:1f:92:5e:17:60:99:57:19:11:db:31:12:cb:
ea:7a:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:35 2025 by rpki-client