Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
File: exvey6lE9-4Q6QaRMR_A-ENDa6E.mft (raw, json)
Hash identifier: GCf6HTosdaibUo6HEsXcnWayT/X+CvKZIXVUHc7EYpA=
Subject key identifier: 8C:5C:49:7A:B3:18:D5:A1:AB:21:41:8D:F0:06:A9:35:26:05:C6:D5
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 0198D660F51B2DE65CD4A7D7AFBBE7C42D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
Manifest number: 077A
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: exvey6lE9-4Q6QaRMR_A-ENDa6E.crl (hash: tRnRVDm8W8UVS1/2w6oECyUG0ZXYw900Oh6pNSLaZAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f5:1b:2d:e6:5c:d4:a7:d7:af:bb:e7:c4:2d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=8c5c497ab318d5a1ab21418df006a9352605c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:96:31:d5:7c:42:24:95:03:47:f8:21:5f:
51:83:09:4c:3e:19:c7:fd:75:73:f0:42:53:f9:d1:
a7:7d:bd:46:35:fe:08:0c:96:0c:7c:37:76:d6:93:
aa:37:d8:aa:de:4b:e4:1b:c5:95:cd:c9:c9:86:39:
be:d9:25:b4:33:74:32:a8:78:3e:1c:b4:63:b7:9f:
0e:a1:b5:70:3d:6c:d1:f6:14:7c:a8:5d:26:ba:54:
f0:7b:ed:84:00:7e:d3:e8:8c:93:8d:a8:48:aa:e5:
0b:e0:b9:bb:e3:43:a3:a0:ea:cb:e4:0c:b4:4f:5e:
54:a6:27:4b:68:f8:cd:7e:4a:3c:aa:04:2a:b9:ff:
a1:46:58:a3:44:10:83:3b:8b:ae:08:50:c5:0c:8c:
3e:49:56:45:fe:0d:0c:60:f8:89:08:73:49:d3:bc:
ef:06:6d:ff:40:af:7c:e4:db:b2:bd:d9:fd:51:d5:
f6:22:04:d1:22:f3:b3:4f:bc:a1:b8:d2:af:4b:3b:
aa:1d:c2:e9:09:a5:7c:8b:50:4a:13:a7:a0:05:ff:
d3:22:33:52:c3:41:e2:be:0b:b0:28:58:74:59:13:
79:4c:e3:ca:c9:ab:3e:11:eb:69:1a:28:5c:1b:e2:
cd:7b:73:25:13:a4:b5:20:73:25:7e:f3:8d:e6:a1:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:49:7A:B3:18:D5:A1:AB:21:41:8D:F0:06:A9:35:26:05:C6:D5
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:19:77:74:b3:0a:c4:21:e1:9b:6f:52:a7:1d:6a:dc:a2:72:
2a:3f:e0:48:47:1c:c5:d2:8c:a5:fe:74:dd:2c:32:98:c6:bb:
64:5a:43:b5:02:0d:51:8a:38:e5:f1:97:40:31:5d:2a:b8:b0:
ea:8a:4a:67:71:bc:c9:d7:ea:65:2b:c6:ab:b7:c8:b3:34:7e:
bf:a4:3f:c2:0c:c3:04:e9:2a:87:80:a4:77:fd:01:ab:f5:34:
b8:9b:81:1c:b0:94:64:96:8d:ac:98:41:2b:d3:aa:9e:5a:6c:
04:bb:72:a2:8c:91:59:ce:92:f1:68:05:58:06:2f:56:70:9e:
2e:66:19:37:3b:90:35:c8:8f:0e:69:d8:34:b8:c3:7c:b6:43:
63:56:a0:a8:4a:f2:be:05:6f:54:37:24:41:dc:e1:e4:de:1d:
ce:90:ac:6c:c8:40:4e:ed:10:85:41:da:b6:97:7b:87:e7:11:
25:a9:b6:8c:35:fa:4c:c0:72:b3:23:50:0e:24:50:b7:c3:40:
1b:b1:23:3d:f1:83:6c:75:9f:7d:dd:85:6d:02:65:88:a2:96:
ec:90:52:0d:35:a4:fa:84:3a:2e:dc:39:10:55:8c:12:de:e8:
89:37:f6:52:6d:84:1b:ac:77:9c:93:91:9e:67:7b:46:89:9e:
e2:cf:72:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYPUbLeZc1KfXr7vnxC0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMWJkZWNiYTk0NGY3ZWUxMGU5MDY5MTMxMWZjMGY4NDM0
MzZiYTEwHhcNMjUwODIzMTAwMjE0WhcNMjUwODI0MTAwMjE0WjAzMTEwLwYDVQQD
Eyg4YzVjNDk3YWIzMThkNWExYWIyMTQxOGRmMDA2YTkzNTI2MDVjNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJSWMdV8QiSVA0f4IV9RgwlMPhnH
/XVz8EJT+dGnfb1GNf4IDJYMfDd21pOqN9iq3kvkG8WVzcnJhjm+2SW0M3QyqHg+
HLRjt58OobVwPWzR9hR8qF0mulTwe+2EAH7T6IyTjahIquUL4Lm740OjoOrL5Ay0
T15UpidLaPjNfko8qgQquf+hRlijRBCDO4uuCFDFDIw+SVZF/g0MYPiJCHNJ07zv
Bm3/QK985Nuyvdn9UdX2IgTRIvOzT7yhuNKvSzuqHcLpCaV8i1BKE6egBf/TIjNS
w0HivguwKFh0WRN5TOPKyas+EetpGihcG+LNe3MlE6S1IHMlfvON5qEzoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxcSXqzGNWhqyFBjfAGqTUmBcbVMB8GA1UdIwQY
MBaAFHsb3supRPfuEOkGkTEfwPhDQ2uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXh2ZXk2bEU5LTRRNlFhUk1SX0EtRU5EYTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iZDRkZTgtODYxYy00NWI2LTg0YzEt
NTc5YjNhODc4MTgyLzEvZXh2ZXk2bEU5LTRRNlFhUk1SX0EtRU5EYTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iZDRkZTgtODYxYy00NWI2LTg0YzEtNTc5YjNhODc4MTgy
LzEvZXh2ZXk2bEU5LTRRNlFhUk1SX0EtRU5EYTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhl3dLMK
xCHhm29Spx1q3KJyKj/gSEccxdKMpf503SwymMa7ZFpDtQINUYo45fGXQDFdKriw
6opKZ3G8ydfqZSvGq7fIszR+v6Q/wgzDBOkqh4Ckd/0Bq/U0uJuBHLCUZJaNrJhB
K9OqnlpsBLtyooyRWc6S8WgFWAYvVnCeLmYZNzuQNciPDmnYNLjDfLZDY1agqEry
vgVvVDckQdzh5N4dzpCsbMhATu0QhUHatpd7h+cRJam2jDX6TMBysyNQDiRQt8NA
G7EjPfGDbHWffd2FbQJliKKW7JBSDTWk+oQ6Ltw5EFWMEt7oiTf2Um2EG6x3nJOR
nmd7Rome4s9y2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:42 2025 by rpki-client