Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: mBKgg0IOvkuidYPzWBgI3Ay2AUBw1Akgxr3PDghtftc=
Subject key identifier: 4A:9C:EC:81:B2:FC:87:BD:30:37:90:81:69:9D:7F:BB:B4:00:E8:D6
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 0199FBEB26C849F2942A2576EF24A937A136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 03DE
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: pxu7dFBERVUZU3rkjTgPJwQXzjg4+NHUXtwXGKdzRkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:26:c8:49:f2:94:2a:25:76:ef:24:a9:37:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=4a9cec81b2fc87bd30379081699d7fbbb400e8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:0a:99:8c:c4:c7:5a:01:cc:6a:f3:77:23:
2c:63:91:42:ce:27:8c:0c:db:2f:6d:3f:e1:48:46:
c5:52:53:29:96:90:55:55:9d:7f:9b:b8:c3:c4:c7:
16:99:fb:ce:83:f9:44:c7:82:e4:48:7f:00:d4:f2:
57:ff:e4:ba:22:22:9f:f7:a3:e3:d2:03:25:5c:80:
d3:b1:16:92:95:cb:f8:87:de:c9:12:d9:2c:14:1d:
75:fd:30:dd:82:1e:a5:c9:af:2d:76:62:85:11:f1:
44:01:cd:f0:a6:d3:14:f4:90:79:6c:20:3f:f6:fb:
2f:58:60:1e:d7:7c:4d:8c:32:4f:b7:9a:30:b7:46:
f1:95:bf:d5:10:58:8f:e6:0a:fc:f8:48:e4:1d:39:
a3:c9:6b:5b:0c:4d:82:4a:48:76:3c:33:98:b8:e1:
ca:c0:45:ec:ba:86:3c:86:56:79:f1:19:87:15:7c:
74:ea:48:cf:f8:4f:3b:69:b4:c2:72:b3:9e:9c:92:
16:8d:16:96:fe:56:ed:97:13:19:47:28:c5:1e:75:
a7:32:d1:a0:a8:28:10:f2:b0:c9:88:a9:59:b1:8a:
f2:01:cb:30:71:56:65:9a:7d:d7:58:b7:a2:be:c0:
b5:41:2f:5b:69:a8:78:ae:bd:60:69:a8:c9:07:38:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:EC:81:B2:FC:87:BD:30:37:90:81:69:9D:7F:BB:B4:00:E8:D6
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:14:89:75:66:54:94:c3:84:da:f6:fb:c8:24:fd:e9:c7:48:
10:b6:db:a1:9d:6a:68:c6:f6:45:9c:8a:60:c7:83:4f:1a:1a:
d1:b5:f3:72:66:0c:0c:92:74:ab:1d:63:d2:5f:71:08:ef:a9:
65:fe:f2:83:a0:1c:9c:54:b9:4e:1f:7b:63:61:bc:19:52:19:
3a:09:83:84:01:60:ff:08:42:44:a9:ea:89:a0:83:51:98:2d:
c5:c4:05:7d:98:75:4b:ea:09:6a:95:6f:99:aa:1c:38:71:96:
7a:47:de:58:0c:01:09:21:ed:b4:48:5c:d0:4c:3c:ab:1a:08:
76:20:f5:67:d1:15:3e:89:df:78:68:33:c8:86:e6:2f:65:5f:
77:e4:31:48:dd:87:cf:44:75:a7:a6:34:49:7a:72:bc:6b:25:
1a:f7:df:9a:1c:d0:37:f7:25:a2:5b:bb:6d:96:6d:f5:64:01:
ce:34:0e:30:30:38:af:21:05:e4:46:41:59:fd:48:5b:9b:b9:
1a:ef:2f:66:10:39:c9:97:10:f5:cf:f7:b1:74:0b:5d:39:a7:
96:10:39:9c:47:c2:62:39:9d:8b:d2:a3:24:ee:75:43:37:3a:
53:37:79:dc:7f:96:8b:43:df:75:ff:e0:e6:bc:1d:32:36:53:
2f:63:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:04 2025 by rpki-client