Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
File: exvey6lE9-4Q6QaRMR_A-ENDa6E.mft (raw, json)
Hash identifier: D6NPS+IlLXMGcs2oa8qNgHz61aPLOpnF3E5ZEQvBo8c=
Subject key identifier: E8:C2:D6:73:A4:1C:C5:45:69:77:E1:2F:85:5A:C4:B6:37:FE:E7:51
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 019923A07D1AEDD81F7D8DEEA701AD323F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
Manifest number: 07A2
Signing time: Sun 07 Sep 2025 10:02:24 +0000
Manifest this update: Sun 07 Sep 2025 10:02:24 +0000
Manifest next update: Mon 08 Sep 2025 10:02:24 +0000
Files and hashes: 1: exvey6lE9-4Q6QaRMR_A-ENDa6E.crl (hash: wFBpUQdP21RZ9xTQIZvF1DjnvLGwlILzWuDnSksHio8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:7d:1a:ed:d8:1f:7d:8d:ee:a7:01:ad:32:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Sep 7 10:02:24 2025 GMT
Not After : Sep 8 10:02:24 2025 GMT
Subject: CN=e8c2d673a41cc5456977e12f855ac4b637fee751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:49:67:c8:d2:2a:24:2c:0b:6e:dc:05:16:
0b:0b:08:6a:5e:ac:2e:d8:23:89:ad:63:b0:fd:a9:
59:d2:b0:06:4e:32:53:21:17:c6:43:82:dc:07:d4:
6a:c7:79:e7:5e:d5:6d:fe:ba:2f:cf:27:b6:e1:4f:
39:b7:1a:50:46:bc:e3:f6:de:dc:af:87:0a:f5:c1:
fa:9f:f2:42:02:d2:fd:00:89:76:e2:01:62:0b:cb:
4f:d9:32:49:8f:64:db:a9:4f:d2:db:41:02:59:c2:
5d:cf:16:4d:81:cc:f2:af:7f:0a:1c:2b:eb:54:ff:
b0:c1:cd:01:4e:3f:e5:70:2a:43:cc:8a:75:5a:f3:
b0:ad:04:05:cf:e7:92:ec:a5:a5:58:a9:5b:78:1f:
bd:4b:1a:a4:94:ed:fa:26:52:6f:bb:af:54:72:8e:
bc:44:44:be:9e:bf:76:fc:d2:29:16:ec:4a:cc:47:
71:ea:9e:a6:f9:be:b4:36:24:e4:c8:63:b8:7e:fb:
18:7b:5c:01:b4:a1:5e:66:8f:2b:ba:45:25:d4:9a:
66:9c:44:76:77:7b:98:eb:1e:55:bd:37:ad:f0:16:
cc:bd:d6:62:49:f4:5c:d9:39:9b:a8:c7:18:2f:a3:
57:d6:6f:d9:e0:df:9d:3b:1b:14:7f:7b:d3:ce:59:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:D6:73:A4:1C:C5:45:69:77:E1:2F:85:5A:C4:B6:37:FE:E7:51
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:89:6a:ec:e6:66:30:00:cd:f8:24:30:73:30:67:20:ab:6d:
7c:aa:43:5f:9f:a0:58:6e:8d:7e:b7:04:60:65:74:ab:92:cf:
36:b3:e4:0a:ed:99:83:10:9b:56:b3:1c:7d:9b:e7:a0:fb:d3:
76:d8:77:ec:19:a6:13:8d:7b:8c:1e:ff:f7:87:9a:98:32:67:
e7:31:60:e0:5c:ba:a6:30:dc:c9:50:82:80:66:65:7d:c8:03:
0b:be:25:92:7c:b4:80:e7:4d:53:79:91:83:91:27:ab:a2:6a:
c7:24:21:e2:a0:8c:cb:97:11:30:ac:08:5a:01:1a:82:5d:15:
06:23:df:1a:df:fb:47:f7:d6:1d:c3:e8:4f:44:ab:16:22:9a:
4e:9b:03:07:9e:4c:0c:ab:3e:2d:2c:02:c6:36:35:03:ab:5d:
6e:57:65:02:44:76:38:80:d6:4d:0c:2c:27:8d:92:d7:96:fa:
48:37:c0:2a:59:3f:27:85:ac:7f:fb:bd:f8:96:71:31:7e:28:
0f:f0:e4:75:c2:3d:e3:86:8e:c7:c1:85:0b:ff:75:dd:c1:0b:
68:4a:dc:39:71:81:05:d4:9e:a9:25:d7:c1:80:c1:f5:95:8f:
db:74:89:29:1f:3a:7b:de:bf:b5:2b:f9:74:f9:a6:84:00:2a:
bb:1c:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:32 2025 by rpki-client