Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: u2yhUUZ91jTznSrbXkikplLCy7dv5LXNakKZ9U4JD9U=
Subject key identifier: 56:8C:C1:01:79:EF:71:58:A9:35:85:BC:A4:A8:88:0B:21:34:79:6B
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019880C208E2FF51A3B265DFB65B166429E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 9B
Signing time: Wed 06 Aug 2025 19:00:56 +0000
Manifest this update: Wed 06 Aug 2025 19:00:56 +0000
Manifest next update: Thu 07 Aug 2025 19:00:56 +0000
Files and hashes: 1: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: cCOnD/TVJP+uRq6babd6OAXrz/MI9ULsW1RfVW8I5oc=)
2: qIUPy4cdUvLlkzoQnlnAftBERWE.roa (hash: RxmkMhssM20mKcFMZBMuGRX/MaB3HEhaS2Ptkpxt32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:08:e2:ff:51:a3:b2:65:df:b6:5b:16:64:29:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Aug 6 19:00:56 2025 GMT
Not After : Aug 7 19:00:56 2025 GMT
Subject: CN=568cc10179ef7158a93585bca4a8880b2134796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:e9:d2:b6:c4:13:eb:50:97:f7:7d:4c:46:
2e:c0:e0:4e:e6:53:ae:7d:83:db:8a:db:cd:fc:85:
f5:a1:15:55:f9:b1:64:11:3f:8d:1f:3c:1f:f6:d2:
56:bb:8b:83:a5:ce:eb:a3:0c:0b:98:30:bc:28:6d:
f9:ea:97:d5:da:c3:be:ab:fa:bd:90:49:41:5a:74:
57:48:86:dc:90:84:7e:66:ef:1b:77:b1:53:57:c3:
ba:63:ca:e2:4e:93:0c:25:ff:c2:2c:3b:18:67:e1:
d2:b8:de:26:56:93:f1:93:5c:2c:3f:d9:e5:12:7e:
ba:09:ce:f5:23:ad:ba:99:c5:b9:d4:5b:b1:f5:40:
38:b8:b5:e9:bf:92:2c:fe:c6:f5:62:16:2d:a7:03:
60:9b:a8:3f:fb:9d:37:ab:e7:f4:65:6d:c2:67:e8:
b0:84:c0:a3:0e:6c:68:2c:7f:f9:01:a4:29:06:27:
aa:9c:88:2a:c1:5e:e8:5c:d4:81:6d:7d:e6:97:32:
1b:30:f7:b3:48:ee:f3:23:f6:35:04:c3:21:91:ba:
63:9b:7f:42:1f:4a:e0:4b:a4:18:29:eb:0a:e3:21:
5f:93:ab:9d:71:1c:69:90:83:70:ec:d2:b9:f6:b5:
09:2c:bb:99:8f:fa:bd:ab:3f:13:37:cc:ef:ce:2d:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:C1:01:79:EF:71:58:A9:35:85:BC:A4:A8:88:0B:21:34:79:6B
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:99:59:0e:3d:f4:91:bc:b5:b6:83:9d:e4:3d:72:4f:9d:b9:
57:5f:6d:ba:41:0c:ab:43:76:f1:50:33:bd:ff:98:ce:a3:4a:
ba:ee:1b:9a:c1:95:13:3b:57:16:7b:a8:b8:e5:59:84:9a:6a:
7b:72:7e:2f:94:c6:50:32:73:ff:ca:28:bc:25:55:c5:89:4f:
8b:07:39:51:f1:34:a4:00:f4:c4:ed:2b:ff:fd:41:0d:14:2c:
96:5c:a2:70:e5:71:20:98:95:18:75:a6:fc:aa:19:87:51:ee:
0e:73:e3:ff:67:6c:a1:64:6d:32:f9:d9:13:c5:2d:f5:6a:d8:
c6:51:a2:d7:0c:17:17:5a:bf:b2:b5:41:74:7e:76:30:90:78:
69:5f:df:01:c5:34:ad:71:3e:13:ff:dc:65:98:2c:42:75:83:
7c:cd:b5:2d:d7:fc:3e:03:73:ea:53:66:ec:4b:35:6c:93:c7:
04:21:17:e6:2c:4d:d5:97:fa:99:a6:55:c9:33:a8:fa:23:e7:
8b:58:00:3d:6d:24:27:65:85:08:9b:d3:01:e0:2c:b7:13:8b:
a2:10:5d:ba:15:12:85:96:35:5a:26:b9:20:93:1f:bc:d9:c0:
a6:b3:4b:ad:ff:77:1d:39:60:45:8f:e1:cd:41:d2:32:8b:c2:
ab:73:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:30 2025 by rpki-client