Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File: m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier: xStbeZZY7wacUPrjZKcGrpBgG7NMAmig3nkg6MWQA4A=
Subject key identifier: 1A:22:4A:E6:A5:77:B6:BC:D2:3C:0E:88:EA:ED:9F:A8:58:71:3D:07
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 0199FC590918A4B2EF39CA7A00667DCC4056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa (hash: 7JYQFVBAJu7wUnu+Gsv5BhX/IXxKlL87JHFuhVHrKK0=)
2: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: R7334dEoBBtB4djlFJuFMIZ8ztJ+ZBK5MngJ2Ny/k58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:09:18:a4:b2:ef:39:ca:7a:00:66:7d:cc:40:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=1a224ae6a577b6bcd23c0e88eaed9fa858713d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:08:fa:11:1f:74:a2:4a:db:6e:fb:1c:aa:
ff:e2:32:18:3c:1f:12:f5:df:03:4a:b6:af:4d:dc:
98:2d:33:3e:1b:dc:da:83:05:a2:63:4e:73:8a:ea:
99:11:55:f5:1f:e7:7a:dd:84:ab:af:3d:8f:a6:ff:
e2:ee:46:0b:36:9e:12:42:d3:b5:46:05:5c:dc:1a:
12:2a:0f:a0:0a:50:38:1f:d9:05:b9:21:8c:2b:52:
a9:50:c9:df:b1:08:c9:28:31:a9:b2:c4:cc:aa:04:
14:32:1a:dd:b3:6a:14:fa:0c:7f:82:98:15:46:6a:
d9:20:f5:05:ed:0a:bd:0a:50:51:21:25:93:ce:a8:
00:b5:7b:64:ec:f6:d4:ba:74:7a:de:3f:84:14:11:
4f:55:55:ab:9a:36:9e:ef:7a:a2:0d:bc:7f:1a:00:
d9:a3:5b:f8:a8:9f:03:67:fb:db:2d:6b:03:1f:77:
51:17:a7:9b:76:65:73:06:58:f7:a3:12:83:ec:aa:
cb:e3:af:29:ff:ab:89:d9:e0:2a:20:7c:bd:9e:87:
a5:54:7d:fd:20:af:b7:6c:5b:6e:1b:9f:cb:30:79:
1e:1d:93:af:5d:c5:1c:ba:5d:f4:7c:41:51:2d:d9:
01:2d:41:ed:95:bc:0f:c3:b1:e1:fa:dc:0b:b3:38:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:4A:E6:A5:77:B6:BC:D2:3C:0E:88:EA:ED:9F:A8:58:71:3D:07
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:14:c9:c7:c3:7e:79:77:10:1f:9b:a3:92:31:6f:22:d2:31:
8f:80:7c:6e:4d:b4:fb:20:9e:df:c5:cf:32:36:a0:c5:c2:9f:
87:b2:6a:08:94:8d:48:7b:67:e4:97:86:18:f2:a2:ba:d3:f2:
e3:2e:98:d5:27:81:66:25:d2:ed:de:20:98:6d:4d:e2:c0:a8:
af:00:c7:63:15:b0:98:fc:be:e4:da:ae:2b:f9:ca:4e:bf:9d:
8b:9e:5b:95:b9:5e:d4:bf:3c:8c:62:1b:42:15:41:8a:df:30:
c8:68:00:c6:b9:e6:8a:4b:f3:63:13:95:28:a4:3a:4f:27:10:
67:2f:f3:a9:2b:ce:12:95:27:4d:d9:01:de:7b:92:a2:4a:6d:
42:be:4d:b5:14:b9:3a:04:c3:c9:bc:0b:86:e3:6e:da:13:71:
a5:32:b9:ec:7e:ac:8b:11:27:7b:9b:2b:3c:3d:dc:d0:94:78:
c7:0d:d3:08:fd:d7:8b:61:2d:fc:18:1c:e8:b3:17:e1:9e:33:
81:da:31:b4:21:37:34:20:7f:f0:70:6d:47:5b:0e:8c:11:69:
80:38:8a:d8:b2:b1:e5:76:d2:0a:f7:eb:1a:ac:06:3e:2b:44:
fe:35:4f:7d:ae:e0:92:06:bc:fa:42:1d:ba:7f:f2:ec:2a:71:
b7:d2:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:12 2025 by rpki-client