Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: cO7hLeh7QlET/wbOc4eLfymhNAN+ldAlDJuSjhh5hmg=
Subject key identifier: 44:02:27:C9:73:91:B4:B4:71:35:D2:A1:3D:88:74:C0:D0:64:7F:B5
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 019A4E4F6DAEE926A115CB430B5AE7D37864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 045E
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: XBXNtBdfGD/a9VeV501yHido53Wvnf2Fit0VTc0vu9o=)
3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6d:ae:e9:26:a1:15:cb:43:0b:5a:e7:d3:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=440227c97391b4b47135d2a13d8874c0d0647fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:85:e6:45:b8:2b:40:0f:ca:3e:9e:db:17:
1b:b9:d1:a5:6b:14:b5:e4:82:da:59:cf:87:de:31:
21:a1:bc:2e:d5:52:8e:fd:d1:e8:f4:48:f5:0a:f7:
78:c2:a1:61:33:68:f0:46:53:90:da:56:6c:7b:29:
46:60:2e:29:eb:89:12:f4:e7:eb:eb:a8:7e:fd:57:
ef:b3:89:38:31:48:df:6c:f1:1c:9c:ab:8c:c6:3f:
bd:e5:cc:cb:14:79:e3:79:ac:cf:82:84:28:0e:9a:
2d:a2:6b:e6:73:e1:50:69:b9:8d:6f:02:ed:25:5f:
01:c2:3c:ea:6a:9e:59:29:ca:fc:37:fb:be:c7:1f:
f2:ff:bd:b0:a9:60:ad:9f:84:c9:a6:e9:3d:27:49:
6c:47:62:06:e4:18:2e:b6:bc:a8:89:bf:b0:d1:5c:
5d:fc:dc:4a:2a:55:53:cf:b4:ba:19:a8:90:37:07:
4b:c4:83:61:24:57:77:4e:70:42:58:ba:36:16:fd:
c3:dd:b1:d0:17:ec:5f:dc:bd:f4:f2:0f:f8:de:90:
5e:8b:a3:20:70:04:a6:ae:91:f0:68:b8:e6:da:e4:
e2:cd:27:49:2e:04:12:47:f9:6b:0a:a9:b0:1f:84:
d1:f1:03:5e:85:59:61:eb:8f:f1:80:f4:0e:39:97:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:02:27:C9:73:91:B4:B4:71:35:D2:A1:3D:88:74:C0:D0:64:7F:B5
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ef:68:f6:5e:bf:8d:13:38:7b:5e:1f:e4:19:9a:0d:aa:23:
cc:a3:40:cc:e9:01:11:b1:14:5a:08:b1:1e:70:5c:21:f3:b0:
9f:31:f8:e2:c3:79:85:ed:ab:f5:0e:4c:8e:34:f5:dc:cb:e0:
c7:91:85:23:b2:70:69:fe:b7:8c:b5:ce:78:d0:ce:22:be:52:
d8:24:e7:97:a2:d7:ec:f4:b8:94:bd:df:98:9a:fe:56:a9:0f:
40:a4:23:29:8c:5c:7a:55:26:71:ee:3c:c7:03:79:db:b1:5c:
5e:0f:6f:22:b6:9c:bb:09:62:a1:0e:ee:50:94:e3:86:1b:76:
85:81:b5:4d:d0:67:9d:2b:fb:3b:c1:06:1a:09:bf:08:8f:4c:
f8:01:34:e4:67:b0:78:3f:05:c2:55:9c:2e:c9:ac:4f:ad:5a:
45:3f:a1:6c:27:b8:f9:00:57:46:30:fc:df:41:0e:86:b0:4d:
5a:3f:32:7f:33:05:42:f8:a6:49:87:f6:83:e0:40:a9:67:12:
dc:35:5d:cf:83:f9:10:d3:bb:11:e5:e0:9f:c6:64:1b:be:fb:
f1:5d:2b:52:81:c4:d5:4b:eb:bd:84:8a:ce:2e:55:98:7f:2a:
70:11:74:be:0e:d6:af:8e:54:6a:62:f8:51:e2:4e:0a:a0:38:
46:e6:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:20 2025 by rpki-client