Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: SLRllj7LXpjx3gIPILHy8syEXLzOfCeJinn3ApN9rQY=
Subject key identifier: E6:5F:0F:1B:5E:C8:2A:6C:45:1A:34:6A:D5:82:23:8C:D4:44:6E:32
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 0199FB462463715CA9F085C463CDC8B39DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 1048
Signing time: Sun 19 Oct 2025 07:01:41 +0000
Manifest this update: Sun 19 Oct 2025 07:01:41 +0000
Manifest next update: Mon 20 Oct 2025 07:01:41 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: vpYKoClN9AIXePmgasQf4Z2hp4JI4iaySKipL42Iit4=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:24:63:71:5c:a9:f0:85:c4:63:cd:c8:b3:9d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Oct 19 07:01:41 2025 GMT
Not After : Oct 20 07:01:41 2025 GMT
Subject: CN=e65f0f1b5ec82a6c451a346ad582238cd4446e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:16:ac:59:fc:45:25:d5:a6:2c:f7:bd:87:
92:d7:79:63:f9:fc:af:d6:f3:6e:eb:ab:2f:b5:7c:
da:e7:3e:1b:e2:84:3a:d3:6e:b1:8b:a3:d6:c1:30:
ed:b1:8e:0c:e0:46:66:72:e5:62:c8:b5:4f:da:fe:
b1:c9:54:30:ae:62:81:dd:97:d1:01:00:9a:d3:89:
eb:3a:58:1c:14:ad:16:89:fd:ec:b8:74:80:a3:ce:
0d:94:6e:06:ce:d7:f4:66:df:fe:f8:61:05:47:cf:
c1:33:05:d0:31:60:3f:83:5d:9f:fd:2c:a0:51:7b:
e3:89:fa:26:b5:d6:ca:13:51:80:a3:70:c3:92:3d:
3f:4c:f8:f7:a8:b5:4f:c0:34:7d:5c:ed:86:bd:7a:
b3:d8:f9:95:cf:78:7c:0b:cb:46:1d:3f:9e:42:2b:
3b:e5:6a:0f:65:eb:3e:b5:a3:5f:2b:d3:0e:d7:cd:
90:37:bb:be:fb:c7:cf:47:ec:ee:3f:59:a0:c4:58:
95:17:7d:ca:03:bd:cb:47:95:00:5f:39:73:2b:67:
67:94:6e:b0:c3:fd:e1:f9:41:9a:1e:42:0c:c6:f4:
5d:e3:3e:4d:9d:69:a9:4a:a0:5e:e3:59:dd:45:70:
e7:cb:81:89:bb:4b:6f:cf:ad:7c:00:68:44:9d:52:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5F:0F:1B:5E:C8:2A:6C:45:1A:34:6A:D5:82:23:8C:D4:44:6E:32
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:d4:48:4a:df:49:dd:e9:27:8f:28:e3:6f:03:4d:c1:a1:
ec:85:69:65:74:52:56:15:3c:c1:a1:6d:1e:6e:2f:16:e0:2e:
17:1e:33:d5:e1:f4:69:d3:35:d7:40:42:c3:eb:62:fb:b3:2f:
ab:05:eb:f3:97:d8:f2:43:e6:81:85:4b:39:1d:2e:8d:41:34:
0a:87:22:8b:73:89:ef:4f:6d:34:a9:72:20:89:f5:09:09:b6:
7a:a9:4f:6a:b8:20:a9:b5:34:6b:c1:ac:46:e3:22:aa:9e:68:
c8:fd:2e:a3:fb:1f:e1:76:8a:ca:69:64:c1:c4:13:a5:0c:69:
ef:e6:9a:59:92:07:77:73:41:19:f9:4d:c9:d8:0d:7e:c0:1c:
33:6c:76:3a:aa:88:15:26:fe:cb:fb:78:1a:1e:52:10:b7:83:
19:cc:4c:ec:90:2a:cd:b0:56:be:af:62:61:88:f8:7e:4e:f5:
85:38:f9:f1:41:43:b4:d3:f7:c6:50:03:19:db:af:79:7a:0d:
b8:73:66:75:ad:9e:42:ce:21:fc:6d:07:c9:bd:41:3f:7a:33:
ab:91:72:73:cf:b9:6d:71:e4:5a:4c:dd:12:dc:39:4b:d8:63:
14:a6:69:91:bf:7a:ba:fa:32:05:96:f5:8b:ee:9a:55:4d:92:
92:f3:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:12 2025 by rpki-client