Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: ehxs88KTHyeVOSEdC1nERbhxK9eIN+LzgBdcO6bvS7Y=
Subject key identifier: 9C:F8:29:3A:F4:9B:4A:DC:E2:F9:66:58:8E:07:0B:8B:A6:EE:5B:38
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 01967944197FCF1155DE3741282B96BEAF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0E77
Signing time: Sun 27 Apr 2025 22:00:28 +0000
Manifest this update: Sun 27 Apr 2025 22:00:28 +0000
Manifest next update: Mon 28 Apr 2025 22:00:28 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: zqxTPoT22D/QbYBEEchGMAElZJvnjqDOvou0JzT/OmA=)
3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:19:7f:cf:11:55:de:37:41:28:2b:96:be:af:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Apr 27 22:00:28 2025 GMT
Not After : Apr 28 22:00:28 2025 GMT
Subject: CN=9cf8293af49b4adce2f966588e070b8ba6ee5b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:47:76:57:b0:35:65:b9:ed:f7:e6:cf:9e:
50:00:eb:b9:ec:16:63:09:01:c5:75:ce:b4:18:5c:
2f:2f:75:53:c3:45:7c:60:1d:9b:75:5f:02:02:e5:
32:0b:40:f6:b3:4d:fb:87:3b:43:48:3e:75:9b:df:
98:ee:68:c0:bd:fe:ab:9d:a9:fa:04:48:b0:af:bb:
73:c6:b0:24:24:f9:36:c5:c0:cc:ae:46:a9:d9:5a:
87:82:4b:6a:c9:2f:b3:f4:13:ee:70:64:d8:66:e2:
66:9f:3e:29:b9:f5:21:ab:28:4e:5b:5a:3a:e1:5a:
5a:75:62:ec:a6:0d:2c:81:de:9d:94:87:68:c5:08:
3a:12:45:60:5a:69:53:ba:0a:85:b5:a7:bf:98:03:
d1:35:6b:9c:df:14:01:2e:53:df:40:ad:ce:f0:38:
2b:83:2e:4d:07:37:1a:90:af:41:86:7d:12:9a:91:
33:e9:c4:5f:ed:8d:31:5e:fc:d3:96:d0:d5:7c:e4:
41:b7:8e:52:dd:00:99:c5:a0:ea:86:7d:41:e6:67:
14:b4:41:3a:3b:61:0c:e6:5c:41:ba:1a:0b:c7:f7:
f1:56:e1:50:6b:9b:ce:11:75:da:1c:28:a3:8f:80:
8a:30:88:ec:e2:c4:f0:11:e9:da:f9:ca:69:2b:31:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:29:3A:F4:9B:4A:DC:E2:F9:66:58:8E:07:0B:8B:A6:EE:5B:38
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:46:ea:c5:b8:2b:dc:09:11:13:14:ac:37:93:a3:71:44:6b:
9e:ea:aa:e4:2c:06:9e:e6:a7:9a:2a:56:98:28:b8:0b:ff:56:
13:2f:cd:c1:bf:ad:81:6e:19:2b:eb:0d:cf:1b:8f:98:06:dc:
68:48:a4:4a:a3:53:ab:a4:90:fe:e1:ff:72:9a:22:5f:49:62:
bc:d2:c4:d8:b6:44:31:e9:27:c7:9b:ae:8e:02:0d:b0:f6:6c:
cb:4f:b9:b8:c3:5e:09:f2:64:80:4a:10:79:da:3c:bb:94:ec:
64:38:66:1b:ff:c0:61:89:03:22:d6:3b:ec:42:e2:0a:fc:e7:
7b:fe:6d:72:f0:61:c9:fc:a9:c8:fd:70:0b:85:89:10:67:b6:
bc:0d:62:f2:9f:e1:45:d9:f7:19:f7:a6:c3:24:9e:90:70:1e:
8e:74:7a:aa:3e:ca:80:34:df:fa:8f:71:ee:34:9d:04:f6:21:
d8:aa:3b:19:63:95:e8:04:de:7f:19:f4:fb:e6:36:68:62:51:
01:60:76:bb:06:78:a4:06:bc:2d:b4:06:66:37:d0:6a:f9:cf:
14:03:46:25:ba:59:61:cd:3c:0c:67:d7:6a:8c:7d:1a:71:dd:
9a:1a:66:df:d7:0e:b4:f8:e3:1c:8d:89:4c:4e:b7:d7:ec:6c:
d9:3e:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:10:04 2025 by rpki-client