Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
File: exvey6lE9-4Q6QaRMR_A-ENDa6E.mft (raw, json)
Hash identifier: MoW70l7x1D1OnNAJ5xHX0gUfWQiuMZbiQitENKvRkfs=
Subject key identifier: 3C:7C:36:1F:80:11:CC:46:E8:74:96:A6:EA:CA:D1:34:FA:8C:E4:E8
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 0197C23775D34154EA6B453F80B6F9980031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
Manifest number: 06EB
Signing time: Mon 30 Jun 2025 19:01:43 +0000
Manifest this update: Mon 30 Jun 2025 19:01:43 +0000
Manifest next update: Tue 01 Jul 2025 19:01:43 +0000
Files and hashes: 1: exvey6lE9-4Q6QaRMR_A-ENDa6E.crl (hash: D65t5xWevHs2iSLOKQiHj41SWOe+s8kT15Mk+cSAihE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:75:d3:41:54:ea:6b:45:3f:80:b6:f9:98:00:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Jun 30 19:01:43 2025 GMT
Not After : Jul 1 19:01:43 2025 GMT
Subject: CN=3c7c361f8011cc46e87496a6eacad134fa8ce4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:32:c5:31:e5:37:4e:f0:83:c2:18:68:1f:
0a:13:26:91:8d:6c:8c:f3:a2:43:be:21:84:fc:71:
2f:82:96:b6:d0:da:d3:13:e5:00:31:46:b4:a0:3e:
c9:7c:82:d9:b2:a8:6b:69:03:34:8d:e7:15:8a:ee:
f1:29:fc:ba:5e:23:ac:55:1a:f2:96:b1:99:ae:ed:
e5:06:25:20:2b:78:77:ba:5b:74:56:b9:a0:ea:8c:
1f:7e:27:20:77:ee:bf:8e:1c:4b:59:fb:2d:34:da:
41:07:2d:50:93:16:ff:a1:ca:c9:04:1c:41:6d:2f:
33:d6:3f:a7:67:10:89:2b:1c:19:75:be:b9:b6:b7:
16:17:bf:7a:eb:03:ee:76:9b:a4:07:d7:9e:d0:5f:
44:08:a2:e3:23:1e:4d:66:b4:c1:6c:58:32:cd:de:
37:36:64:18:da:13:17:d4:18:b7:83:54:73:1b:05:
f2:bc:43:57:83:79:08:cd:7d:0b:3b:94:f1:a7:82:
10:4b:f6:eb:a6:44:8a:8a:80:cb:64:dc:ce:f1:e2:
27:1f:53:98:37:3d:27:eb:94:8d:5d:d1:fd:a9:12:
fe:c0:c7:33:83:e7:fc:3a:3b:7d:1c:c9:5a:aa:86:
30:89:b8:8d:04:82:e0:25:aa:34:36:02:4f:34:94:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:36:1F:80:11:CC:46:E8:74:96:A6:EA:CA:D1:34:FA:8C:E4:E8
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4b:73:dd:73:d7:5f:99:e0:63:3b:67:57:7c:76:29:a0:25:
4f:07:be:86:57:19:1f:44:cb:a6:0b:5e:fd:47:33:ea:cf:3d:
f1:80:42:72:f9:93:a5:6d:bc:a6:a7:9b:f5:29:c2:61:f6:12:
ed:c3:61:ce:92:61:6f:31:57:48:09:7b:6d:23:31:8b:2b:68:
1a:76:98:3f:a5:de:00:a7:c8:e3:3f:24:89:67:34:59:6b:8e:
e7:20:4f:ab:1e:c6:31:90:12:c1:d2:20:3f:d2:ea:ce:10:c0:
bc:29:89:ef:57:48:8b:1b:c3:83:c0:e2:78:09:ab:2a:27:d6:
d1:7c:fc:e3:5a:fe:a9:1b:81:9e:98:11:f7:ac:ce:d4:e5:4c:
50:64:9b:13:15:d5:2f:28:9a:5d:7d:87:9a:d5:51:b0:d3:85:
98:9f:cf:7e:0b:42:00:23:03:2b:38:88:e6:10:da:50:b0:53:
ba:4a:a5:15:0e:51:99:6e:a6:65:5a:be:33:1e:d8:d5:bf:fb:
ba:82:e8:a4:ea:83:64:7f:f6:49:f4:24:81:ea:c5:3c:f5:4b:
58:82:df:c9:a4:71:01:c5:39:02:a1:2c:61:f4:b8:e3:6d:11:
d9:06:6a:50:b7:38:3b:d6:4b:d9:a7:53:c0:1d:40:e9:4f:66:
dd:37:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:21:22 2025 by rpki-client