Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: 3RbymziRY04B9A++0+mkTR+3CQNfT021xQTFwQSu+UY=
Subject key identifier: 9A:D0:20:62:C7:B5:CD:5D:D4:99:1A:9C:CE:67:DA:FB:4B:F7:48:83
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 019A71B82DC27307848D07362941B2747A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 041B
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: LpVLeactvgproAg7RUg6dZcLUR9HiOQaxdpBj8SR+50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2d:c2:73:07:84:8d:07:36:29:41:b2:74:7a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=9ad02062c7b5cd5dd4991a9cce67dafb4bf74883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:05:2c:c4:a1:25:6d:6f:7a:09:b5:b5:67:
29:54:21:71:3f:2b:66:d7:1f:59:37:9f:0a:f7:d8:
99:e9:0e:8c:7a:b6:e1:df:4d:a0:04:24:5e:98:c5:
81:8a:2f:14:bf:06:40:4b:68:71:01:50:24:9f:92:
a7:2d:26:35:11:f5:bc:65:8a:6e:54:f5:60:ed:c4:
a0:12:21:62:71:d4:81:a7:33:52:3d:c7:ee:5f:08:
fa:08:15:49:10:95:56:ed:1e:f9:ed:53:32:77:c0:
55:e8:96:80:ef:b0:bc:64:1b:dc:e4:d4:e5:a7:86:
6e:d3:11:07:5c:e8:ae:06:b4:f9:82:c7:78:3e:c4:
41:c1:fd:fe:51:32:f7:c5:19:9a:12:7c:af:4e:cf:
20:6b:ae:14:71:3e:ed:e2:4f:2c:db:8a:9e:8f:d9:
13:21:ac:d9:62:6e:ce:60:68:7b:8f:b6:26:f8:5a:
65:a2:8e:18:e2:fe:bc:02:d0:35:ef:c4:b6:89:29:
24:6a:cc:8a:62:41:8e:22:26:09:65:71:c7:82:c3:
5b:e5:f9:c5:8e:8e:09:23:2b:d2:fa:5d:88:5e:90:
eb:0d:e5:9b:06:76:33:01:84:fe:09:21:e3:0f:56:
85:e0:57:80:5b:67:36:ed:88:75:95:55:c1:80:3b:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:20:62:C7:B5:CD:5D:D4:99:1A:9C:CE:67:DA:FB:4B:F7:48:83
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7e:6d:52:69:cb:45:40:7a:85:f4:5d:fe:8b:34:db:8d:c5:
1a:e4:48:0b:d5:e5:c4:7b:64:84:84:7a:73:a3:46:82:82:16:
17:6e:cd:07:d9:bc:99:59:9c:58:9b:1b:94:64:86:8a:54:fa:
6e:6d:f8:68:90:ff:17:37:69:f7:3f:38:a6:a7:8e:f9:af:07:
99:76:86:c1:dc:1b:6f:3a:ab:51:89:27:cc:71:a0:4e:b1:81:
83:a1:51:41:f7:8d:f2:26:a0:ef:70:41:46:4e:76:3a:d7:4c:
8a:3f:90:70:fe:78:d7:a6:66:82:b1:71:fe:fa:82:d7:ce:57:
48:28:65:4f:3f:62:a6:cc:43:2e:68:72:ba:9d:15:a0:b1:38:
15:9a:18:1e:0d:90:30:a6:59:e0:03:a7:ba:aa:40:10:e8:30:
75:6d:d7:ca:8d:cf:db:d1:44:d2:a1:62:f2:cb:ce:35:d5:6b:
66:96:e6:1d:53:ef:3b:90:f0:c6:f0:8e:57:0c:c2:c4:6e:51:
d5:ca:da:27:c3:e6:8f:ed:b0:9d:57:23:fa:3a:a9:75:c6:3a:
82:e8:37:0a:ab:81:91:74:98:22:e2:13:41:a9:45:0d:bc:02:
6b:54:e2:95:d7:0f:0d:cc:1d:26:e7:4a:9e:d6:02:4b:dc:bd:
8e:c6:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:26 2025 by rpki-client