Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File: m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier: Kb9ojUoF/fZksQ10z5gmOnRORk8Z7qrTCvsgfLIcG2c=
Subject key identifier: 81:41:40:32:A3:53:86:23:43:8B:7E:8A:93:A7:7F:11:9E:B6:08:29
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 01967679C024AF38047633759D580C72FC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 09:00:12 +0000
Manifest this update: Sun 27 Apr 2025 09:00:12 +0000
Manifest next update: Mon 28 Apr 2025 09:00:12 +0000
Files and hashes: 1: FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa (hash: 7JYQFVBAJu7wUnu+Gsv5BhX/IXxKlL87JHFuhVHrKK0=)
2: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: fh6QAEG1mt/V+34EuN9R7anbBED7tBW2xIe8lSQUjU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:c0:24:af:38:04:76:33:75:9d:58:0c:72:fc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Apr 27 09:00:12 2025 GMT
Not After : Apr 28 09:00:12 2025 GMT
Subject: CN=81414032a3538623438b7e8a93a77f119eb60829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:e7:e8:47:54:85:fb:fe:34:82:e8:eb:94:
b1:45:d6:33:46:ef:12:82:58:99:59:6f:65:1f:80:
b1:81:78:07:c3:58:73:b6:3c:19:d6:75:d4:da:df:
e2:bc:05:39:87:92:55:17:1a:d1:c3:a3:e3:e3:eb:
4d:ab:ed:a0:4d:38:6d:85:ec:6f:57:91:90:4c:b9:
36:51:7c:35:c4:18:2d:77:47:3d:24:ef:ab:05:12:
3f:47:21:2d:c8:6a:49:fb:94:d8:b3:f2:8d:4b:63:
e3:d6:b2:30:ed:bb:c8:9a:b4:77:ab:cd:5c:d0:b4:
87:4c:eb:44:3a:66:2c:36:98:a4:04:a7:c4:ee:c6:
76:ab:c8:60:e2:30:82:9d:49:72:72:e7:07:d2:12:
fe:72:5a:ad:3e:7e:21:5f:ec:e1:64:f1:6f:a5:af:
2b:f4:75:21:d9:39:00:2c:d6:26:50:ef:7e:46:43:
47:a3:74:16:b1:b0:17:2a:8f:9e:af:22:c8:40:c2:
c2:06:94:cb:b5:ad:f0:5b:92:7f:d8:84:17:25:ac:
ab:62:14:81:d2:c5:52:7f:28:96:a8:36:b2:9a:24:
52:e0:af:5b:86:7e:b4:ff:52:07:ce:1e:21:ec:ba:
7f:97:6a:b1:ef:0b:3a:dd:6a:55:4d:e6:96:72:e8:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:40:32:A3:53:86:23:43:8B:7E:8A:93:A7:7F:11:9E:B6:08:29
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:4a:f6:21:55:5c:21:63:a6:27:47:00:12:15:52:df:d3:
cd:71:03:f4:86:cb:4a:c1:19:90:16:f0:cb:ec:24:c0:83:f5:
4a:59:2f:5c:d5:a1:6e:13:bd:22:29:8a:2b:02:2f:05:4f:8e:
3a:bc:54:bb:58:8b:db:6f:48:7a:51:88:ae:8f:22:1e:c4:be:
a5:c0:95:52:7d:82:46:b1:5d:35:24:f9:88:c2:82:66:14:b0:
24:0e:95:c1:13:82:bd:17:cc:1c:a4:f8:b4:b3:92:e3:8f:23:
47:bd:33:ee:13:ab:37:f4:41:31:f1:1a:8a:6c:6c:7a:82:2b:
17:69:46:17:6c:de:b5:d3:eb:b5:01:4e:68:13:24:61:0b:e5:
68:5c:53:f5:61:5b:00:38:1d:17:ac:8c:d1:27:c0:e3:c4:f2:
97:cf:a9:5e:9b:77:7a:14:ba:d6:7d:50:b9:3b:af:30:3b:f5:
82:b7:39:66:b6:60:ed:c1:72:7b:b4:09:03:f6:40:4c:35:02:
d0:85:26:64:a3:63:ce:ed:f3:a7:1f:66:ba:9a:a8:c5:d7:f1:
e7:58:63:7c:c4:11:95:b6:4a:3a:a4:df:19:51:ec:7e:94:78:
cf:5f:94:1c:c0:ec:27:e4:d2:6f:e2:1b:cc:d2:d8:b8:c6:c3:
df:33:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:47 2025 by rpki-client