Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: JFfsA5cnbnnpFeOO7gb5Xeru5NxPniAJv6GX7X+c1hA=
Subject key identifier: D4:A6:DD:A1:94:3E:4A:D0:B6:78:FE:7E:DE:2B:F2:96:41:8F:1C:10
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 019A25C1DAE4C41D9D33BC0E93CB9AD75DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 105E
Signing time: Mon 27 Oct 2025 13:00:52 +0000
Manifest this update: Mon 27 Oct 2025 13:00:52 +0000
Manifest next update: Tue 28 Oct 2025 13:00:52 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: Qn7E3FSlKH9B5b3lAXEVLyN/EOJYcT45PCSzYN1VDs4=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:da:e4:c4:1d:9d:33:bc:0e:93:cb:9a:d7:5d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Oct 27 13:00:52 2025 GMT
Not After : Oct 28 13:00:52 2025 GMT
Subject: CN=d4a6dda1943e4ad0b678fe7ede2bf296418f1c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:48:ff:a7:c3:3f:5a:41:1b:15:9a:73:f9:
29:ec:48:a6:8e:54:d9:58:43:e9:9e:65:cd:b3:9a:
75:d0:8f:2b:57:7a:c6:b7:91:cf:05:cc:f7:e0:fa:
54:42:e9:62:3c:a8:1d:b6:8d:39:39:d9:98:65:83:
4d:68:d3:12:b8:95:72:cd:c5:50:eb:5c:7f:db:2c:
1a:49:c6:39:04:47:d7:be:2d:c7:f9:83:c0:02:fa:
7c:7c:46:4a:75:22:59:fd:d4:b4:8c:9a:81:7d:59:
41:9f:9f:28:4a:08:c1:79:a4:a9:d3:d0:b7:70:fa:
00:79:c7:f4:a1:92:31:04:6c:f1:dd:de:1d:b0:d4:
06:96:66:10:7e:b1:1a:2e:68:1a:ba:27:71:48:16:
47:c7:76:33:4e:d3:d3:58:7f:b5:59:a6:b8:6e:29:
aa:05:69:25:54:a7:24:2b:5f:6e:82:fb:3a:1e:e3:
c8:40:4e:68:60:0d:88:83:87:42:92:12:4a:c5:32:
5e:6a:e9:8f:27:e7:b3:1a:40:70:b4:b3:6f:e6:53:
33:35:9d:3e:46:7f:14:46:fa:52:c5:bc:5a:b5:77:
63:78:a9:56:31:37:9b:9d:7c:d7:e3:53:15:a9:76:
d7:66:cc:ae:e6:66:00:d2:21:e4:a8:ef:71:d1:3c:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A6:DD:A1:94:3E:4A:D0:B6:78:FE:7E:DE:2B:F2:96:41:8F:1C:10
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:fc:b4:f6:54:4b:b7:77:5c:ee:d2:e9:a6:e7:72:36:4a:
13:73:b0:9a:59:34:20:7b:50:5a:9d:2c:db:66:91:24:79:25:
ba:db:19:90:0a:92:f9:e8:ce:47:4e:06:4f:b3:b6:b0:d4:9e:
01:02:40:c7:f6:c6:bc:1e:9b:a5:cd:4e:8f:66:d7:51:da:aa:
ac:ca:d7:36:97:82:09:a9:d2:ec:a3:55:3b:e5:a8:bc:fb:12:
e2:34:6c:d1:45:d6:f3:20:bc:ba:f7:8b:42:05:fa:34:7e:f9:
89:38:1d:5b:bc:3a:27:a9:8e:67:27:1d:be:a0:8e:87:4d:d8:
79:0b:6f:03:c4:a5:2a:33:02:77:16:da:93:0d:a4:66:4f:6e:
e2:76:ce:07:af:27:dc:4c:66:ad:08:20:d6:e1:14:a3:3b:f4:
08:8e:3f:b4:c6:85:20:30:e9:a5:98:2e:e8:4b:39:04:5c:d4:
16:11:3c:cb:3a:74:59:06:c3:fd:1d:b3:f1:27:61:56:55:d3:
de:05:f6:aa:3c:93:c1:27:2f:0f:da:0d:13:39:1a:0f:52:2c:
ed:f3:74:ec:9c:c2:78:ab:37:65:c5:14:8b:26:6e:a0:31:6d:
3b:69:58:d1:e4:ec:42:30:70:04:bb:81:5b:2a:59:16:a3:ac:
75:04:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:43:06 2025 by rpki-client