Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
File: exvey6lE9-4Q6QaRMR_A-ENDa6E.mft (raw, json)
Hash identifier: cuaO7rlLc+KBXvIolWg/RhawDuyycvIOghz3kghHE8w=
Subject key identifier: 12:9C:42:1C:6B:73:A7:23:C3:FC:E0:E1:06:FC:CB:C7:DF:66:22:D6
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 0199FBEAAFF56E3B6F805A77C48DFAFC2030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
Manifest number: 0812
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: exvey6lE9-4Q6QaRMR_A-ENDa6E.crl (hash: 5lFZkv1MOep5drAtZzPBUw4cm7we2cc5aSb6J6Cc/64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:af:f5:6e:3b:6f:80:5a:77:c4:8d:fa:fc:20:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=129c421c6b73a723c3fce0e106fccbc7df6622d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:76:f7:20:b0:eb:c3:2f:e5:b5:e6:98:ca:
82:49:2b:87:89:65:ab:4d:db:76:c5:ac:0d:b2:a1:
1e:a1:b1:dc:a6:32:e9:56:18:83:11:b1:8a:76:76:
b9:1a:a8:27:1e:e3:e8:4a:dc:28:e2:b3:7b:44:17:
4e:4d:9f:a9:f2:ed:51:56:e2:f8:f3:3f:ff:7a:d2:
ac:dc:91:4d:46:e0:fe:35:64:73:c7:58:f4:74:69:
7f:b5:c9:ec:33:e2:80:6b:bb:8a:fb:0f:43:15:66:
37:a6:bb:e8:3a:e5:c7:30:15:5d:71:5c:c3:92:b2:
96:bb:9c:e9:99:31:d8:fa:56:81:84:43:86:ca:75:
6d:bf:9c:2b:68:a7:e8:ea:dd:46:5f:3a:72:8a:07:
ae:a8:ce:27:55:ad:9d:a7:58:8d:f0:5e:d4:32:2a:
cb:40:cd:d5:2e:c2:b7:7f:8d:87:ab:1b:b9:41:e8:
92:59:f8:84:01:67:b8:d6:df:e7:49:d6:37:f4:a1:
69:f6:fb:2b:01:8e:94:f1:86:c8:2d:60:9d:5c:c9:
61:0d:9e:3b:b4:ae:c9:1c:9c:6c:61:67:05:37:ff:
32:86:43:3d:2a:12:5a:58:b2:20:b9:92:1b:85:8e:
08:e2:92:6c:87:96:24:4e:68:d7:53:2c:50:50:a9:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:42:1C:6B:73:A7:23:C3:FC:E0:E1:06:FC:CB:C7:DF:66:22:D6
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:8a:3f:00:81:47:ba:99:a6:64:40:b5:97:e0:6b:65:07:7b:
c9:01:de:69:17:35:c3:ef:a2:f1:85:31:e3:88:f6:5f:65:65:
b9:ae:64:2f:29:db:7a:09:af:27:e7:28:d4:0a:0f:de:48:48:
61:78:84:b4:09:fa:ae:22:b2:6b:97:48:47:27:17:75:ac:be:
34:25:ee:3f:8e:e2:bd:37:d7:c2:e4:c9:9f:f5:1f:3e:0f:3e:
f3:52:20:0a:f0:bf:19:3b:a3:78:10:a3:03:7b:00:79:f2:8a:
5d:c8:3f:c3:15:49:19:53:af:dd:7a:c9:b5:26:62:63:9f:b6:
3b:76:55:d4:e4:fe:f3:74:3e:d4:6a:18:d8:1c:14:a7:98:96:
e8:a0:07:f8:b5:29:b0:1c:a0:a7:87:41:bc:c5:73:1c:3f:8a:
32:67:f2:d4:97:0a:37:c0:f5:c2:5a:2b:7c:5d:3b:30:b2:13:
3b:c0:df:44:b4:f5:31:19:5b:a6:d8:2b:2b:a1:10:ed:e6:22:
df:b0:df:76:8e:6d:c1:1d:44:5b:69:e3:a8:37:47:7a:48:47:
b9:84:2d:73:99:5d:37:35:99:8f:b7:04:5a:86:c0:42:fc:73:
4f:f4:ac:0c:c9:82:bf:89:82:4c:95:2b:09:14:8b:eb:7f:72:
8e:0c:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:59 2025 by rpki-client