Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: ZLP1DBxwQDShywKhjfJpj9r+oJr+5By1BJ2yViqJ9A0=
Subject key identifier: 79:52:A1:3E:CA:D4:90:6B:C8:04:C8:F7:6E:1C:DA:1C:A1:B3:0E:F6
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019926D7BF98236060621DFB2742BA45C1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0FDA
Signing time: Mon 08 Sep 2025 01:01:37 +0000
Manifest this update: Mon 08 Sep 2025 01:01:37 +0000
Manifest next update: Tue 09 Sep 2025 01:01:37 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: rCJAxr5uMG0mBEuwOSNw13LGzMFVcvQOaerQFQFHAfs=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:bf:98:23:60:60:62:1d:fb:27:42:ba:45:c1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Sep 8 01:01:37 2025 GMT
Not After : Sep 9 01:01:37 2025 GMT
Subject: CN=7952a13ecad4906bc804c8f76e1cda1ca1b30ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:d4:da:3d:d8:91:f2:0f:5c:d3:91:37:f0:
b2:25:ec:03:3c:2f:33:43:f3:da:16:9b:1c:83:9b:
78:51:8e:85:35:62:d6:68:c6:17:2e:09:65:47:fa:
f1:af:0f:59:9f:67:9e:dc:76:83:ba:5f:a6:b6:b8:
d8:1d:7c:3b:a1:bf:e4:e3:78:42:7f:0b:c3:36:b0:
fe:aa:74:ba:a5:42:cf:17:ca:72:4f:d3:c5:52:b6:
5b:db:2c:88:ef:86:57:59:cb:24:33:cc:85:46:6b:
a3:de:af:24:b3:30:38:e0:27:39:4a:b1:9e:55:6b:
58:33:37:82:d1:2f:8b:bd:56:c2:c5:c3:11:00:63:
12:5c:16:3c:d7:ca:18:a0:3f:19:82:61:00:2b:2b:
2a:99:11:c0:e8:95:85:5c:d0:2f:f2:8d:6e:93:e9:
ff:95:17:50:54:81:2e:e3:e0:08:46:40:b7:4b:34:
d9:2d:22:ff:c3:07:8f:eb:36:b6:c8:48:50:51:f8:
2f:e9:16:48:f0:d9:75:5f:07:62:72:cd:45:37:28:
79:9f:0c:ae:e8:5c:56:af:30:41:fe:f2:2f:84:52:
c6:c2:cb:81:33:8a:e6:68:e0:a9:b0:f7:d5:fb:8d:
d0:8e:d6:05:4e:5b:06:3a:9a:62:b1:96:18:66:90:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:A1:3E:CA:D4:90:6B:C8:04:C8:F7:6E:1C:DA:1C:A1:B3:0E:F6
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:80:67:a1:f9:7e:15:84:eb:cb:00:5b:cc:a6:66:6e:78:ed:
08:d2:b0:e1:d8:81:40:f8:9d:18:9d:41:43:58:67:bb:41:04:
f4:19:0c:8c:4a:3f:c2:c7:f7:78:aa:9f:87:5b:44:76:69:20:
77:2f:46:06:a9:33:3f:fa:e0:de:45:a5:06:62:d4:59:05:5c:
ff:f6:62:25:94:0b:22:cb:ea:4a:53:e3:0e:6f:e8:c6:8d:42:
3e:99:6e:85:da:cf:a3:f2:1d:3a:12:1e:1c:2e:48:24:75:c4:
40:9f:a1:39:34:b9:ff:69:02:8c:d1:ab:ff:10:d6:65:6f:fe:
26:38:2b:b0:f4:be:2d:f0:68:9d:f1:c4:85:9e:37:2c:5b:f2:
f4:2e:2c:36:20:39:d5:3e:16:50:dd:f0:59:c0:57:c1:67:57:
99:d7:3d:0c:03:ff:1f:1d:91:7a:70:86:91:27:e6:30:38:bd:
e6:da:8b:26:a5:a2:ef:e5:94:08:88:b1:41:dd:e8:e6:8f:a7:
90:3a:4b:7c:e1:72:08:fc:7c:0a:c0:bd:0c:f3:5a:16:15:cf:
e9:a7:62:aa:71:23:c5:7a:e7:ca:ee:9d:09:3b:1d:51:8f:e3:
2b:e1:b2:45:59:f9:0d:81:bc:38:53:b8:2c:2d:36:03:37:22:
f4:ca:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:21:16 2025 by rpki-client