Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: BkmDTdOj0NKS+skydBnIQTgLnZOkmwRewYDq9TZnmhM=
Subject key identifier: 0A:33:41:E2:98:01:2D:9E:C5:1E:F5:D2:48:BF:02:3D:51:4A:04:0D
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 0199345BE496D60D4D1AAD801C872F23CD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 03CC
Signing time: Wed 10 Sep 2025 16:01:01 +0000
Manifest this update: Wed 10 Sep 2025 16:01:01 +0000
Manifest next update: Thu 11 Sep 2025 16:01:01 +0000
Files and hashes: 1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: P2RMnOV0Lgd7qlV8Hus5JqWR0jBhMcGn9SvgQfruM4Y=)
3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:e4:96:d6:0d:4d:1a:ad:80:1c:87:2f:23:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Sep 10 16:01:01 2025 GMT
Not After : Sep 11 16:01:01 2025 GMT
Subject: CN=0a3341e298012d9ec51ef5d248bf023d514a040d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:eb:a4:77:06:08:93:2d:53:69:64:65:50:
df:54:9f:d5:5c:a2:b8:05:0d:57:23:2a:40:85:b1:
5c:1e:a5:b5:26:17:7d:f6:36:90:86:3b:76:06:80:
20:5a:e6:51:c9:17:09:8e:90:d4:2f:06:dc:af:00:
ab:0c:89:b6:5f:fc:2c:ae:b1:89:a8:64:25:2c:fe:
ef:f8:2f:7b:42:22:dc:c5:26:24:57:5f:31:35:9c:
0a:4c:c2:65:72:21:00:2f:e4:0c:75:45:a6:f7:7c:
f0:2c:c6:1d:21:6c:4a:c2:35:ed:f2:bb:ea:a5:e0:
c7:57:c3:53:6d:c7:ea:11:e0:f3:51:55:18:67:22:
6f:90:13:5c:f1:1c:b6:24:30:bf:11:68:d9:d1:25:
b2:93:c3:3b:61:bc:e0:22:35:3d:b2:a2:ca:1f:25:
aa:ac:56:45:67:d3:aa:8a:e1:92:da:49:a7:97:f1:
fb:6d:e8:7a:ba:ae:36:02:2f:74:10:6c:95:59:a8:
da:29:42:b2:8c:59:05:16:c8:2c:fc:a8:93:14:f1:
5c:e8:a1:0c:8a:5e:cd:de:6d:51:9f:38:e7:d1:44:
cc:98:7f:51:ea:2c:6a:d4:a7:29:c8:94:8d:2f:e1:
13:0c:10:d8:7d:12:df:d9:93:02:27:2a:d9:54:6e:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:41:E2:98:01:2D:9E:C5:1E:F5:D2:48:BF:02:3D:51:4A:04:0D
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:05:8b:ab:f1:f4:f1:ee:d5:e9:61:39:bf:aa:d2:40:8f:
19:ee:55:37:12:a4:95:92:6c:a8:6c:ef:7e:6e:4f:4a:b1:b9:
13:12:8b:da:92:e2:74:8c:67:eb:03:c1:71:d8:13:d2:05:ae:
59:d4:48:70:69:f3:7b:d4:1e:51:0d:43:4d:2d:52:c7:16:55:
bf:58:cc:8f:91:3f:d6:89:c0:bb:05:4a:eb:4b:64:1d:f1:72:
95:87:2d:26:7e:ce:7a:38:c4:cd:d2:35:7a:4c:dc:0d:d1:df:
b1:09:37:30:03:2b:98:88:86:d7:c5:ce:79:7d:4e:43:d6:4c:
b5:b9:0d:c7:f6:b1:ef:f1:11:61:e8:02:49:97:80:b8:d1:a7:
68:3a:e3:c4:2a:ed:10:0a:2c:27:72:aa:91:e9:2e:07:92:18:
92:d5:4d:e2:bd:b3:e0:c2:3f:7b:de:cd:2d:a6:6c:5d:17:66:
cc:e6:cb:2e:80:a7:77:7c:5b:91:db:35:85:c1:e5:e2:9b:8d:
ef:18:17:a5:5c:fd:9e:c6:b4:fd:5d:80:6a:09:78:b1:2c:94:
64:e2:2e:ec:3d:e7:95:bf:8e:bc:31:2d:ae:2c:0b:07:3d:70:
fa:98:d2:b5:96:cd:e5:32:08:02:7b:cd:a6:8e:f0:32:d7:4c:
19:12:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:43:11 2025 by rpki-client