
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier: kjvvzO9Eh8Gc/psgRz80mjonzvzbAF3oBamNXNNY69M=
Subject key identifier: 16:7B:48:32:12:A8:5C:61:0A:6C:A2:CA:CB:C9:07:F9:8D:8F:23:BE
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial: 0198D5BBE8A159346364E855911603D30B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number: C7
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: l78mF9tk0J0OPn/1GUUWrj5Bon3PtS4xjSnkc9uEk9A=)
2: qIUPy4cdUvLlkzoQnlnAftBERWE.roa (hash: RxmkMhssM20mKcFMZBMuGRX/MaB3HEhaS2Ptkpxt32k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e8:a1:59:34:63:64:e8:55:91:16:03:d3:0b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=167b483212a85c610a6ca2cacbc907f98d8f23be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:3e:13:45:a1:3e:04:1a:a1:88:4d:04:05:
67:3c:bd:90:ea:83:77:bb:d1:08:50:7c:6d:d5:03:
f8:73:b4:38:54:6d:d9:c5:26:4f:21:5a:3d:16:4a:
83:54:a4:8e:d8:54:67:4e:00:23:15:54:84:e9:5a:
55:1c:f2:a1:ff:25:3a:38:c1:77:85:bc:38:59:22:
47:df:f3:a0:68:76:33:f1:af:d4:c0:9b:9a:7b:3d:
94:57:65:d2:a2:9a:46:77:e9:c0:c6:90:c9:1d:aa:
99:0a:c8:7c:ed:30:ab:96:ed:bc:e3:79:50:04:77:
28:7e:f6:2f:5f:a7:db:e6:68:72:b5:7f:f4:ee:b4:
09:79:08:a0:ee:9f:af:42:ab:ef:50:25:44:99:4e:
39:8a:4b:05:41:42:0b:2f:da:ec:09:85:6c:6a:3d:
d8:0a:ef:ef:32:cf:5f:33:48:df:35:84:fd:55:b0:
ce:05:d4:ff:e5:9e:3b:b4:41:89:fd:29:51:6f:d3:
64:71:16:fd:2f:17:2b:26:a6:b2:63:69:99:cc:b1:
1f:0b:f2:88:16:6a:80:ad:39:02:f5:76:36:f3:fb:
5a:a7:f0:c7:a4:0c:57:f7:3a:05:d5:c7:ce:a6:e5:
f8:74:13:0b:77:d1:3d:ae:64:c5:69:dc:14:34:e3:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:48:32:12:A8:5C:61:0A:6C:A2:CA:CB:C9:07:F9:8D:8F:23:BE
X509v3 Authority Key Identifier:
keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a0:5e:dc:ca:d3:e5:d6:02:b7:1f:92:f2:f5:84:b7:b1:33:
c2:7f:12:b8:6f:e8:6f:39:45:76:8b:17:78:61:0a:8a:c9:f3:
0d:f0:e9:e6:c9:63:e7:5e:ce:cd:05:3b:81:81:3a:0c:82:6a:
3d:d5:36:fd:a5:1a:27:ec:5a:9f:5c:fd:49:b2:7d:2f:16:c3:
82:fc:76:59:d0:e5:26:91:bd:37:24:24:5b:72:3d:75:68:93:
21:78:8d:8a:d6:34:a9:1a:6e:b5:40:07:b8:53:26:3b:a7:92:
e5:d8:26:13:5f:bf:36:66:89:57:fa:d3:95:03:52:71:bf:35:
34:62:4e:f1:6e:af:b8:e4:4f:8a:a7:7c:f8:85:2d:24:ac:7e:
07:f6:8c:22:32:c0:bc:87:e9:35:7e:e1:44:07:47:ba:5b:5e:
65:2a:95:8c:5e:b2:fc:85:cd:35:1c:41:eb:df:0a:00:fa:ae:
c5:1a:fe:51:28:ec:74:81:22:c1:0d:97:79:e3:e5:3d:24:49:
e1:6c:fe:18:80:84:05:b4:c3:1b:fd:52:64:93:0c:a2:fe:a7:
4f:fe:4b:fb:99:f0:0c:67:0e:3c:df:18:62:56:44:61:f5:bc:
e2:7b:10:0d:8a:c1:0e:f4:88:46:a5:50:de:4a:be:58:30:31:
0d:e3:77:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:20 2025 by rpki-client