Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: gJLQOSQdwmW/0BHcB+iU71MjICr2pKpsF9CNLTk1jGU=
Subject key identifier: C1:A4:95:0D:AB:CE:37:B7:8B:91:ED:64:E7:A3:80:22:45:CC:31:AB
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019745F967C3FC3802A4BE363DDCBD151EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0EE1
Signing time: Fri 06 Jun 2025 16:01:02 +0000
Manifest this update: Fri 06 Jun 2025 16:01:02 +0000
Manifest next update: Sat 07 Jun 2025 16:01:02 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: TXwms4lEOG45bz5lGcW+cPNsvOF0a20XAAPeWWAF0n8=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:67:c3:fc:38:02:a4:be:36:3d:dc:bd:15:1e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Jun 6 16:01:02 2025 GMT
Not After : Jun 7 16:01:02 2025 GMT
Subject: CN=c1a4950dabce37b78b91ed64e7a3802245cc31ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:ea:14:3c:72:7a:bb:ab:16:46:af:fc:49:
33:2a:52:38:58:50:e7:49:b0:b5:1a:a4:96:d7:8c:
96:f5:a1:7f:bc:15:9d:b6:10:99:b6:42:ee:2a:87:
47:e1:29:74:f6:45:35:fd:41:15:b3:5a:81:ed:02:
ea:ba:fa:eb:2e:85:07:37:6d:c1:34:6b:f6:2e:d1:
4e:c7:50:2c:e4:b5:38:a9:85:6b:e0:b5:79:bd:35:
85:ef:6c:3d:54:4d:98:8e:ea:76:c9:5a:ff:ed:cf:
c1:c1:c1:cc:bf:7b:c5:2b:44:93:94:14:0e:ed:b3:
e6:5e:60:f3:ed:18:c4:67:ca:0d:18:52:30:e2:d0:
e1:f2:e0:fa:d2:20:b6:ad:7f:79:25:31:95:b7:43:
a0:be:c0:4c:a9:21:90:cf:5c:81:76:90:7a:09:93:
39:84:4b:f8:4e:62:a2:74:8a:6e:ef:96:dc:b8:30:
2a:20:3f:c7:73:7f:08:da:2f:2a:09:53:ad:44:1b:
92:62:22:28:45:2b:c1:a6:1e:ff:98:0b:17:42:07:
42:a7:df:bb:20:a9:cd:5e:78:54:1a:f9:ea:63:7e:
a5:8e:c9:6a:ad:71:ce:ef:3b:da:0d:30:95:00:ef:
86:31:a3:ed:99:6b:0e:c4:18:a2:04:96:09:fa:79:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A4:95:0D:AB:CE:37:B7:8B:91:ED:64:E7:A3:80:22:45:CC:31:AB
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9c:07:bd:a3:b2:46:e5:7c:2f:8e:b2:d5:3f:f4:9b:79:17:
b2:d4:63:39:91:16:34:00:ee:6b:58:10:db:21:f9:52:40:75:
36:f9:b1:9a:1c:15:75:8d:d9:fe:1e:17:b7:2a:7b:19:c7:5c:
7c:bb:87:88:1a:29:4a:81:24:6f:b0:c8:6f:3d:6b:2e:3f:a2:
9a:e0:be:6c:9c:55:42:c6:10:68:e8:40:61:64:b4:03:f9:1b:
74:ad:ab:c1:0b:77:bc:d9:13:62:ae:5d:3f:4f:ae:fe:00:36:
da:06:81:8f:ac:8d:06:01:59:b5:e4:ca:5d:29:cc:b2:3c:5c:
60:55:d4:e6:c3:af:16:03:07:47:c3:81:8b:69:60:a3:4d:76:
9d:73:6b:e5:ac:8f:b3:b8:14:e7:ee:3d:cc:42:af:f4:ec:10:
35:cf:46:2a:b2:fa:ef:5b:69:5e:39:85:ce:83:e0:e8:10:83:
dc:8d:8c:62:f7:43:6b:8c:bf:56:98:fa:f8:31:09:cc:2e:7c:
c9:2c:96:3e:bc:b3:ab:f3:5c:b0:90:ae:8d:2c:4f:2d:fa:f6:
1b:d7:10:5f:9c:b6:2a:dd:46:cf:69:bb:35:ca:c9:82:cb:00:
97:f8:b0:57:ea:f2:ff:eb:81:8e:87:ad:54:8e:5b:93:25:33:
f2:eb:3f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+WfD/DgCpL42Pdy9FR7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5
MzBlODkwHhcNMjUwNjA2MTYwMTAyWhcNMjUwNjA3MTYwMTAyWjAzMTEwLwYDVQQD
EyhjMWE0OTUwZGFiY2UzN2I3OGI5MWVkNjRlN2EzODAyMjQ1Y2MzMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK/qFDxyerurFkav/EkzKlI4WFDn
SbC1GqSW14yW9aF/vBWdthCZtkLuKodH4Sl09kU1/UEVs1qB7QLquvrrLoUHN23B
NGv2LtFOx1As5LU4qYVr4LV5vTWF72w9VE2Yjup2yVr/7c/BwcHMv3vFK0STlBQO
7bPmXmDz7RjEZ8oNGFIw4tDh8uD60iC2rX95JTGVt0OgvsBMqSGQz1yBdpB6CZM5
hEv4TmKidIpu75bcuDAqID/Hc38I2i8qCVOtRBuSYiIoRSvBph7/mAsXQgdCp9+7
IKnNXnhUGvnqY36ljslqrXHO7zvaDTCVAO+GMaPtmWsOxBiiBJYJ+nlMjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGklQ2rzje3i5HtZOejgCJFzDGrMB8GA1UdIwQY
MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt
MTE5OTQyZjNkN2E3LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3
LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5wHvaOy
RuV8L46y1T/0m3kXstRjOZEWNADua1gQ2yH5UkB1NvmxmhwVdY3Z/h4Xtyp7Gcdc
fLuHiBopSoEkb7DIbz1rLj+imuC+bJxVQsYQaOhAYWS0A/kbdK2rwQt3vNkTYq5d
P0+u/gA22gaBj6yNBgFZteTKXSnMsjxcYFXU5sOvFgMHR8OBi2lgo012nXNr5ayP
s7gU5+49zEKv9OwQNc9GKrL671tpXjmFzoPg6BCD3I2MYvdDa4y/Vpj6+DEJzC58
ySyWPryzq/NcsJCujSxPLfr2G9cQX5y2Kt1Gz2m7NcrJgssAl/iwV+ry/+uBjoet
VI5bkyUz8us/Og==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:36 2025 by rpki-client