Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: 9oiebbPkEE0L7IB+qmhfAclJy18MGi4po0D4yIv0Ki4=
Subject key identifier: 35:C0:74:BD:70:44:E0:3E:44:C7:D3:01:39:CC:D0:17:FA:38:35:6A
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 01983570AE38E1EE822310BD0B24BD12C11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0F5D
Signing time: Wed 23 Jul 2025 04:00:33 +0000
Manifest this update: Wed 23 Jul 2025 04:00:33 +0000
Manifest next update: Thu 24 Jul 2025 04:00:33 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: P60hQ+VSIgvE4vpakR8bWLLRbkiw0agFOlthm0RvCO0=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:70:ae:38:e1:ee:82:23:10:bd:0b:24:bd:12:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Jul 23 04:00:33 2025 GMT
Not After : Jul 24 04:00:33 2025 GMT
Subject: CN=35c074bd7044e03e44c7d30139ccd017fa38356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:30:94:0e:33:2a:4a:be:7b:50:37:72:bf:
bb:a8:f7:31:bf:52:af:2e:63:8b:ac:8e:f0:a9:9d:
f8:32:47:b1:1b:ad:20:05:f6:da:de:d7:c4:3a:cc:
81:ac:0d:0d:06:99:90:79:0d:b7:ea:6d:fe:77:d2:
3d:50:6a:b5:f9:83:68:10:be:f3:35:98:e7:75:44:
4a:3a:ed:0f:0f:ed:d6:e8:b1:f3:d9:03:33:dc:4e:
a4:f3:83:e7:c7:38:46:d9:6d:eb:f3:d6:3b:a4:2a:
b6:5f:4d:8f:fb:2b:42:b3:e9:ff:76:d5:a8:34:6c:
1d:e7:81:a8:0f:63:53:e8:68:59:d4:81:07:eb:27:
aa:e9:66:13:a9:7a:57:8f:94:d8:55:04:fc:34:ab:
20:16:82:a9:43:73:49:9b:1b:9c:67:ac:60:50:0e:
5c:49:b4:2f:ef:f6:72:2a:90:4d:b6:dd:b3:a9:b2:
1a:51:0c:66:6d:9f:dc:c3:b8:ea:09:7b:55:78:c2:
83:a0:1f:7a:86:96:98:fb:e9:62:5a:41:5b:ea:ee:
0d:7a:ee:a2:d7:38:c5:d3:b8:a8:5b:4d:90:c8:fa:
59:15:be:93:e9:d7:7a:1f:de:da:ee:bb:1b:38:04:
5d:ec:b0:ff:56:46:75:50:ff:b8:2c:7d:9e:bf:f5:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C0:74:BD:70:44:E0:3E:44:C7:D3:01:39:CC:D0:17:FA:38:35:6A
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:51:9d:5b:9c:9e:0f:b5:4e:e0:91:d9:d0:0b:37:8f:ea:d1:
c9:43:d7:23:31:af:e0:0f:ea:ff:b5:07:b3:ce:fa:68:c0:2b:
ec:ea:02:0f:6d:ee:41:fa:c0:c2:cc:05:a8:45:d6:10:80:68:
ca:18:a8:16:7e:87:7b:8b:f6:a8:92:82:52:b2:01:c4:06:8c:
0f:30:ba:80:8c:8b:f1:1a:e0:05:7c:24:45:eb:3f:90:af:22:
9a:26:fe:e7:e5:de:95:6f:dc:9a:67:d7:6a:23:9b:8d:9a:96:
7e:69:52:6c:d9:ab:c6:2a:5d:0b:8e:12:07:34:91:86:b5:94:
30:90:ae:1e:59:ba:f6:8c:fc:b0:0a:ae:6e:85:0f:7c:d8:9a:
3a:9f:94:04:56:6a:fe:70:98:ca:ac:2d:c9:1d:58:a7:98:c1:
a9:1d:bb:cf:a1:c8:9c:58:b6:19:db:49:ed:98:09:ef:0b:20:
1d:af:f9:17:08:64:51:5f:a8:27:1c:d0:72:7e:20:aa:90:ff:
b4:5a:76:5b:da:aa:72:fd:99:28:4a:ae:27:7f:14:a1:9d:74:
1e:47:7b:6d:c2:29:5a:d6:96:c2:97:1d:b6:94:f7:45:c2:40:
21:ad:fe:d7:1b:11:5b:d6:27:88:7d:18:73:17:5b:9d:87:7d:
b5:87:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:26:08 2025 by rpki-client