Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: 2RJ851fScve5DAC+SuqULDAxc3h9X+O/4TOhWlSqLKQ=
Subject key identifier: B8:47:9A:DA:E7:EF:CE:8D:D8:75:6D:B2:69:BE:90:CC:F7:F5:16:5F
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 019770753393F7A122D8BAE91F492E06509B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 02E2
Signing time: Sat 14 Jun 2025 22:00:18 +0000
Manifest this update: Sat 14 Jun 2025 22:00:18 +0000
Manifest next update: Sun 15 Jun 2025 22:00:18 +0000
Files and hashes: 1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: oiCAWoaH8aCQ84xbQVhW1IQtmiqzSc/mXOCqLoCMe4c=)
3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:33:93:f7:a1:22:d8:ba:e9:1f:49:2e:06:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Jun 14 22:00:18 2025 GMT
Not After : Jun 15 22:00:18 2025 GMT
Subject: CN=b8479adae7efce8dd8756db269be90ccf7f5165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:25:a0:5c:ab:7d:6e:df:2b:e7:c5:7b:a6:
04:b8:e4:f4:1e:b1:4e:ed:72:bc:04:1a:0e:76:c6:
73:d9:58:cb:03:a0:a1:8f:89:9c:7d:23:5b:d6:5b:
12:ba:74:68:a2:44:1c:54:22:44:d0:73:7b:97:5f:
c6:be:3b:89:f2:a0:03:52:4c:84:de:8d:87:d9:dc:
11:6c:74:78:60:1c:ea:c4:d9:e6:f9:d7:11:5e:a2:
fc:04:2c:08:7a:25:76:31:3d:08:74:fc:7d:9a:14:
b8:ad:03:68:01:69:8a:18:5b:e1:f9:8e:ad:63:75:
35:5b:10:09:76:a1:83:d0:8d:53:63:56:59:44:71:
99:c8:90:fd:1a:7e:46:b1:e7:8b:be:05:2c:42:8a:
14:57:d0:cc:cf:51:59:bd:a3:7d:b3:ac:97:0b:f3:
e1:59:58:96:eb:7d:68:ca:c6:dc:80:14:c5:bd:30:
3b:2d:4c:5c:9d:a3:ba:49:36:25:ce:33:76:17:78:
12:c9:dd:63:c4:1e:64:ec:c3:05:a7:f0:db:aa:77:
a4:6f:4a:c0:b7:9c:fb:cf:ef:46:e2:e3:b5:1b:c3:
2b:5d:b5:51:f8:14:2f:fb:fc:e8:d9:20:27:63:fa:
1f:1b:17:71:7b:6f:d3:4f:88:2e:1d:4b:3b:79:83:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:47:9A:DA:E7:EF:CE:8D:D8:75:6D:B2:69:BE:90:CC:F7:F5:16:5F
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fa:59:12:60:38:ad:a5:e3:02:b5:00:d8:11:67:fb:41:f2:
3f:d2:67:80:fc:ad:20:8c:ab:e2:89:f6:1c:b4:54:1b:3a:6f:
e5:72:86:94:2e:f8:f5:2a:3b:48:a5:f9:98:96:67:3a:ca:b6:
32:42:0d:ca:7e:57:6a:a9:8e:ec:73:82:08:7e:bd:2c:1e:e0:
fd:3b:48:39:77:a0:50:ec:78:15:7a:07:0b:3d:87:53:3f:8e:
c6:af:22:16:f2:12:c0:ad:7c:d0:97:ef:5e:a4:3a:65:64:d7:
2f:94:86:a1:5b:8d:91:a4:46:b9:ac:0e:28:92:27:64:16:fa:
39:56:93:e5:78:ea:7f:b7:55:21:21:47:67:bb:eb:05:f9:82:
cc:60:0f:1b:e7:93:77:8e:cb:20:79:3b:e9:a6:21:76:26:fe:
b5:5d:c0:45:17:8a:2c:d8:fe:5c:24:35:03:6c:63:8c:95:df:
4c:68:c8:d9:f9:31:05:b3:90:32:bc:dd:ee:55:19:39:5d:72:
40:2a:f0:2d:40:0f:52:5a:18:df:69:77:a3:22:e8:b8:90:20:
4c:95:2f:c8:93:d8:bb:e0:4f:ad:ef:4c:73:28:6e:0b:fe:a7:
3f:9d:a2:74:77:0d:fe:de:03:81:01:cd:ec:22:36:eb:08:c2:
52:ba:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:59:23 2025 by rpki-client