
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier: o+WJObJbhJdki6bEqHdm6pZQox3f3t9vu3RxnV4U3Pk=
Subject key identifier: E3:EC:26:42:E3:07:35:DB:F1:35:82:75:81:6F:04:FB:9E:8A:8F:C4
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial: 01967C0E261A4DB2477FA47F96DBA1E3AA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number: 2F
Signing time: Mon 28 Apr 2025 11:00:24 +0000
Manifest this update: Mon 28 Apr 2025 11:00:24 +0000
Manifest next update: Tue 29 Apr 2025 11:00:24 +0000
Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: hI/ZHSXbqNcgzP53ROOZFASUSoVqOq8QaXR/aLart2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:26:1a:4d:b2:47:7f:a4:7f:96:db:a1:e3:aa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Validity
Not Before: Apr 28 11:00:24 2025 GMT
Not After : Apr 29 11:00:24 2025 GMT
Subject: CN=e3ec2642e30735dbf1358275816f04fb9e8a8fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:ad:18:c0:ea:34:a6:5f:2f:e2:70:7d:c8:
e4:59:ba:a1:e3:74:d4:6b:d0:d4:44:17:b2:f9:c9:
9e:d1:08:29:79:d4:96:2b:df:b0:7f:f3:90:b1:3d:
23:de:47:82:43:24:0f:29:63:ec:11:a5:d2:8f:ef:
c0:07:64:ef:8e:c1:0e:a3:fd:de:59:1d:1a:da:81:
59:ff:53:0f:e9:0d:79:56:45:dd:d2:e8:1d:60:f2:
d2:fc:a0:4e:b9:0b:d0:fd:ba:ff:0e:cb:97:e5:6f:
84:27:36:8b:8e:03:04:c0:2e:fb:49:4a:93:64:8f:
bd:d3:9d:f3:47:fa:b1:bf:a1:6c:c7:e8:76:8c:91:
77:98:b2:32:61:15:1b:85:00:96:09:f9:9d:86:bb:
82:b3:c7:a8:e8:19:56:04:58:e7:91:81:fb:ad:45:
c1:d8:54:f2:7b:17:de:2f:d1:8a:0b:2d:05:47:60:
50:f2:d4:11:6b:68:6c:8f:e7:8a:0e:df:38:7a:de:
eb:0b:26:f9:03:9f:84:98:b9:d3:54:8f:80:9f:8a:
2f:5c:26:a5:f7:d8:11:f6:99:66:91:5e:d4:c5:d5:
63:65:b0:86:d8:ce:d9:54:d8:8e:1b:04:c5:1c:fe:
1e:57:bc:8a:1c:ed:fa:7c:44:53:25:c0:fd:d9:01:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:26:42:E3:07:35:DB:F1:35:82:75:81:6F:04:FB:9E:8A:8F:C4
X509v3 Authority Key Identifier:
keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7a:e5:e4:d2:f4:1d:64:ca:5f:6f:95:be:00:78:69:30:c3:
7d:1b:49:e3:d6:5f:3a:ee:a2:eb:0f:02:28:40:43:74:52:82:
49:97:9b:12:5f:fd:d2:7f:d3:36:9b:a6:63:b3:15:b4:61:9c:
e4:fa:df:d3:38:90:ec:79:63:af:7d:52:8b:1b:35:28:99:cc:
34:32:87:41:ca:e9:ac:66:65:2a:b1:e5:d3:7c:d5:6c:b3:57:
9e:af:e1:38:03:c6:d8:a1:35:28:1e:54:d1:39:05:9e:a4:76:
f7:86:7d:65:b8:26:20:6e:b6:d2:70:41:81:38:22:73:b5:7a:
e1:c3:ea:2c:61:a2:80:04:9e:9d:8f:ca:ab:da:87:43:ee:76:
b3:c7:23:f1:41:d0:21:a7:28:f5:05:7b:83:a6:4e:44:84:b5:
cc:f1:00:c6:86:f0:71:c1:43:40:b8:fe:10:c2:78:3c:05:a6:
05:d9:c1:11:41:db:7f:d1:8e:17:bb:7b:80:a2:9d:37:6c:ce:
33:c9:76:ca:5e:54:93:c6:0d:27:ff:5e:eb:7f:26:c4:70:54:
65:12:98:50:31:d4:69:9a:35:ad:87:17:09:51:80:84:18:b8:
63:1f:68:d2:70:c5:30:fa:87:84:7e:ec:af:79:68:0f:60:5d:
30:13:a3:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8DiYaTbJHf6R/ltuh46pyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YTNiZDE3MDhjNjVkZWE0ZWU5NDE4NDljNDZkYjQzZTY3
OTEyYjkwHhcNMjUwNDI4MTEwMDI0WhcNMjUwNDI5MTEwMDI0WjAzMTEwLwYDVQQD
EyhlM2VjMjY0MmUzMDczNWRiZjEzNTgyNzU4MTZmMDRmYjllOGE4ZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMqtGMDqNKZfL+JwfcjkWbqh43TU
a9DURBey+cme0QgpedSWK9+wf/OQsT0j3keCQyQPKWPsEaXSj+/AB2TvjsEOo/3e
WR0a2oFZ/1MP6Q15VkXd0ugdYPLS/KBOuQvQ/br/DsuX5W+EJzaLjgMEwC77SUqT
ZI+9053zR/qxv6Fsx+h2jJF3mLIyYRUbhQCWCfmdhruCs8eo6BlWBFjnkYH7rUXB
2FTyexfeL9GKCy0FR2BQ8tQRa2hsj+eKDt84et7rCyb5A5+EmLnTVI+An4ovXCal
99gR9plmkV7UxdVjZbCG2M7ZVNiOGwTFHP4eV7yKHO36fERTJcD92QHOWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPsJkLjBzXb8TWCdYFvBPueio/EMB8GA1UdIwQY
MBaAFOejvRcIxl3qTulBhJxG20PmeRK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQt
NzQ0MGFkMmNlN2E0LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQtNzQ0MGFkMmNlN2E0
LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXrl5NL0
HWTKX2+VvgB4aTDDfRtJ49ZfOu6i6w8CKEBDdFKCSZebEl/90n/TNpumY7MVtGGc
5Prf0ziQ7Hljr31Sixs1KJnMNDKHQcrprGZlKrHl03zVbLNXnq/hOAPG2KE1KB5U
0TkFnqR294Z9ZbgmIG620nBBgTgic7V64cPqLGGigASenY/Kq9qHQ+52s8cj8UHQ
Iaco9QV7g6ZORIS1zPEAxobwccFDQLj+EMJ4PAWmBdnBEUHbf9GOF7t7gKKdN2zO
M8l2yl5Uk8YNJ/9e638mxHBUZRKYUDHUaZo1rYcXCVGAhBi4Yx9o0nDFMPqHhH7s
r3loD2BdMBOjNw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:28:26 2025 by rpki-client