Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: +30ULU2CE7XGzLai0RdzdBmKAJB+8sb+OMh+DuPB+hM=
Subject key identifier: 7A:73:AB:CC:12:BA:40:5A:51:68:47:7F:DC:28:AE:A4:B2:43:5C:68
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019A503E2AC8FB16AFC5B9352DDEAF93023C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 018B
Signing time: Tue 04 Nov 2025 19:00:42 +0000
Manifest this update: Tue 04 Nov 2025 19:00:42 +0000
Manifest next update: Wed 05 Nov 2025 19:00:42 +0000
Files and hashes: 1: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: zmXHRPueM8ow+8FMzonXaJqIBWK1yW/ucitKsIhJzvw=)
2: qIUPy4cdUvLlkzoQnlnAftBERWE.roa (hash: RxmkMhssM20mKcFMZBMuGRX/MaB3HEhaS2Ptkpxt32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:2a:c8:fb:16:af:c5:b9:35:2d:de:af:93:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Nov 4 19:00:42 2025 GMT
Not After : Nov 5 19:00:42 2025 GMT
Subject: CN=7a73abcc12ba405a5168477fdc28aea4b2435c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:d0:f3:9c:49:35:98:65:ac:ed:73:ad:00:
88:8c:dc:00:71:f2:ff:56:6c:ec:ca:6e:55:97:b6:
88:29:3c:07:5b:db:47:9c:62:ab:d0:25:84:01:91:
fd:43:e7:23:66:a1:27:0e:82:07:16:92:53:7b:73:
4c:8d:e1:91:27:1b:2c:b6:80:d1:9e:7d:eb:a9:0c:
7c:74:c1:25:66:fa:a6:a1:67:24:11:cf:8d:d3:6b:
18:de:42:c8:d5:5d:e0:6a:85:83:31:6d:4e:25:f1:
24:10:1f:03:39:6d:f1:17:5d:81:c3:06:77:ac:fd:
c1:65:2e:a8:cf:26:30:2e:6e:ad:c8:49:3f:73:8d:
8d:45:02:ef:ee:e3:f1:75:fd:6e:a2:a6:cc:83:18:
41:6d:46:07:f7:15:a5:c9:cd:7c:45:a9:9c:8f:86:
1d:a0:9f:62:c8:3e:94:34:af:68:2c:5d:84:b8:3f:
e8:2a:86:50:a2:f9:c9:3d:9b:c6:28:aa:36:7d:12:
61:58:92:b1:bf:80:2f:4e:ad:19:24:e1:a7:15:7f:
f7:ec:89:b4:df:cc:97:f4:c9:2d:67:a8:d9:8f:1d:
59:50:5a:85:01:9b:0b:02:69:08:90:61:58:b3:ec:
2d:38:08:ec:78:d4:c8:f3:03:07:27:37:93:83:ac:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:73:AB:CC:12:BA:40:5A:51:68:47:7F:DC:28:AE:A4:B2:43:5C:68
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:79:65:a6:87:59:b2:70:f2:3e:a9:39:a1:26:e2:9c:a5:9d:
4b:a9:1d:e0:41:ca:f0:62:ea:af:db:e4:1f:c5:0a:ea:6b:95:
c4:74:ae:32:5a:37:80:a5:6b:1b:fb:0b:6d:c8:0f:c0:a1:66:
56:0c:a8:79:99:80:f1:ff:95:6f:74:52:a5:10:4b:20:f9:57:
28:b3:b8:cb:ca:8e:b9:56:f7:25:c3:b6:63:db:82:af:ce:95:
09:91:24:ef:f6:ae:a4:f9:53:07:ff:cb:9b:09:55:4b:40:6f:
bb:ed:4b:f6:79:38:d7:7b:e5:6e:ec:6f:e9:26:39:8e:1e:00:
39:81:a0:0e:c9:a9:3f:f4:a9:e8:f4:4a:2c:60:ab:10:cd:1e:
4b:2e:e9:2a:2a:5b:06:27:36:06:3c:81:76:af:f1:00:98:47:
69:eb:69:43:90:5f:2a:79:62:3d:94:5f:5c:9a:5d:57:39:79:
a2:96:b1:47:28:53:98:d6:7d:31:3b:69:e8:6e:cb:65:ac:c7:
ce:4b:0e:ff:24:40:52:fd:aa:1e:b8:e0:96:ca:48:54:10:82:
d2:85:de:a0:6f:63:e8:03:e3:d9:f5:81:41:5d:14:cd:f1:16:
b1:e3:fc:0b:fa:96:99:21:cd:33:47:86:2c:a6:89:be:70:8f:
4f:f6:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:28 2025 by rpki-client