Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: v24iovXZVnzYj42sja1QFVBAcNq1NDdtoYh6pL/oEhw=
Subject key identifier: 82:BE:8E:6F:09:33:E2:A2:D8:4A:C6:F2:9E:6D:B3:5A:58:DC:FE:A8
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 0197B7EAC7E89F0DABCE1060632547F88CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0F1C
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: KGlSIIMLXv+//0W8YaVIyyAZmpvpgOrJFog6+bgs8/c=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c7:e8:9f:0d:ab:ce:10:60:63:25:47:f8:8c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=82be8e6f0933e2a2d84ac6f29e6db35a58dcfea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:0a:d8:70:4c:9b:6c:71:48:5b:9c:9b:69:
01:5c:9c:f9:5d:53:c7:0d:e1:f8:da:0f:bd:89:e1:
4a:20:6a:54:89:d8:08:68:f2:85:79:67:a0:90:ff:
14:9b:1e:f5:96:24:b3:ce:7f:71:b6:f6:79:83:81:
a6:24:11:3c:c6:06:e5:58:c7:7f:c4:7a:d2:df:53:
74:42:cd:2f:ab:5e:36:41:f2:4d:69:e6:5e:d8:dc:
ae:52:18:e8:65:75:f2:de:1b:7e:e6:95:13:8d:62:
5d:35:87:f2:1e:61:9f:06:e3:bc:61:44:d7:1c:b5:
7e:ef:b8:97:a8:2f:15:80:04:4c:fd:86:f0:e9:6a:
64:ac:de:6e:3f:2c:7c:e4:3c:e4:e1:b5:40:6a:7d:
a7:e2:4a:6b:08:e2:a3:da:72:b0:b3:29:c9:ee:11:
7d:cc:47:ea:7c:ab:8f:57:e5:e4:d9:fd:6f:93:82:
4a:0b:b9:67:41:d6:81:65:46:b1:3e:45:a4:ba:8c:
fc:f8:5a:65:f9:d8:be:d9:e1:b9:18:46:55:bc:59:
ef:a9:fb:c6:61:11:96:d9:5d:1b:61:7a:80:ff:c1:
03:67:08:ae:3f:65:2a:63:b7:87:63:15:38:94:4f:
c2:b6:77:4c:f9:df:73:06:a2:e0:bc:7d:0b:00:d5:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:8E:6F:09:33:E2:A2:D8:4A:C6:F2:9E:6D:B3:5A:58:DC:FE:A8
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c0:e2:4e:82:f8:57:41:cc:9a:2c:2a:af:61:21:69:73:cd:
ae:7e:e1:a4:a0:a7:d7:ad:49:08:e9:35:ee:46:2b:eb:21:a0:
27:04:4e:22:d4:26:63:fc:ca:18:d4:e2:7c:65:14:80:b9:13:
75:b8:9d:12:ca:77:8f:91:f0:72:2c:50:fa:b9:5e:ea:64:54:
e3:39:0e:10:ad:c1:3b:48:29:35:8d:af:4c:bb:85:a6:0e:82:
9d:dd:52:75:ec:ac:5d:ea:59:84:81:ab:a8:23:b4:ce:65:00:
1f:ad:80:08:84:29:5f:87:ae:3b:c6:4d:77:c8:2f:e4:10:7b:
d7:4f:a8:41:7f:73:bb:4a:ff:99:77:42:56:07:38:09:2b:42:
c4:d9:7d:d3:ab:ff:1f:11:3b:1d:f8:2c:60:a5:e5:62:e5:0f:
4c:52:49:5d:8c:86:a4:45:71:10:96:c7:6f:d6:fc:be:0f:21:
f7:3b:d8:49:4e:ed:23:1e:bd:47:e4:5e:9c:3b:e1:1d:a1:c1:
8b:49:12:f9:36:e6:84:74:5c:72:51:b0:06:05:b6:4c:6a:aa:
d1:0c:78:dc:e9:11:96:bd:96:5d:0c:f5:2a:47:42:be:09:7b:
61:76:6a:08:fd:22:0d:ae:f7:f8:6d:a9:52:45:7b:fc:19:45:
ae:4a:ce:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:08 2025 by rpki-client