Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: 3PH/Z4sgyDPSmzlIdv2b9qEsRdjkjmAfZjqtD4q0kq4=
Subject key identifier: 65:8E:EB:AA:36:15:DB:C8:FA:95:F6:6F:3A:57:C0:67:8E:2E:00:F9
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 0198D5BC2DEE8DD6AB8FEE65842ECC3F7842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0FB0
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: Nc2VxLgTEINkZUT8ETon90FvOqqy3ww0WlzQwdSPzMU=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2d:ee:8d:d6:ab:8f:ee:65:84:2e:cc:3f:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=658eebaa3615dbc8fa95f66f3a57c0678e2e00f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:be:73:91:46:97:76:cb:65:94:7a:d2:4d:
44:27:24:ce:01:5a:05:34:bc:ed:69:f3:a0:96:69:
9d:e8:f7:e1:cb:23:20:f5:25:6d:5f:ec:a4:e8:a5:
b2:c5:e1:30:58:4b:50:63:46:74:36:6b:87:4c:bf:
64:08:7b:0c:5b:52:86:a0:d2:b7:c2:cf:c0:87:2c:
c6:55:c4:3b:d8:d1:25:49:00:7e:4c:63:c3:a4:c8:
95:fe:7d:93:f6:26:4e:f2:e8:c9:0b:d9:c3:68:7b:
1c:d5:86:bc:cf:5c:1e:c3:9d:ed:99:b6:68:0f:ac:
82:c5:82:8c:36:c3:ea:63:81:63:11:f2:d8:4c:ae:
fd:c4:e6:6c:dd:84:61:1d:fd:b3:39:0d:82:46:84:
c7:ef:e7:7f:33:ea:e1:41:94:98:34:7a:bc:c2:c4:
d8:db:3d:c5:6e:6a:02:f9:84:ad:64:0e:70:74:26:
44:d8:c2:b9:f7:d3:63:20:4c:ff:2e:d5:5c:61:a1:
b6:7b:0b:ed:41:6c:48:c3:50:11:83:03:aa:f1:79:
1a:f8:bb:ef:45:d1:43:4b:3e:60:1e:30:d3:f7:7e:
3e:18:24:8d:17:85:52:77:d7:0c:69:f0:a9:4e:11:
d6:77:27:a9:17:e3:c3:04:a4:e0:c9:86:5b:ea:31:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:EB:AA:36:15:DB:C8:FA:95:F6:6F:3A:57:C0:67:8E:2E:00:F9
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d8:8d:e9:86:6a:bf:43:4d:38:1c:5f:1d:d9:81:68:29:e7:
a0:f3:df:0d:8b:fc:f6:81:09:31:7d:58:46:47:46:1c:48:d7:
00:9b:40:32:c8:67:de:05:b6:b1:97:24:05:8c:ac:9c:01:3b:
a2:04:50:40:4b:3c:44:61:2a:ea:0b:ee:ce:6b:97:94:a0:4b:
a0:f3:8a:54:32:2e:b2:ca:3e:2e:8e:75:f4:89:6d:69:d5:05:
84:cd:ec:34:34:c1:b0:4f:1c:6b:e4:c1:69:ec:b8:b9:76:3c:
d0:82:f4:86:87:00:f7:ba:19:ee:8a:11:bd:d6:49:82:16:43:
3f:63:35:9e:a2:1e:80:a0:74:12:2b:a8:ad:28:7a:62:11:82:
b5:f0:1a:f4:4d:aa:02:b8:69:ba:e1:12:c8:8f:f0:31:72:26:
cd:14:2f:5e:3d:2d:6e:bf:30:c2:53:35:9f:d5:55:8e:d9:4f:
0d:d7:07:72:24:c7:a5:df:2d:35:00:c6:40:4c:0e:e3:9e:93:
47:ef:ad:9f:dd:01:2b:63:0a:9b:8d:ba:fe:74:65:e6:0a:de:
ea:be:fe:2e:e7:db:9c:a6:a8:03:4a:c2:be:aa:4e:bd:e0:ae:
23:9a:e3:7b:64:bd:cf:98:7c:87:69:eb:97:35:2f:42:52:bf:
f3:ea:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:21 2025 by rpki-client