Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: LfmgLDT5llZF5mQJEIox4vhYM7sQPRM7bRVKuy+BlsQ=
Subject key identifier: 2D:D0:E4:16:47:B8:BF:FF:58:26:1F:99:4C:23:F9:C7:52:79:27:A2
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019922FA45A5E2F80C1E796BB87E8E9518C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: EF
Signing time: Sun 07 Sep 2025 07:00:51 +0000
Manifest this update: Sun 07 Sep 2025 07:00:51 +0000
Manifest next update: Mon 08 Sep 2025 07:00:51 +0000
Files and hashes: 1: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: IpGNNzt4mp67ykJ2gj4bzhezTHcEZ6yxSYoFd7uW3NI=)
2: qIUPy4cdUvLlkzoQnlnAftBERWE.roa (hash: RxmkMhssM20mKcFMZBMuGRX/MaB3HEhaS2Ptkpxt32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:45:a5:e2:f8:0c:1e:79:6b:b8:7e:8e:95:18:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Sep 7 07:00:51 2025 GMT
Not After : Sep 8 07:00:51 2025 GMT
Subject: CN=2dd0e41647b8bfff58261f994c23f9c7527927a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:26:62:a9:f4:07:85:85:ac:f5:f5:60:50:
7b:bc:b9:b5:b5:4f:a4:83:65:0a:fd:4d:5f:3f:8b:
d2:ae:17:9d:c8:f4:97:4d:1a:e7:66:fd:1d:99:18:
05:26:f4:09:5e:7b:47:40:08:0e:3c:01:79:6e:58:
9a:bb:32:d3:03:ed:aa:c9:f5:08:f2:47:45:de:7c:
38:e7:e2:f2:4e:f5:24:d3:3d:92:73:d8:bd:a3:ff:
dd:e0:c4:6d:af:fc:1c:19:d6:78:87:53:bc:db:89:
11:a1:07:f8:a3:11:a4:b7:83:21:be:3b:b5:0c:5d:
2d:b2:85:52:b4:d7:e5:85:4f:d4:75:6d:5c:2a:fe:
f9:1c:9d:b4:71:d1:46:d1:6d:e5:41:cb:f0:d6:68:
b5:34:d8:0a:0c:8f:93:d6:43:ec:cb:04:f5:01:b9:
21:fd:43:0c:df:c7:ed:de:a3:7a:49:a4:86:60:97:
bf:fb:42:7c:b9:9b:54:4b:4c:58:a6:b5:dd:ff:a2:
a0:06:a4:29:5a:d1:45:52:93:23:8d:75:77:f0:16:
45:36:7c:63:56:b8:3e:e8:cd:3a:f6:58:7c:ab:9d:
43:1a:85:57:1d:7b:b0:cf:27:74:7d:79:10:00:9b:
a6:19:f3:0d:92:42:b5:46:6d:fa:e4:90:f5:c5:7d:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D0:E4:16:47:B8:BF:FF:58:26:1F:99:4C:23:F9:C7:52:79:27:A2
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:32:ca:c3:a1:9e:59:fe:19:7a:19:51:dd:1a:62:f6:13:88:
ae:9d:ac:18:7f:99:e6:92:a5:9c:06:81:a1:a6:4f:59:c8:5b:
0a:86:c5:51:8d:81:0d:bf:26:2c:f6:37:69:a9:2c:2e:29:13:
ab:5e:0e:48:90:e7:1f:ec:d5:09:7a:f6:3e:bb:0f:8a:81:f0:
39:30:99:5a:03:ad:b1:7e:b4:84:5f:92:6e:52:7a:1e:2e:f6:
f2:cc:62:7f:ca:df:1c:29:67:46:48:6a:7e:83:a3:f1:b9:e6:
55:15:9c:85:e8:33:8d:16:09:e1:2f:d9:c8:5b:b0:ae:a6:f4:
2e:2b:dc:04:97:53:2f:2a:fe:79:e4:39:be:af:f3:b7:b7:e5:
02:01:1a:bd:32:ed:be:07:45:2d:6f:d1:61:c2:66:08:56:71:
df:c1:d5:d0:8e:91:22:9d:e6:69:dc:12:74:8b:3d:bd:02:56:
2e:49:cf:ce:cc:f5:ee:91:08:d0:04:00:09:d1:38:86:6c:5d:
b2:3a:1f:98:e8:50:4f:e4:c2:ef:a1:8c:af:79:47:83:74:dc:
4c:df:ad:23:a1:26:b8:19:90:ce:14:47:13:39:41:ff:42:b0:
97:a9:24:81:87:5c:1f:10:1b:74:be:4d:10:8d:73:78:79:b7:
9d:cc:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:36 2025 by rpki-client