Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: Xfvb1b5ampiXayZ440kKAAeIsaSsgrEnVzRjMVQ2XFI=
Subject key identifier: 79:A5:DE:15:76:55:DC:08:2B:FC:4C:EC:4A:B5:EB:7F:59:D1:BE:1D
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 0196CA602B838659C5845A530923D7BF2DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0EA1
Signing time: Tue 13 May 2025 16:00:22 +0000
Manifest this update: Tue 13 May 2025 16:00:22 +0000
Manifest next update: Wed 14 May 2025 16:00:22 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: fSlUANGLQYO6ahoZSQXTiLk6A2MhS8d8RZMcdLk6fDg=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:2b:83:86:59:c5:84:5a:53:09:23:d7:bf:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: May 13 16:00:22 2025 GMT
Not After : May 14 16:00:22 2025 GMT
Subject: CN=79a5de157655dc082bfc4cec4ab5eb7f59d1be1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:b8:0b:ad:d5:b2:c5:ab:b7:7a:62:d1:d8:
01:36:15:39:be:2f:11:27:a5:34:34:54:98:fc:75:
73:80:2b:c3:d9:9d:09:1b:93:e8:3d:8c:8e:8d:dc:
b4:e2:8e:20:64:05:44:53:10:a9:7d:21:96:cd:b2:
95:47:72:81:4d:e4:2e:58:00:dc:c3:3c:e7:e4:bc:
1b:29:a1:31:1b:6a:3b:0d:e6:a0:b7:da:a1:23:e8:
45:53:0a:b5:27:7b:55:da:73:a3:00:59:5a:e8:3c:
14:24:f9:8e:0f:33:05:ca:2b:19:33:f4:d8:1e:7e:
ac:c0:d7:17:17:53:f5:1b:62:ff:a0:8c:51:2e:e4:
cc:6e:2a:96:a2:c9:20:73:13:a2:4d:b8:33:19:67:
41:e8:bd:94:2f:47:ed:01:df:5f:eb:dd:60:0e:50:
a4:bd:5c:f0:9c:33:f9:c0:5d:f3:76:0f:2b:54:d6:
a6:d7:8f:42:0d:17:3b:d3:1d:c9:d5:00:bd:75:9a:
38:f0:8a:c1:6b:ca:d4:1e:04:80:06:8a:b3:51:57:
2f:c6:9b:99:61:d5:2c:84:d8:24:6b:b7:e3:89:25:
99:48:04:7c:ec:ab:b9:5e:c1:cc:57:32:36:88:d2:
cd:df:b0:4a:db:17:fa:3b:8a:e6:27:b0:4d:21:d9:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:DE:15:76:55:DC:08:2B:FC:4C:EC:4A:B5:EB:7F:59:D1:BE:1D
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:12:93:a3:d5:cd:be:3b:70:21:29:4a:73:ed:be:d7:31:32:
7f:8a:67:23:74:ff:44:a5:6e:d0:83:60:3e:69:ed:1a:ff:2c:
84:68:db:98:c0:fc:3b:93:11:fe:db:5a:5e:c7:02:9d:ec:dc:
59:ee:a1:47:d8:ef:2b:f5:69:43:74:44:00:b6:91:2e:bf:4b:
65:8a:35:5b:0d:91:dd:ea:32:33:11:f7:8e:d5:87:22:db:73:
93:55:03:3c:a0:ec:3b:04:1e:2d:03:dc:49:8c:21:45:80:24:
80:7c:e2:87:47:0b:ed:eb:32:1e:48:9e:ba:d3:0c:ab:21:a4:
cb:61:75:72:99:bf:40:7a:4f:22:81:0e:41:99:a2:1c:6d:8b:
a1:a4:2c:aa:c3:a0:05:54:ee:38:6a:b8:6d:de:d4:cc:81:4a:
b6:67:a8:ba:65:54:97:67:11:df:93:df:89:41:9e:4c:66:03:
7e:8c:29:80:b2:30:69:16:2a:43:fb:8a:17:09:de:bd:15:34:
91:98:8d:90:2d:8f:5e:b8:80:2d:e2:95:ec:6d:2c:4c:ed:0e:
6f:b6:13:ee:1c:5b:29:1b:cd:d4:86:ff:c9:1a:c1:5f:90:21:
df:91:fa:b3:45:36:26:fe:4c:18:2a:51:4a:b7:a2:50:04:e3:
00:36:84:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKYCuDhlnFhFpTCSPXvy2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5
MzBlODkwHhcNMjUwNTEzMTYwMDIyWhcNMjUwNTE0MTYwMDIyWjAzMTEwLwYDVQQD
Eyg3OWE1ZGUxNTc2NTVkYzA4MmJmYzRjZWM0YWI1ZWI3ZjU5ZDFiZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph+4C63VssWrt3pi0dgBNhU5vi8R
J6U0NFSY/HVzgCvD2Z0JG5PoPYyOjdy04o4gZAVEUxCpfSGWzbKVR3KBTeQuWADc
wzzn5LwbKaExG2o7Deagt9qhI+hFUwq1J3tV2nOjAFla6DwUJPmODzMFyisZM/TY
Hn6swNcXF1P1G2L/oIxRLuTMbiqWoskgcxOiTbgzGWdB6L2UL0ftAd9f691gDlCk
vVzwnDP5wF3zdg8rVNam149CDRc70x3J1QC9dZo48IrBa8rUHgSABoqzUVcvxpuZ
YdUshNgka7fjiSWZSAR87Ku5XsHMVzI2iNLN37BK2xf6O4rmJ7BNIdl56wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHml3hV2VdwIK/xM7Eq1639Z0b4dMB8GA1UdIwQY
MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt
MTE5OTQyZjNkN2E3LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3
LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhKTo9XN
vjtwISlKc+2+1zEyf4pnI3T/RKVu0INgPmntGv8shGjbmMD8O5MR/ttaXscCnezc
We6hR9jvK/VpQ3REALaRLr9LZYo1Ww2R3eoyMxH3jtWHIttzk1UDPKDsOwQeLQPc
SYwhRYAkgHzih0cL7esyHkieutMMqyGky2F1cpm/QHpPIoEOQZmiHG2LoaQsqsOg
BVTuOGq4bd7UzIFKtmeoumVUl2cR35PfiUGeTGYDfowpgLIwaRYqQ/uKFwnevRU0
kZiNkC2PXriALeKV7G0sTO0Ob7YT7hxbKRvN1Ib/yRrBX5Ah35H6s0U2Jv5MGCpR
SreiUATjADaEkA==
-----END CERTIFICATE-----
Generated at Wed May 14 02:44:00 2025 by rpki-client