Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: yOkWaBMuuwqlbSHe6HmU829B/2K/5jFYI9vCeCz3iOw=
Subject key identifier: 42:17:59:DB:A1:8B:D8:A3:2B:90:BD:60:F4:29:78:09:9A:70:20:89
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 0196BCDC046364A8AFDD3EB8B02F278DFDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 0285
Signing time: Sun 11 May 2025 01:00:57 +0000
Manifest this update: Sun 11 May 2025 01:00:57 +0000
Manifest next update: Mon 12 May 2025 01:00:57 +0000
Files and hashes: 1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: gWD0cZfa8KMRZgFIX09qDis1NFsAKhg1AwemelOPzgY=)
3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:dc:04:63:64:a8:af:dd:3e:b8:b0:2f:27:8d:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: May 11 01:00:57 2025 GMT
Not After : May 12 01:00:57 2025 GMT
Subject: CN=421759dba18bd8a32b90bd60f42978099a702089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:06:99:d1:70:da:1d:ac:e4:c4:ba:2f:f8:
70:f3:b8:d7:f9:78:1e:55:c3:ae:1a:b9:33:a1:3e:
a7:3b:d7:4a:f2:eb:14:ae:e0:f8:c6:22:2e:d1:96:
93:ca:8c:b3:b7:5b:35:e1:dc:96:fa:71:2d:b9:91:
3d:b6:0b:5c:67:50:1a:ce:2e:bf:af:96:03:93:97:
6e:c2:db:6b:e3:7a:4d:bf:c6:8d:46:b4:00:5a:64:
a7:bd:0b:0b:3f:42:40:32:1d:98:93:61:18:ee:d2:
e5:e9:6a:5b:99:e0:94:c1:9f:d7:11:e0:5f:5b:4a:
63:7a:79:8d:3a:dc:95:2d:31:18:5b:8b:5d:b8:cc:
f2:03:d6:78:f4:f8:73:90:68:93:c9:48:a0:b7:61:
ea:bc:a0:d2:48:6c:09:af:d3:db:a0:e5:a9:7e:9f:
a9:f4:14:43:6c:8f:68:1c:ac:9b:81:ee:e8:24:63:
21:13:b4:1f:d9:72:bc:3a:4d:0c:cb:b6:51:28:54:
74:7d:73:9b:c9:04:a9:9c:a3:64:79:6f:c2:e5:34:
e7:e0:26:ef:76:26:f4:16:f3:c6:78:ce:c7:cd:17:
6f:ff:45:1c:b6:af:6d:42:be:d1:13:a9:dc:e3:e5:
1f:e1:8a:5a:1b:cd:f8:e4:c2:18:46:35:db:53:2c:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:59:DB:A1:8B:D8:A3:2B:90:BD:60:F4:29:78:09:9A:70:20:89
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8c:75:bb:3f:12:0e:5d:fd:73:d2:34:72:54:52:01:8d:94:
d2:90:99:cd:ca:00:64:f3:5b:4e:d6:7f:c3:f2:e7:6b:31:23:
c9:e7:b8:f6:d9:ad:83:c3:4a:13:c4:ed:36:29:6d:aa:7f:f5:
e3:96:d8:a6:5b:be:51:82:19:0e:8d:3b:69:b5:91:41:38:c4:
4f:86:33:b4:e3:a7:cd:83:f2:34:70:3b:51:86:4a:f4:d1:40:
ef:2a:c4:0f:c0:34:4e:df:9c:f6:6b:2c:35:f5:b6:37:51:53:
7c:eb:40:7a:5c:c6:20:0a:62:3f:94:5d:b4:ae:a5:df:04:d9:
4f:89:b0:24:c8:15:ff:3f:56:08:f7:d6:07:cb:0f:e3:27:4a:
61:47:6b:43:cd:f5:80:64:c7:8b:87:e0:6b:63:ec:9e:54:bd:
ab:16:53:4d:92:a9:c5:da:f4:eb:aa:74:a9:cb:1e:4e:b4:8f:
54:9a:e0:d2:7a:96:a0:55:4f:0f:76:0d:c5:a6:45:07:da:d3:
cc:23:bb:cd:08:dc:d0:0a:5a:e7:03:45:6f:73:7f:4a:2b:38:
76:5f:30:d8:31:7a:f6:c3:b4:86:7e:6d:35:64:43:d9:ed:1d:
0a:69:3e:56:0e:36:73:37:83:ad:b4:3f:95:be:a8:37:f5:78:
c6:76:d1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:48:54 2025 by rpki-client