Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: Eac6mrVBIZC0L1DUH7i0K3FUja1759bwm7XYi6JhcBk=
Subject key identifier: 4E:07:58:4C:0F:B2:66:CB:10:18:1C:0A:4F:F7:25:81:C3:A6:A9:5B
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 0199FD3497FBFF981CA3CDD6F5414D5A0507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 0160
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: p34FI8L3ecHnV0ALNDbP9zReKtbTM2K1hoXiSWJH2XQ=)
2: qIUPy4cdUvLlkzoQnlnAftBERWE.roa (hash: RxmkMhssM20mKcFMZBMuGRX/MaB3HEhaS2Ptkpxt32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:97:fb:ff:98:1c:a3:cd:d6:f5:41:4d:5a:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=4e07584c0fb266cb10181c0a4ff72581c3a6a95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:04:69:94:8c:b0:6f:1a:91:91:db:54:f0:
f0:68:f9:96:14:59:8f:8f:41:12:af:e2:7b:0b:e3:
43:68:90:88:77:11:d7:ab:fb:f0:59:67:de:05:24:
a4:d0:be:f3:68:53:79:c1:c5:91:36:3e:7e:46:e5:
8c:60:da:57:a9:1c:30:7f:2f:a5:73:42:b3:95:4c:
be:b8:f4:a1:e2:f1:4e:e9:e9:cd:6f:cc:9a:44:ea:
be:90:00:9b:48:22:8d:9d:04:de:eb:6c:cd:2a:75:
c1:53:be:6d:a0:63:31:4e:b3:a5:be:26:3a:47:28:
f8:13:e5:8e:09:fc:9b:28:9a:20:84:c3:01:a9:09:
24:81:6e:7a:e6:78:ed:5d:9c:75:f6:3d:c1:58:09:
af:73:c3:6e:23:91:25:e4:1f:24:b1:ba:2b:73:59:
60:c8:89:4e:f0:8d:8c:9b:93:0e:66:65:3a:34:77:
75:9c:49:56:c5:2f:d4:74:66:97:0f:1c:03:c2:45:
c1:d9:a9:71:40:d7:ee:3d:2e:59:d4:93:ab:8f:e1:
36:fd:96:a2:3d:8e:09:31:8b:8b:36:38:e7:4c:b3:
16:b9:10:0b:76:d6:8e:80:68:92:8c:9c:f5:16:ed:
09:fa:bb:59:f1:91:ac:2d:6c:4f:5d:c4:72:13:e7:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:58:4C:0F:B2:66:CB:10:18:1C:0A:4F:F7:25:81:C3:A6:A9:5B
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:25:30:e6:e7:c8:67:f1:c8:f7:7a:46:37:bf:26:d1:88:ea:
e0:f0:41:70:c1:5f:f8:bc:89:af:c3:6a:57:8a:b5:a4:4a:53:
82:ff:a0:3a:76:bb:3d:40:fa:19:94:6b:6d:9c:fe:fb:4b:04:
4d:98:1a:38:be:fa:e9:9c:26:24:ce:8a:93:67:22:71:26:e6:
bc:df:94:c4:cc:c4:04:00:83:1a:33:e5:76:d3:77:6c:08:e5:
53:db:9a:25:5b:ff:77:0c:26:ca:06:9d:79:44:38:03:8a:25:
63:fe:be:e3:3b:38:2c:7e:fb:53:2c:29:e1:d6:16:ca:83:41:
20:50:c2:78:7a:f3:59:a2:4c:f4:d6:bf:e2:ee:8b:1e:64:53:
9c:42:e2:1c:7d:dc:4c:bc:ae:0f:e1:e2:0a:5c:ed:f8:92:12:
e1:2d:90:d7:56:aa:36:61:79:25:93:14:42:31:b8:42:1e:8e:
a2:7d:f2:6c:eb:29:36:69:0f:47:69:b2:bc:a3:3b:11:ae:0b:
6f:78:58:b8:99:1a:c0:38:e3:f8:a0:6a:a0:fa:0d:f7:eb:31:
eb:38:b8:86:85:ae:34:af:ad:27:e3:39:1f:24:b1:ac:a3:dc:
c5:93:2b:7f:bb:b8:73:8f:4b:8e:c8:bf:42:91:bc:d2:5a:77:
97:ca:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:49 2025 by rpki-client