Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: +nOJRt7bZdqe8FGVMgarkGCkFxJzDeB8Ad9UhjucVjY=
Subject key identifier: 7C:1C:39:FF:87:AD:1A:2F:D4:BE:65:2B:FB:0A:F1:BB:1F:49:4A:B5
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 019921B1287E64F6F4AE7053B005B9DB64E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 036D
Signing time: Sun 07 Sep 2025 01:01:22 +0000
Manifest this update: Sun 07 Sep 2025 01:01:22 +0000
Manifest next update: Mon 08 Sep 2025 01:01:22 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: 4ARr/BAnjYxfDoPXpOEzGo1yMGesjcYZ2DI1164ygdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:28:7e:64:f6:f4:ae:70:53:b0:05:b9:db:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Sep 7 01:01:22 2025 GMT
Not After : Sep 8 01:01:22 2025 GMT
Subject: CN=7c1c39ff87ad1a2fd4be652bfb0af1bb1f494ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:6a:2c:76:9e:b2:60:f2:c3:f7:07:3d:19:
3c:22:f1:50:10:2c:04:24:55:93:19:77:3f:a2:15:
3c:e8:c0:86:1e:a5:9d:4a:7b:8d:a1:e3:52:0f:c1:
e8:e6:6f:49:52:49:33:cf:bb:8a:89:99:a9:71:36:
2a:02:25:f8:60:3f:d3:83:cf:e2:2f:b3:7c:00:09:
c9:23:06:b0:a0:a2:70:f0:58:68:e4:fd:fc:f0:2b:
9d:f5:67:d7:a1:3e:e2:fd:d0:df:c8:67:b3:62:03:
98:7d:26:0f:82:46:eb:85:ad:36:3b:ac:36:5f:92:
1a:0e:60:e1:51:58:14:6e:88:25:8c:50:fb:5e:46:
41:78:5c:b0:92:f6:ce:70:e0:92:21:a8:22:77:53:
15:15:61:55:a3:d1:c1:98:5a:ed:77:a4:53:10:03:
ef:78:62:dc:ef:f3:f5:51:e5:45:42:a8:64:af:cd:
03:34:7b:c0:9d:e7:60:a9:b7:07:ad:46:e3:fa:5d:
35:7a:67:1b:fd:97:d8:02:4f:a8:e1:15:47:7b:3a:
97:c1:64:6a:2f:61:4b:f5:fb:63:db:3f:c0:8e:e6:
b9:9d:14:bd:3d:c3:66:fd:61:b6:3e:e5:32:90:bc:
3d:3b:7f:bd:27:14:69:91:66:04:d7:6f:67:34:3a:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:39:FF:87:AD:1A:2F:D4:BE:65:2B:FB:0A:F1:BB:1F:49:4A:B5
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e1:c8:82:ab:1c:8a:8a:71:c1:e2:ae:78:8f:b6:71:3e:ee:
2e:49:0e:80:0f:06:b4:f0:e1:cf:8a:e4:d2:bd:1d:f0:0c:6b:
ce:1a:f3:a3:f9:3f:d5:de:c4:f6:6b:27:f7:d1:9f:e8:41:16:
ca:23:cb:7f:2c:73:5f:3c:88:18:a5:c6:d7:3d:e9:9c:88:2f:
16:93:70:b7:bd:b5:3a:05:f5:a6:2b:e3:06:a7:14:cc:0d:e0:
ec:82:91:70:c1:90:5e:59:ff:fb:ec:58:10:e8:39:d4:3e:9e:
00:7c:f0:13:3c:e9:95:0e:33:2f:03:47:0e:17:c7:7c:df:5a:
df:1e:6a:95:08:5e:1c:83:95:12:a7:99:3f:6d:99:b0:83:e5:
f3:2d:28:00:79:00:1a:13:5b:ec:0e:70:d5:c5:fd:5a:f2:83:
4f:d7:64:c9:de:64:17:45:7f:8b:66:af:7d:73:47:51:f9:fd:
59:08:43:1b:3b:7e:c8:d2:6a:f0:e7:ef:bc:d0:ed:28:b9:a1:
8c:2d:1c:7b:c6:bd:c5:04:47:e3:4d:78:a0:ab:fb:6e:5b:e1:
1f:3b:b5:b6:ea:1c:2f:91:10:d7:d0:d4:4d:66:b4:1a:57:8a:
64:6e:15:73:f4:d4:bd:ad:18:1e:2e:3f:1f:d0:4d:7b:12:b5:
8d:0d:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:37 2025 by rpki-client