Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: N3K/yrsUDj/v2Io4VUQGJd/WTGlHkbqD6ALkUT9Dp54=
Subject key identifier: FE:01:8A:6B:52:44:CE:8E:E9:72:68:26:EA:1C:DA:5B:CA:85:BC:76
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 0197C94B5C30484AC42CAA22B91CBF4995B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 3C
Signing time: Wed 02 Jul 2025 04:00:48 +0000
Manifest this update: Wed 02 Jul 2025 04:00:48 +0000
Manifest next update: Thu 03 Jul 2025 04:00:48 +0000
Files and hashes: 1: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: TVnyLmr8Vp/LEJDpG0o+H1HEn3mT8Uh2IOpsVuN1ncE=)
2: qIUPy4cdUvLlkzoQnlnAftBERWE.roa (hash: RxmkMhssM20mKcFMZBMuGRX/MaB3HEhaS2Ptkpxt32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:5c:30:48:4a:c4:2c:aa:22:b9:1c:bf:49:95:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Jul 2 04:00:48 2025 GMT
Not After : Jul 3 04:00:48 2025 GMT
Subject: CN=fe018a6b5244ce8ee9726826ea1cda5bca85bc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:5a:b7:b0:ee:7d:78:df:f2:43:d1:29:dc:
a7:59:ea:75:20:2c:bf:f7:a0:a3:b6:9e:7c:10:2a:
12:ff:8a:17:98:16:61:91:ca:b1:8e:91:3b:83:bf:
9a:53:b3:94:bc:e7:31:27:35:99:1b:b0:1c:99:8d:
23:3d:66:0d:b7:6a:28:1c:e7:37:9e:d8:fd:fc:bc:
f1:57:53:64:04:38:d4:8d:15:2f:be:62:ed:0e:9f:
86:c5:d7:44:10:d7:d3:0b:fd:e3:f0:f8:a2:b5:84:
7b:fb:3a:95:03:11:88:b9:2d:a5:a5:0e:f4:f8:9c:
76:62:59:00:e8:b7:d7:19:05:fb:ad:4a:7b:b5:df:
6e:6c:91:f1:79:03:ff:57:e6:ba:ad:0b:be:f9:78:
66:1a:f2:de:50:38:26:ad:46:fe:82:e7:50:70:60:
03:95:29:5e:55:10:85:49:68:7a:fe:28:51:e0:4e:
5d:29:7c:36:a4:c7:51:54:8d:c5:2c:e1:55:1d:f3:
44:16:a3:99:ed:18:82:9a:ef:6d:b7:77:a0:a3:a7:
83:9b:38:0b:ac:87:83:fb:20:9d:0d:16:c8:36:f7:
e9:38:49:2f:5c:04:c5:35:65:68:ed:3d:07:87:60:
23:a3:be:39:dd:47:df:23:5d:c3:90:b9:e4:52:40:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:01:8A:6B:52:44:CE:8E:E9:72:68:26:EA:1C:DA:5B:CA:85:BC:76
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:88:e6:30:d3:56:3e:7f:2b:54:b0:b8:df:77:da:6c:ac:b9:
d2:b2:ab:64:6f:36:7f:99:0c:e9:30:87:77:4a:b4:2d:11:d1:
c7:d1:ee:12:5a:0b:4a:38:b0:66:a0:ce:37:09:65:13:2c:08:
a9:49:3e:03:cf:90:68:c3:3c:d6:d5:5a:d1:f0:a7:bb:a9:1d:
66:eb:a5:47:aa:23:3b:ab:05:01:d3:ca:da:67:96:d1:c4:d7:
3a:3c:42:56:aa:39:c5:91:32:5b:46:38:cc:a6:81:10:4c:55:
a4:44:6b:31:2f:3f:84:27:c1:c5:8b:ce:0e:0b:54:76:6c:dc:
ef:26:a4:a3:38:a6:8c:d5:50:4d:c5:c8:7f:8c:1c:ae:fa:e7:
10:eb:c8:21:07:e0:93:e0:5b:92:d7:ec:d7:4d:b8:7d:39:01:
75:9b:49:9c:37:52:e1:13:bf:53:56:fe:9a:c5:bb:6d:3b:5f:
c4:4e:ac:e1:3b:fb:ac:41:33:55:98:33:4c:a0:4b:1c:c5:58:
ce:0f:b0:3e:b6:d1:c9:10:39:33:77:f5:0d:b3:43:c3:56:96:
f2:bc:e4:f5:27:80:0a:bc:47:49:15:a8:12:f5:a2:32:4f:74:
63:3d:c5:e8:da:f2:3b:b4:ca:68:e8:e9:b9:16:4f:d0:85:63:
b8:18:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:02:37 2025 by rpki-client