Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: J7eIJd7aKzOsc9xfgPd9g4LX9Wg+IlhVu3qyLlf+pe0=
Subject key identifier: 52:7F:32:04:8B:A7:08:BA:F5:36:BC:53:0F:17:D5:AB:54:02:0D:9D
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 019768BBD237913DA6A3827B0338EC6D1953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 0A
Signing time: Fri 13 Jun 2025 10:00:28 +0000
Manifest this update: Fri 13 Jun 2025 10:00:28 +0000
Manifest next update: Sat 14 Jun 2025 10:00:28 +0000
Files and hashes: 1: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: QvUSj6oAGre9xTMJ7ncAr0JV5q5yDd1VOQQcsUIHMA4=)
2: qIUPy4cdUvLlkzoQnlnAftBERWE.roa (hash: RxmkMhssM20mKcFMZBMuGRX/MaB3HEhaS2Ptkpxt32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:d2:37:91:3d:a6:a3:82:7b:03:38:ec:6d:19:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Jun 13 10:00:28 2025 GMT
Not After : Jun 14 10:00:28 2025 GMT
Subject: CN=527f32048ba708baf536bc530f17d5ab54020d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:65:3e:aa:df:e1:f9:33:7f:30:87:9e:6b:
39:4f:86:2f:41:56:b5:25:b0:1d:9d:2f:2c:79:26:
c4:a0:c8:31:cd:cf:85:3a:8c:85:fe:bc:c8:04:21:
87:05:1b:41:6f:a4:a0:43:d3:25:6d:77:b0:4c:4c:
46:89:fa:f5:8f:ba:b7:21:38:96:c4:83:9a:99:d0:
f3:94:61:11:d6:31:5c:5a:de:ed:b5:6c:81:98:e0:
da:e5:c5:1c:e5:bf:7f:be:95:6a:f7:25:02:7f:7b:
86:ee:55:07:20:9a:23:ad:25:ff:ba:63:b0:3a:7d:
87:6a:33:69:97:5c:b1:6a:ac:55:b5:ae:58:b7:cd:
15:4c:80:6e:58:2f:e7:bd:09:15:7a:9d:26:53:87:
f4:37:ad:ad:a6:cd:8c:62:6c:d8:12:01:e7:4f:05:
8e:04:16:bb:98:95:8f:18:1b:dd:89:5d:4a:8c:5f:
d3:28:6c:b1:7c:93:94:2b:f8:fc:17:41:dd:89:26:
11:16:39:ec:7a:2b:c8:12:cc:c4:6e:27:02:52:44:
ea:b2:7c:9a:cc:11:f3:f8:38:68:88:e6:b3:a6:47:
05:65:cf:88:26:79:c2:9c:a7:03:e8:27:47:4e:a3:
ec:00:56:7f:10:0e:8f:9a:b6:38:76:f2:ad:80:4d:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:32:04:8B:A7:08:BA:F5:36:BC:53:0F:17:D5:AB:54:02:0D:9D
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:13:7b:72:7b:48:a9:3b:52:73:5b:5e:65:a1:c5:1e:70:e7:
f4:3f:90:bf:5c:68:8b:16:33:aa:2a:a8:1f:3e:6d:87:cc:a1:
3e:16:d5:27:a2:55:b0:30:15:35:05:1c:94:52:61:0e:9d:4a:
5e:61:14:60:d9:ec:25:04:80:5e:7e:50:b2:fc:3c:a9:d3:b5:
28:81:c6:a9:b1:99:eb:b3:36:64:9d:7b:ee:b5:f5:04:6c:62:
67:2f:13:71:22:24:a2:e9:a8:ef:da:e7:ad:1f:b9:09:94:3e:
1b:ce:e3:b5:0a:8b:86:3d:6b:f3:7e:aa:64:1f:3c:c8:80:f7:
33:28:a3:a0:df:47:ba:fc:5e:a2:8a:78:f4:fb:90:27:45:47:
8f:ad:6e:39:4d:1d:32:e4:aa:c3:b7:27:97:de:26:34:13:18:
26:cb:17:af:c0:ee:7b:eb:c5:c0:a6:77:63:1c:29:99:7f:cb:
84:4a:26:f7:a8:d2:13:96:71:09:da:5a:ae:65:75:f0:3a:41:
b8:36:6f:65:a8:00:7f:d5:d2:16:09:90:51:b5:61:3b:46:6d:
ae:f9:b7:d5:fa:d1:7c:7b:c5:a9:8f:00:93:50:16:af:b5:a8:
93:7b:e5:e1:8b:e5:ef:b7:54:81:86:e9:99:95:30:ad:de:e5:
6f:63:87:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou9I3kT2mo4J7AzjsbRlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNGJmZjVjZDJlMTFkMDRmNzUzZGRhMmI2N2I0ZDg3MmY2
Yzg0NDEwHhcNMjUwNjEzMTAwMDI4WhcNMjUwNjE0MTAwMDI4WjAzMTEwLwYDVQQD
Eyg1MjdmMzIwNDhiYTcwOGJhZjUzNmJjNTMwZjE3ZDVhYjU0MDIwZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuhlPqrf4fkzfzCHnms5T4YvQVa1
JbAdnS8seSbEoMgxzc+FOoyF/rzIBCGHBRtBb6SgQ9MlbXewTExGifr1j7q3ITiW
xIOamdDzlGER1jFcWt7ttWyBmODa5cUc5b9/vpVq9yUCf3uG7lUHIJojrSX/umOw
On2HajNpl1yxaqxVta5Yt80VTIBuWC/nvQkVep0mU4f0N62tps2MYmzYEgHnTwWO
BBa7mJWPGBvdiV1KjF/TKGyxfJOUK/j8F0HdiSYRFjnseivIEszEbicCUkTqsnya
zBHz+DhoiOazpkcFZc+IJnnCnKcD6CdHTqPsAFZ/EA6PmrY4dvKtgE35NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ/MgSLpwi69Ta8Uw8X1atUAg2dMB8GA1UdIwQY
MBaAFHpL/1zS4R0E91PdorZ7TYcvbIRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMt
NzA0MWU5NTg1ZGViLzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMtNzA0MWU5NTg1ZGVi
LzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBN7cntI
qTtSc1teZaHFHnDn9D+Qv1xoixYzqiqoHz5th8yhPhbVJ6JVsDAVNQUclFJhDp1K
XmEUYNnsJQSAXn5Qsvw8qdO1KIHGqbGZ67M2ZJ177rX1BGxiZy8TcSIkoumo79rn
rR+5CZQ+G87jtQqLhj1r836qZB88yID3MyijoN9Huvxeoop49PuQJ0VHj61uOU0d
MuSqw7cnl94mNBMYJssXr8Due+vFwKZ3YxwpmX/LhEom96jSE5ZxCdparmV18DpB
uDZvZagAf9XSFgmQUbVhO0Ztrvm31frRfHvFqY8Ak1AWr7Wok3vl4Yvl77dUgYbp
mZUwrd7lb2OHeA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:53 2025 by rpki-client