Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: JJvCqNgn6KDJWeFRVE4pYw72I1XLa44wyOOx+VMLjUw=
Subject key identifier: F2:E6:22:92:67:2A:21:72:86:88:DC:12:72:D6:53:17:2C:00:3D:B8
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 01963D667BFE7A63FA719EE8D0E31B411E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0E58
Signing time: Wed 16 Apr 2025 07:00:48 +0000
Manifest this update: Wed 16 Apr 2025 07:00:48 +0000
Manifest next update: Thu 17 Apr 2025 07:00:48 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: lyZ433JUUgjtjHcg+DzMlyxkKWZsv8uzPVXrOPSk4KY=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:7b:fe:7a:63:fa:71:9e:e8:d0:e3:1b:41:1e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Apr 16 07:00:48 2025 GMT
Not After : Apr 17 07:00:48 2025 GMT
Subject: CN=f2e62292672a21728688dc1272d653172c003db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:32:39:26:67:7d:e7:76:7d:12:24:00:53:
f3:17:01:f9:58:10:06:35:30:0a:6c:d3:fd:c1:22:
88:f2:de:a9:0b:8b:1e:58:ac:90:7d:bf:c8:cc:1f:
53:6d:59:11:fd:9f:54:de:80:ec:fb:70:2d:84:f0:
f6:63:e4:c3:73:e1:30:27:15:96:5d:f1:0e:5c:f2:
bd:e4:5f:12:c5:79:b3:f6:2f:25:18:c0:11:82:eb:
a9:17:91:f9:d5:88:ae:62:2b:b0:19:1c:7f:e9:0f:
4c:2c:0a:93:14:6f:2b:4e:49:ad:68:a4:b0:c7:10:
73:d4:6c:87:65:83:42:88:17:e2:00:57:5e:f8:f8:
79:9a:9f:92:16:e0:cd:1d:3d:dd:4b:fa:8b:57:28:
e1:1a:22:11:42:7a:8e:e8:d5:a7:b4:32:80:ca:b7:
02:14:ad:17:b0:df:ae:f5:2f:10:92:0c:2c:c2:54:
4b:40:8e:3a:2b:6f:69:ca:d7:37:f2:2d:57:e2:68:
d4:96:19:70:e3:5f:65:f7:fb:ea:26:2e:58:4f:9e:
06:6d:1e:78:08:91:45:c8:b0:54:59:4c:60:78:08:
f3:ab:19:b0:9a:44:82:1e:44:df:72:dd:b7:a6:cf:
ca:d2:00:9e:25:5f:eb:28:6e:5d:c7:21:4f:2a:b2:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:22:92:67:2A:21:72:86:88:DC:12:72:D6:53:17:2C:00:3D:B8
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1a:3e:b2:3c:e3:6d:23:9a:d6:30:4e:33:f8:a9:be:66:f8:
58:38:c0:5b:7b:27:be:bb:c6:02:06:12:98:ef:b9:b0:64:ef:
3f:6d:b4:02:0c:9d:b7:84:34:5b:4d:0c:a9:71:f5:1a:e4:04:
a0:08:7e:f6:a8:b7:8f:a7:ae:26:1e:44:51:5a:e9:25:00:3b:
a7:8a:8b:64:8e:7b:be:a6:e4:b8:f5:72:71:52:ef:e0:64:64:
72:0b:91:41:47:bc:92:01:5f:d0:03:18:39:af:d3:94:85:a5:
94:11:e6:aa:ea:06:fc:a6:25:33:32:e0:be:34:b7:23:85:b7:
24:a5:cc:ec:b2:cf:5a:80:19:1b:d3:0a:31:2d:dd:b1:c2:41:
2c:d0:e2:0a:dd:0d:d3:bd:d2:c2:33:9b:e6:19:b7:99:4c:c9:
fe:2f:08:ed:eb:6b:fb:71:9f:0b:40:9a:c3:2f:32:ca:79:ed:
aa:29:c6:81:04:85:8c:f8:6b:44:9b:ca:01:fb:87:a9:da:6f:
16:86:41:62:aa:1f:5e:2e:3e:48:40:9f:57:87:1c:56:74:b3:
57:66:bf:3f:77:76:36:74:d7:29:1f:8b:92:ff:29:af:55:a9:
02:94:58:30:86:d6:5d:d0:0b:7d:87:d5:c8:f7:26:4d:7c:fb:
05:8c:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:18:50 2025 by rpki-client