Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File: m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier: aF5qVSpm0ohIhyndHgLKh4HRXLOeP+r7BgoWfXASlFA=
Subject key identifier: 06:2D:40:DC:A3:43:0F:C1:13:06:0A:0C:B1:37:A2:57:75:D8:EB:64
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 019748FA7E374CB7E4A297316AFC33BE6840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:01:05 +0000
Manifest this update: Sat 07 Jun 2025 06:01:05 +0000
Manifest next update: Sun 08 Jun 2025 06:01:05 +0000
Files and hashes: 1: FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa (hash: 7JYQFVBAJu7wUnu+Gsv5BhX/IXxKlL87JHFuhVHrKK0=)
2: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: PJFlK6Vq8gX3XHO8gyBtYh+YY4tGyFdDsJta4hgaLEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:7e:37:4c:b7:e4:a2:97:31:6a:fc:33:be:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Jun 7 06:01:05 2025 GMT
Not After : Jun 8 06:01:05 2025 GMT
Subject: CN=062d40dca3430fc113060a0cb137a25775d8eb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:14:2f:33:01:ea:69:59:4d:82:a4:18:90:
fe:a1:b2:47:2e:bc:03:a1:94:4f:2e:bb:96:fd:a3:
a3:1b:02:75:45:b3:ac:21:0d:a3:c4:f3:4b:9a:89:
25:0e:84:8e:f7:15:e4:31:59:fa:07:f3:e0:d0:17:
d4:9f:e2:bf:c7:8a:8e:bd:67:22:de:2f:34:3f:25:
d0:85:c4:39:40:3a:2e:01:7b:07:3e:c5:2b:f2:fb:
91:3d:1d:09:e5:24:4c:98:f1:e0:57:c8:cb:8d:9a:
5f:8a:8f:62:04:41:c8:82:12:aa:72:07:dd:89:93:
62:91:f2:f6:5d:3c:38:d5:43:e5:58:47:5e:c4:95:
64:b1:0a:58:2b:78:d4:84:ba:21:b9:64:5d:42:a3:
3a:b3:01:ad:21:71:00:cb:da:9c:d2:81:a2:c6:14:
c1:0c:f8:63:0b:db:c9:e0:a8:c6:f0:ff:28:b7:31:
20:ac:51:89:55:15:de:11:2b:7b:72:6f:3f:3b:f5:
f5:90:72:c6:af:b6:a8:cf:f1:87:e7:6f:b6:b8:d1:
ee:d4:53:eb:c6:27:4d:00:7e:f8:a5:24:3d:43:e4:
13:a3:57:6c:50:8d:0f:06:1a:c8:df:fa:82:0f:cd:
66:57:6d:a2:1b:3d:c9:be:d7:e9:6f:08:0b:e5:b9:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:40:DC:A3:43:0F:C1:13:06:0A:0C:B1:37:A2:57:75:D8:EB:64
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:74:30:13:8e:e1:d4:41:bc:14:dd:a4:8e:f0:0f:fe:c8:4f:
b0:85:9a:69:bb:ff:54:f3:74:ac:ea:f4:9e:c6:4c:e2:eb:31:
83:51:49:6f:30:15:e7:69:9a:ef:fd:ee:22:c2:b2:29:4c:86:
2f:6b:b5:a7:bc:52:6c:5c:a1:60:fa:7b:26:29:71:80:f8:5d:
74:8d:a5:7f:5a:2e:83:ec:cf:12:62:a6:56:a9:8b:16:2e:10:
af:34:45:35:af:eb:bf:57:6f:69:cf:67:53:0c:0d:a0:92:50:
74:79:b5:25:77:4c:29:d5:7d:34:95:2d:68:5e:f1:58:6a:11:
eb:84:29:f1:84:fa:b1:1f:24:40:cb:2c:b7:40:87:b7:b6:3c:
bf:86:24:86:60:3a:d4:05:a6:75:38:e4:3d:39:32:21:5d:1e:
79:34:aa:6b:d6:5a:eb:e5:47:a1:86:1a:f0:e0:ac:d9:b8:77:
d4:9c:94:7c:f7:ec:22:4c:f7:35:75:a9:b6:70:ae:0e:42:33:
12:4c:86:39:d5:c2:ab:12:02:32:55:4c:66:d6:e4:34:18:da:
f0:7a:35:a1:dc:77:24:91:a8:4d:79:db:d9:29:a3:a1:7b:f6:
20:25:8f:94:53:7a:04:18:bc:f3:c7:35:50:9d:19:e6:40:a7:
50:76:81:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+n43TLfkopcxavwzvmhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODM1ZTliNGQzNzZlZTZhYjZjYWQyNzVlMjQzY2Y0MDRj
MTJhZjQwHhcNMjUwNjA3MDYwMTA1WhcNMjUwNjA4MDYwMTA1WjAzMTEwLwYDVQQD
EygwNjJkNDBkY2EzNDMwZmMxMTMwNjBhMGNiMTM3YTI1Nzc1ZDhlYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfIULzMB6mlZTYKkGJD+obJHLrwD
oZRPLruW/aOjGwJ1RbOsIQ2jxPNLmoklDoSO9xXkMVn6B/Pg0BfUn+K/x4qOvWci
3i80PyXQhcQ5QDouAXsHPsUr8vuRPR0J5SRMmPHgV8jLjZpfio9iBEHIghKqcgfd
iZNikfL2XTw41UPlWEdexJVksQpYK3jUhLohuWRdQqM6swGtIXEAy9qc0oGixhTB
DPhjC9vJ4KjG8P8otzEgrFGJVRXeESt7cm8/O/X1kHLGr7aoz/GH52+2uNHu1FPr
xidNAH74pSQ9Q+QTo1dsUI0PBhrI3/qCD81mV22iGz3JvtfpbwgL5bnUFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYtQNyjQw/BEwYKDLE3old12OtkMB8GA1UdIwQY
MBaAFJuDXptNN27mq2ytJ14kPPQEwSr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTROZW0wMDNidWFyYkswblhpUTg5QVRCS3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wYTM4MjctYjZjNS00YzNhLTk2ZTYt
ZThkYjAxOGIzNmRkLzEvbTROZW0wMDNidWFyYkswblhpUTg5QVRCS3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wYTM4MjctYjZjNS00YzNhLTk2ZTYtZThkYjAxOGIzNmRk
LzEvbTROZW0wMDNidWFyYkswblhpUTg5QVRCS3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHQwE47h
1EG8FN2kjvAP/shPsIWaabv/VPN0rOr0nsZM4usxg1FJbzAV52ma7/3uIsKyKUyG
L2u1p7xSbFyhYPp7JilxgPhddI2lf1oug+zPEmKmVqmLFi4QrzRFNa/rv1dvac9n
UwwNoJJQdHm1JXdMKdV9NJUtaF7xWGoR64Qp8YT6sR8kQMsst0CHt7Y8v4YkhmA6
1AWmdTjkPTkyIV0eeTSqa9Za6+VHoYYa8OCs2bh31JyUfPfsIkz3NXWptnCuDkIz
EkyGOdXCqxICMlVMZtbkNBja8Ho1odx3JJGoTXnb2SmjoXv2ICWPlFN6BBi888c1
UJ0Z5kCnUHaBig==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:44 2025 by rpki-client