Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: /eyMRCckCSe0GQ4q690Qh6jG/iL8nvfGdzdNGgq0/Qw=
Subject key identifier: 73:36:DF:4B:DE:F8:85:F4:41:DC:05:B2:DB:86:49:04:1A:0B:67:8C
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 0199FD33F42F6EE809A6C8949F0B4FC76746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 0434
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: xmL/JmRNTjM/gnIPF5FWFvJtPfKfQyA2hYhef73BYKk=)
3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f4:2f:6e:e8:09:a6:c8:94:9f:0b:4f:c7:67:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=7336df4bdef885f441dc05b2db8649041a0b678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:2d:b3:a7:85:46:3f:83:b6:c4:43:8d:cf:
d2:1f:17:24:bf:01:20:88:98:ca:7c:14:1c:45:20:
0f:4b:a7:8a:d2:cd:2c:fb:a8:1a:48:2e:0d:86:36:
86:b1:6b:5f:b5:16:16:56:59:95:a4:62:ff:f8:64:
e7:a3:8d:b8:1d:5a:50:e4:f1:01:89:67:1a:cc:14:
e6:28:02:36:73:30:c3:33:44:f0:79:ae:23:f6:ba:
63:36:0c:07:79:06:d0:c5:5e:9e:ff:89:58:d3:99:
60:d5:96:5a:f8:66:ba:f0:48:b5:83:ca:e3:c8:dd:
26:2e:cc:a7:c6:14:03:8e:e2:4a:f5:f5:04:eb:09:
59:ee:87:2e:47:09:94:7f:8a:9c:d7:f5:b2:b6:b6:
f4:e2:5d:33:55:a0:5c:7f:e6:ac:eb:b3:ad:c4:be:
ed:13:45:72:65:7c:ea:6e:ee:c4:4c:26:8f:0a:a0:
0d:80:fd:07:c2:6b:90:25:4d:99:03:b7:76:34:e3:
5c:20:6b:1b:26:7f:4e:22:8a:d6:4e:06:f1:68:f8:
8a:83:06:63:67:a4:70:34:d5:93:a7:3a:08:22:bb:
ec:c0:6e:9e:82:e2:4f:f9:3e:05:a5:f6:95:d5:67:
07:9b:4e:2e:de:27:ed:41:e9:c3:b4:94:60:5b:fb:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:DF:4B:DE:F8:85:F4:41:DC:05:B2:DB:86:49:04:1A:0B:67:8C
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bd:c0:c6:3b:ff:4d:82:a4:06:8b:89:76:3f:46:54:98:2c:
da:c1:74:28:f4:94:5a:62:71:e9:d5:c7:a1:2c:64:36:86:ba:
3a:d0:1c:86:e3:c2:00:ea:5a:0d:a9:cb:ff:df:a3:f4:b9:b8:
63:2f:24:ec:1d:61:25:27:b9:b9:1b:c5:1c:e2:89:19:84:b7:
b3:6d:2d:c6:e6:d1:14:6f:fa:80:35:c5:a4:30:e5:6b:96:dd:
8d:61:96:2e:83:27:05:5b:65:e5:86:7d:13:15:e0:e4:aa:f8:
88:07:25:1e:75:18:c2:04:9e:ba:c1:39:b4:d8:d0:01:f6:07:
bf:b1:29:71:92:0b:00:2e:0f:b8:73:73:06:d0:94:8b:5b:e6:
9b:7f:89:d8:a9:98:4c:09:b2:97:d5:58:7a:da:6b:86:b8:b9:
e2:5c:16:34:db:b6:1e:9d:0e:1c:eb:24:7e:00:0e:7a:62:9e:
88:50:dc:68:09:2c:a0:5f:4d:1e:cc:87:0b:60:3c:32:31:7d:
14:9b:a9:18:7d:49:db:b0:6c:45:09:22:54:3c:50:aa:d8:69:
f3:ab:63:b2:58:87:2b:94:8b:ce:87:62:15:5f:38:31:5b:ea:
ea:10:a0:44:14:94:7c:8e:5a:1d:00:20:1e:0c:77:43:9d:83:
75:32:17:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/QvbugJpsiUnwtPx2dGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzdhMmZhNGI3ODc3M2E2NjIwMGZlYTRjNTg1MDdhOTJm
MzEyMDMwHhcNMjUxMDE5MTYwMTA0WhcNMjUxMDIwMTYwMTA0WjAzMTEwLwYDVQQD
Eyg3MzM2ZGY0YmRlZjg4NWY0NDFkYzA1YjJkYjg2NDkwNDFhMGI2NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug0ts6eFRj+DtsRDjc/SHxckvwEg
iJjKfBQcRSAPS6eK0s0s+6gaSC4NhjaGsWtftRYWVlmVpGL/+GTno424HVpQ5PEB
iWcazBTmKAI2czDDM0Twea4j9rpjNgwHeQbQxV6e/4lY05lg1ZZa+Ga68Ei1g8rj
yN0mLsynxhQDjuJK9fUE6wlZ7ocuRwmUf4qc1/Wytrb04l0zVaBcf+as67OtxL7t
E0VyZXzqbu7ETCaPCqANgP0HwmuQJU2ZA7d2NONcIGsbJn9OIorWTgbxaPiKgwZj
Z6RwNNWTpzoIIrvswG6eguJP+T4FpfaV1WcHm04u3iftQenDtJRgW/tp3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM230ve+IX0QdwFstuGSQQaC2eMMB8GA1UdIwQY
MBaAFGg3ovpLeHc6ZiAP6kxYUHqS8xIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNzY5ZTMtZTIxNS00NGE1LThhMmUt
MGU5ZGY5OWQ5MzM5LzEvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iNzY5ZTMtZTIxNS00NGE1LThhMmUtMGU5ZGY5OWQ5MzM5
LzEvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc73Axjv/
TYKkBouJdj9GVJgs2sF0KPSUWmJx6dXHoSxkNoa6OtAchuPCAOpaDanL/9+j9Lm4
Yy8k7B1hJSe5uRvFHOKJGYS3s20txubRFG/6gDXFpDDla5bdjWGWLoMnBVtl5YZ9
ExXg5Kr4iAclHnUYwgSeusE5tNjQAfYHv7EpcZILAC4PuHNzBtCUi1vmm3+J2KmY
TAmyl9VYetprhri54lwWNNu2Hp0OHOskfgAOemKeiFDcaAksoF9NHsyHC2A8MjF9
FJupGH1J27BsRQkiVDxQqthp86tjsliHK5SLzodiFV84MVvq6hCgRBSUfI5aHQAg
Hgx3Q52DdTIXjQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:36 2025 by rpki-client