Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: 0MwNYYG5Cj7B0vg4LdbyrA1q96FxwewjwpJkWmZ/A5M=
Subject key identifier: 70:23:0F:4F:E4:30:44:12:75:27:2F:24:05:F6:D2:71:F0:87:42:45
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 01974DB2BB68F68D6D86EEE0AA5AA16E4611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 02D0
Signing time: Sun 08 Jun 2025 04:00:48 +0000
Manifest this update: Sun 08 Jun 2025 04:00:48 +0000
Manifest next update: Mon 09 Jun 2025 04:00:48 +0000
Files and hashes: 1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: PuIvdUgOWgbKpE+xnzygMO0OFgpXdF07OIzqRt5RzrQ=)
3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:bb:68:f6:8d:6d:86:ee:e0:aa:5a:a1:6e:46:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Jun 8 04:00:48 2025 GMT
Not After : Jun 9 04:00:48 2025 GMT
Subject: CN=70230f4fe430441275272f2405f6d271f0874245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:4f:d2:c6:81:3b:76:9e:e1:79:aa:7c:e2:
21:d6:91:ae:71:17:24:68:5d:b6:3c:3e:9b:2c:d9:
99:ff:19:8d:de:98:bd:80:ad:cf:d1:60:3e:47:a6:
f0:f0:89:e0:a5:c8:a8:2c:2b:df:33:c9:8c:93:f2:
57:b3:1b:a4:5f:f6:23:69:a5:6f:fa:a0:74:25:2f:
f1:b8:5f:a2:dc:dc:77:8f:cf:9e:43:c9:d5:e4:0f:
13:e9:35:7b:2a:e7:39:6e:a1:9a:21:3f:a1:40:8c:
88:cc:be:43:6e:09:23:63:35:90:2e:3b:84:28:06:
2b:be:bc:b1:12:22:dc:2b:fe:bf:ab:9e:07:e2:06:
36:35:f8:f0:81:a6:39:0c:f7:7b:c6:d2:06:fc:77:
71:0b:69:10:56:78:3b:98:06:d5:47:27:2f:f9:92:
fa:f5:f3:bd:88:dd:26:13:e1:2f:fa:4b:8f:88:f0:
9c:3c:64:e8:47:f5:3d:2f:99:8b:ec:62:e1:a1:89:
5d:f9:e4:64:dc:d6:20:e9:80:c2:99:79:a8:4b:8b:
57:f1:99:93:9c:62:9c:e6:26:67:3d:ac:79:db:5d:
01:1e:b7:dc:95:1d:c2:76:a4:06:af:8c:f2:66:ea:
52:e4:f9:60:dd:ae:1f:92:0a:72:13:11:d8:ae:34:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:0F:4F:E4:30:44:12:75:27:2F:24:05:F6:D2:71:F0:87:42:45
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:70:d2:0c:61:3f:3e:a8:33:55:5d:ed:bd:5e:7b:3e:8f:ab:
24:2d:a9:cc:fe:39:dd:71:97:74:33:b6:55:56:9a:9d:02:7e:
de:ac:7b:20:df:7f:05:a2:d8:94:ee:6d:53:37:09:c6:f0:df:
87:f4:dd:c4:f3:15:cf:b4:75:4e:39:d7:aa:9c:de:9a:4a:79:
3f:43:78:b9:50:0a:2b:f4:7e:5c:f5:0c:00:8f:a6:2b:4d:f7:
1a:aa:6f:8d:b3:48:ff:16:e1:72:5a:8a:54:81:50:06:b9:5d:
d0:41:e2:3e:d8:cb:aa:56:fc:eb:bb:5a:e4:aa:a3:02:f1:3a:
f4:54:98:b4:a9:e4:24:78:3d:92:95:7a:d0:ed:ba:c9:17:54:
9a:31:03:06:65:22:84:f4:25:5b:8f:60:5c:55:3e:5c:1c:40:
9c:f7:75:14:32:d7:dd:20:bd:a5:46:66:24:39:b3:af:06:f3:
41:ce:de:97:17:2c:5f:8f:d8:78:ea:44:31:7c:32:19:10:94:
03:5a:54:e0:27:0f:bf:d3:ac:85:32:5d:be:aa:cb:0b:e7:bb:
86:e8:68:c5:3a:3c:e8:cd:02:d3:e7:94:86:cc:fe:b3:a6:6a:
b3:df:6d:ea:59:11:d6:3f:d5:fc:15:81:b0:ad:d6:51:c8:26:
05:c2:2d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:34:35 2025 by rpki-client