Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: 4G3kw+0Vny3JKaAEz4oe2SVCUj2YHffqV5iMuKn9Dzw=
Subject key identifier: 2F:1D:79:BA:38:AC:B2:C9:70:5D:8E:E4:4F:6C:1B:9C:99:0B:CF:4C
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 0197B9D8E520923E7720B4E32B915B83D3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: 34
Signing time: Sun 29 Jun 2025 04:01:28 +0000
Manifest this update: Sun 29 Jun 2025 04:01:28 +0000
Manifest next update: Mon 30 Jun 2025 04:01:28 +0000
Files and hashes: 1: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: 8hAVG1wyPHcZJ7B0wAR0mZQnC6+LPhMg1A3+xa0VVdI=)
2: qIUPy4cdUvLlkzoQnlnAftBERWE.roa (hash: RxmkMhssM20mKcFMZBMuGRX/MaB3HEhaS2Ptkpxt32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:e5:20:92:3e:77:20:b4:e3:2b:91:5b:83:d3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Jun 29 04:01:28 2025 GMT
Not After : Jun 30 04:01:28 2025 GMT
Subject: CN=2f1d79ba38acb2c9705d8ee44f6c1b9c990bcf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:2a:c7:45:cb:6f:88:1a:da:eb:b1:40:99:
01:29:38:13:3c:27:f2:2a:bb:21:b9:8e:02:1d:11:
f9:f6:c4:0b:60:f7:32:3d:df:8b:55:50:11:85:c3:
8c:66:c8:35:98:99:26:e0:90:4c:08:e7:7b:f9:f7:
4b:72:db:82:b1:6a:45:1b:6b:12:37:0a:b7:ba:61:
12:c6:a1:72:32:b8:86:04:c2:ee:1b:9d:39:be:86:
39:59:f6:3e:bc:ca:cc:85:e4:8f:09:23:c0:6e:af:
97:2f:78:18:4d:6b:ef:df:05:d3:b4:2b:ae:fd:6b:
36:dc:e9:cf:55:a4:ea:e0:b8:b7:55:65:08:47:c1:
1f:ae:10:39:a5:95:06:4f:ab:20:32:86:56:ff:17:
b6:db:02:6f:63:23:7d:e5:3f:cc:a5:0c:57:32:33:
a9:4f:c1:cd:58:91:5c:c4:df:b0:ba:e0:5f:e1:fa:
9c:e8:b4:16:b2:5c:66:ac:93:9f:0f:1b:d2:08:42:
d0:df:e9:05:19:a5:2a:20:86:36:9f:4f:c8:d0:a2:
6f:83:16:c9:16:38:77:1d:63:86:7f:17:fe:fd:22:
ca:76:20:be:51:ba:85:2e:d9:24:26:40:90:e5:96:
f5:20:dc:1b:22:6e:19:82:dd:94:b1:b6:da:f6:f1:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1D:79:BA:38:AC:B2:C9:70:5D:8E:E4:4F:6C:1B:9C:99:0B:CF:4C
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:93:98:4a:d8:a8:b5:66:3f:f5:10:b2:49:3f:06:1a:88:ce:
bd:32:85:dc:3c:ae:15:47:8c:32:2d:cc:50:28:f0:d5:38:15:
6a:78:4b:6f:6b:f8:e4:16:12:01:2b:24:bd:c4:54:8f:6c:c9:
15:c6:8d:8b:6e:8c:98:d4:2d:a6:6b:d2:4d:86:67:12:5b:33:
ba:38:0b:27:30:5f:2e:d8:f0:53:9d:9c:17:43:a0:24:cf:12:
74:0d:4e:ac:65:de:ee:d4:78:8c:fd:ba:e5:80:9c:4b:00:84:
7c:8e:c6:1e:73:2d:ec:9e:e9:9c:68:df:be:08:9f:da:7b:d3:
e9:f3:9e:1b:a9:02:1b:d5:b4:47:8a:1a:f9:66:70:66:1a:3c:
79:86:ac:c2:5f:b5:2b:67:d0:d5:4b:bf:7c:e3:cc:52:3f:a4:
73:cf:f0:6c:04:14:83:56:0f:c5:ee:e1:1b:40:23:90:29:b9:
96:0b:c9:6a:23:60:b8:89:c2:a6:05:fb:91:17:c6:40:0b:32:
59:e5:b4:bb:c1:43:b7:b5:fb:d3:32:7f:e2:b4:16:3f:da:e4:
74:be:6c:81:fe:3c:21:69:60:05:dd:b1:a4:71:30:5f:bd:50:
ba:dd:9a:8f:b2:61:2f:08:a2:66:08:0b:8e:2b:d9:08:12:c2:
49:1c:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:43 2025 by rpki-client