Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File: m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier: bc71n17xk75LJAjQWtqmCLxm6rkySPenK4v1KqmpbCs=
Subject key identifier: 38:91:40:37:E2:3E:3B:46:67:09:4C:D1:0F:3A:8B:2D:F1:38:72:32
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 0199240DD431793EE1472F270EF108CB2E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 12:01:49 +0000
Manifest this update: Sun 07 Sep 2025 12:01:49 +0000
Manifest next update: Mon 08 Sep 2025 12:01:49 +0000
Files and hashes: 1: FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa (hash: 7JYQFVBAJu7wUnu+Gsv5BhX/IXxKlL87JHFuhVHrKK0=)
2: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: vT06nCvBrGQDdQ0bqKucqBz9O2d5Ewl1y4sfH43C3ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:d4:31:79:3e:e1:47:2f:27:0e:f1:08:cb:2e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Sep 7 12:01:49 2025 GMT
Not After : Sep 8 12:01:49 2025 GMT
Subject: CN=38914037e23e3b4667094cd10f3a8b2df1387232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:e2:e6:22:2c:92:7a:67:56:f9:10:70:54:
95:de:50:4b:d5:5f:de:a1:5b:7f:72:09:1f:71:b5:
32:b2:04:9a:f5:92:3a:1c:89:d1:90:dd:37:39:94:
75:ba:1c:28:f8:d2:88:64:f6:87:23:86:5b:f9:6f:
2b:9f:e1:ed:6e:1c:bc:59:07:36:4f:86:49:04:41:
86:da:56:31:3c:95:66:5f:5e:47:71:73:d1:04:f5:
0f:2e:c6:ce:d5:ba:fd:73:b1:ee:03:dd:f4:55:ad:
2a:66:55:04:4a:92:d9:94:10:cd:bf:69:2f:58:a0:
ab:43:3b:6d:cd:8b:01:b3:59:0d:6f:18:ed:09:bd:
cf:e2:59:69:50:cf:99:3e:49:32:1b:e7:66:b0:6c:
a4:c7:2f:5b:c5:c0:3c:49:ec:91:57:b1:b6:48:5c:
55:4a:fd:b4:c2:cc:b8:e7:86:2d:61:05:6c:19:94:
9c:9e:4a:5b:4b:39:25:41:49:94:6a:ed:21:02:a0:
84:e4:8b:62:b9:a6:08:8b:1f:8a:d4:32:71:69:3b:
44:9b:51:21:55:c1:8a:fe:e1:b8:48:f3:c8:94:9a:
e5:aa:70:46:4d:55:b9:07:37:cd:81:45:9e:80:b9:
80:23:7f:f7:0a:e5:9a:82:1a:e1:bd:b7:50:16:e5:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:40:37:E2:3E:3B:46:67:09:4C:D1:0F:3A:8B:2D:F1:38:72:32
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:21:65:c0:ba:08:de:60:ea:30:b5:a0:63:e2:9e:5e:63:b7:
85:8a:50:dd:ea:76:c6:64:f9:1e:f1:8c:31:97:43:74:c1:7f:
24:ac:2b:73:48:97:e1:04:56:41:6c:fb:85:6c:9d:c0:e9:df:
ed:1a:c6:80:6e:72:d1:fc:1d:28:58:55:8d:7d:d8:f5:93:42:
05:61:1b:05:49:c3:a5:b6:5f:38:93:da:b3:c6:05:39:fe:61:
0a:58:dc:5e:8d:a7:aa:09:eb:58:2d:24:a1:44:7b:cd:4f:4f:
bf:c5:60:9a:52:03:a8:d0:97:b1:05:8c:8d:94:75:3a:37:bd:
76:f3:1a:de:4b:66:a6:1e:bb:02:f9:be:eb:21:1c:b4:14:8c:
35:85:2d:f4:34:44:48:72:af:c1:7a:6d:59:98:a9:f4:ff:d9:
a6:6c:cd:3c:e5:14:af:4b:00:d3:05:1a:87:3b:b9:e6:58:c2:
fc:46:c0:88:85:a0:42:66:75:0d:ed:a1:3d:3a:29:6c:a4:ed:
b0:6c:1c:91:ee:07:74:f3:fd:b7:e4:7d:a3:91:3c:d8:03:8f:
24:48:21:a3:cd:e6:71:fa:0f:a4:a1:ff:28:f4:a9:cc:5d:20:
98:bf:0c:d2:ba:e7:18:e6:80:cd:0f:fd:a8:cd:51:df:18:d0:
88:c5:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:00:40 2025 by rpki-client