Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File: m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier: +BJ+HYHhOUQ6rlcjbKs17uR2TP9ZMWjrqwdw0/wwr7Y=
Subject key identifier: 8A:87:CD:C8:77:31:98:74:36:83:AE:54:B6:C8:CC:40:3C:7E:52:FD
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 019881D5730EAA0F8E79B3393AE5904F5114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 00:01:46 +0000
Manifest this update: Thu 07 Aug 2025 00:01:46 +0000
Manifest next update: Fri 08 Aug 2025 00:01:46 +0000
Files and hashes: 1: FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa (hash: 7JYQFVBAJu7wUnu+Gsv5BhX/IXxKlL87JHFuhVHrKK0=)
2: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: wXJaisYUeQIQLCzyzC8Geu3lIrHXJ89vsLOQulLFoV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:73:0e:aa:0f:8e:79:b3:39:3a:e5:90:4f:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Aug 7 00:01:46 2025 GMT
Not After : Aug 8 00:01:46 2025 GMT
Subject: CN=8a87cdc8773198743683ae54b6c8cc403c7e52fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:40:48:f9:52:ba:f4:1c:8e:09:ba:c1:6c:
3f:82:8e:db:aa:ec:9b:18:54:81:1c:a6:4e:a3:cb:
87:7c:03:fc:40:b4:3a:00:16:9c:39:ea:39:96:82:
d0:9e:91:2b:6b:3e:ea:f9:32:e1:97:33:88:45:cc:
c2:5a:bb:ee:19:b3:52:fa:e7:76:df:df:5e:36:ea:
7c:1f:df:81:b8:af:62:4d:28:2f:3b:7b:08:78:06:
89:67:fc:39:3d:0d:c1:c2:37:c3:cb:5a:7a:37:c5:
65:41:8a:0b:f7:b7:6f:ed:20:c2:45:44:f7:ba:25:
07:79:b8:24:cf:ec:09:4f:34:4b:d8:67:3f:51:63:
5a:1f:87:13:f7:14:d8:76:29:bd:d5:41:5e:47:c0:
5c:2d:dd:58:60:f2:73:47:bc:c8:05:98:5a:e9:c2:
d2:f5:93:87:0b:27:06:36:32:7d:ec:f8:17:13:37:
e8:4e:7a:0e:fa:a6:ad:26:3e:3b:c1:2c:1b:d5:ac:
32:ed:b9:17:8c:20:06:28:ab:6a:51:c6:7b:e3:9c:
79:a3:fe:ab:9e:83:e5:2b:d3:fb:fe:b9:68:30:e7:
e4:e8:35:a0:b4:14:bb:23:1d:f9:de:81:f6:c1:03:
69:4b:4d:67:c5:15:c2:f5:ba:be:da:51:6d:93:be:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:87:CD:C8:77:31:98:74:36:83:AE:54:B6:C8:CC:40:3C:7E:52:FD
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:91:bd:12:a6:0a:89:a0:7e:40:eb:b7:cd:50:53:15:f0:
4b:88:fa:a7:dc:fd:21:c9:1b:6d:f2:be:f4:1f:7f:71:53:99:
3e:5f:19:55:7f:28:aa:02:d8:c6:8c:bd:39:e1:ce:ea:a7:89:
03:09:9c:bc:a9:b8:03:82:34:f3:71:0d:58:d5:62:93:77:6c:
96:d6:14:d3:b2:21:d2:2b:ea:d2:b7:13:1a:6c:e7:26:e4:5a:
1f:b1:af:a6:53:31:76:d7:05:c9:d4:45:cf:57:c3:e8:5a:38:
a1:31:1e:fe:bf:57:54:fd:50:1e:d1:7b:0b:70:3f:e8:82:63:
66:c4:73:b6:a9:a9:f2:ba:8b:0f:21:aa:ac:ec:21:19:fb:00:
5c:5e:c7:ef:ab:f9:17:5e:91:6b:50:7e:b4:be:67:20:c7:45:
7a:33:d7:1b:9e:bc:45:65:a9:3a:4f:92:a4:77:c1:54:d0:0e:
31:72:d5:d1:16:70:21:46:0e:c2:dc:20:db:8c:fb:32:21:1b:
1e:73:41:ef:e4:4a:b9:79:e9:be:fa:d2:c8:87:83:5d:07:72:
f9:eb:64:95:0b:49:06:f6:5a:0e:c4:6a:7d:1a:27:f0:6c:f9:
45:4e:1b:cb:a5:2c:cf:b7:9f:72:95:86:b2:86:fa:ad:03:25:
3a:5e:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:03 2025 by rpki-client