Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: KPXZYuj5cV7+fVWrHryyw/DeNC+JWgiZsJ55IVUuhWM=
Subject key identifier: F8:67:36:F2:A4:EE:78:78:A9:C9:F1:20:A4:7D:08:F6:42:DF:F2:0C
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 0198D65FD0A2D07587051B6E26A1A5539444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 0346
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: yX4kVTjb27/9vK1jpzLE5KtyOK0ML+KFEJEu1LyPtqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d0:a2:d0:75:87:05:1b:6e:26:a1:a5:53:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=f86736f2a4ee7878a9c9f120a47d08f642dff20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:a9:d5:d0:4e:35:f3:05:0a:a3:a5:c5:11:
cf:00:11:ab:49:df:74:2e:f3:b3:56:41:d4:45:a6:
57:0a:f5:26:50:24:37:53:15:85:8a:17:a0:9b:08:
c7:9c:cf:f0:25:46:9d:6a:74:c0:bc:8d:5e:1e:66:
84:b9:79:96:6c:90:9f:3e:06:6c:73:5a:3f:e7:60:
e6:0a:39:86:f5:35:b4:d0:c0:1f:25:ab:84:04:0b:
41:9c:31:bc:29:26:74:bf:b2:b1:06:00:87:90:14:
1f:e9:ed:ae:76:67:dd:b6:58:60:f0:56:11:b7:c0:
e9:09:a3:f4:27:6e:ca:fd:03:76:4a:90:d6:c0:b0:
f7:3d:f0:24:d3:86:55:89:73:80:08:a7:d7:a3:36:
62:30:00:9c:70:cc:71:3e:26:66:f1:be:92:d3:84:
bc:e7:30:e4:94:2f:08:e4:3f:e5:0f:b7:25:99:31:
fe:34:c3:94:4c:1c:2b:22:13:09:ee:81:e4:a4:ed:
1e:65:73:15:aa:ec:d8:ee:c9:18:cb:c0:cf:f4:ac:
e2:e5:29:05:39:97:76:7b:18:69:5a:0f:9a:73:9e:
ec:f5:3e:54:6f:ff:08:8f:e8:27:37:41:28:f3:82:
d6:b2:e5:7c:fd:a8:f4:e3:97:75:69:7e:1f:9c:6e:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:67:36:F2:A4:EE:78:78:A9:C9:F1:20:A4:7D:08:F6:42:DF:F2:0C
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:80:02:65:2e:68:93:80:10:09:a4:43:53:78:fa:73:cc:e0:
ed:71:d1:a6:88:69:1b:56:14:fb:56:17:a9:08:a6:ac:92:4e:
5f:21:88:1d:93:e8:14:dc:aa:78:e9:70:e6:6d:0f:97:c5:61:
1c:df:85:3a:f5:95:0a:a9:b9:67:83:78:97:5a:76:8b:9a:19:
a6:40:e2:27:64:2a:9c:93:5f:64:c9:20:7a:58:e7:17:d8:10:
75:65:de:c6:2f:79:48:fe:10:dc:1c:fa:0b:54:dc:e9:6a:a6:
08:cd:0b:eb:86:68:a9:cb:ab:9a:b3:0d:cb:39:ca:ff:43:31:
51:41:f2:32:43:89:b9:4c:53:64:20:31:f6:b1:04:30:bd:14:
6a:39:54:9f:45:98:e9:a4:91:52:01:33:43:d1:2e:9a:56:b7:
46:72:84:cb:da:b9:df:40:32:19:08:4f:90:f1:be:83:27:97:
0d:7b:6d:ec:f0:7b:84:f8:b5:ca:a4:a8:f7:86:e8:b4:71:7a:
e5:36:be:93:55:de:ba:e9:32:18:fe:99:f4:fb:37:d3:be:56:
61:20:2a:0d:50:25:a9:35:2a:a5:73:76:7b:97:a1:79:4b:58:
f1:59:e0:53:66:c3:71:2b:aa:33:5a:0a:33:bb:82:23:58:ed:
48:ca:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:42 2025 by rpki-client