Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: qelffRM9l5jlGY2SHp6qD9Y33BWcdand2Y1ba822kvE=
Subject key identifier: DE:A6:C9:F8:AC:80:BD:C1:BB:91:77:69:28:80:8E:4E:64:73:21:6D
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 01974BC40AACF31BC3F94BCB52B3E506D4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 19:00:28 +0000
Manifest this update: Sat 07 Jun 2025 19:00:28 +0000
Manifest next update: Sun 08 Jun 2025 19:00:28 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: H690VbegquQv9hAnkJsVNHDcRvpkg1/OzP/H4Bd2pNE=)
2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:0a:ac:f3:1b:c3:f9:4b:cb:52:b3:e5:06:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Jun 7 19:00:28 2025 GMT
Not After : Jun 8 19:00:28 2025 GMT
Subject: CN=dea6c9f8ac80bdc1bb91776928808e4e6473216d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:0e:78:e3:b6:72:be:a5:e7:0f:7f:5b:14:
75:a8:6e:52:9e:40:b0:a5:b1:3b:17:f6:53:0f:1e:
f2:30:99:35:56:1d:da:f7:a1:ec:ed:7f:64:76:b7:
ce:c6:de:9c:7c:13:5b:c8:c3:c7:38:18:99:46:0e:
b2:11:58:2e:20:fd:40:f0:86:66:ab:6c:51:72:b6:
08:83:9d:82:1e:4f:34:4e:8f:fc:66:5c:75:b4:d2:
6d:bf:da:bc:9e:e9:af:2a:a7:64:82:c7:80:fa:8e:
74:df:b9:4c:18:aa:2a:b5:58:25:58:af:f4:e4:79:
ea:1e:41:c6:28:25:df:80:67:0f:51:3f:c3:44:fb:
a7:1a:23:f2:df:70:f3:be:70:fa:e8:05:c3:03:b3:
f7:de:3d:32:bb:46:4a:f8:be:75:fa:e7:ec:4d:fd:
e6:26:be:6a:cb:65:93:82:64:39:a4:a8:df:5d:65:
a2:e6:65:7c:1d:67:47:71:25:8c:7c:77:ff:ef:b5:
a0:fb:f8:c0:3e:62:9a:9c:0c:26:29:7e:31:b9:30:
b2:9a:4b:b4:32:41:83:66:4c:36:12:30:58:22:cb:
ef:e8:e5:e9:4b:91:53:dc:6f:84:63:00:df:2d:ba:
af:e7:2c:e9:82:b3:b0:b2:f3:87:c2:e8:e6:02:b9:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:C9:F8:AC:80:BD:C1:BB:91:77:69:28:80:8E:4E:64:73:21:6D
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8c:ca:77:4f:f2:d1:71:74:60:72:7e:a1:68:c9:ae:11:db:
7d:42:13:b0:d6:5a:4f:e5:51:44:08:0c:fc:12:46:e5:fd:10:
95:2e:60:8a:e4:5e:20:4f:5d:45:d4:7e:d4:a0:28:12:cc:17:
f0:81:9e:2a:53:0d:f4:91:f5:1a:db:3c:13:ed:72:f9:a0:89:
f3:6e:38:53:0d:62:30:4a:87:9b:ce:9b:c5:de:e4:02:88:ae:
3d:fe:20:d9:ea:c6:9b:c9:ed:af:84:f9:35:64:3a:2c:d1:2b:
df:7b:d4:1c:a0:4d:39:dc:90:c9:77:c4:64:f8:b7:87:b7:4d:
57:c7:a0:3c:7d:4b:90:c2:e3:eb:fe:24:6e:54:c9:27:88:aa:
64:5a:c8:2d:2b:b6:2f:db:68:f5:53:f9:f4:30:82:77:4b:62:
c5:68:1b:31:6e:00:17:ed:f8:c7:3a:9a:51:22:3c:30:d7:c3:
6c:bd:cf:1f:28:4d:51:24:2c:e9:89:4f:eb:b5:27:d2:81:ba:
eb:85:46:45:54:63:54:6c:07:2e:a6:ca:68:21:88:89:9f:e3:
93:84:cd:0d:dd:44:01:60:c2:e0:5a:8b:39:e9:17:92:82:71:
be:a4:5f:d4:34:e6:03:d1:94:a0:16:d7:56:fb:c6:00:c6:45:
28:3b:77:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxAqs8xvD+UvLUrPlBtTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjUwNjA3MTkwMDI4WhcNMjUwNjA4MTkwMDI4WjAzMTEwLwYDVQQD
EyhkZWE2YzlmOGFjODBiZGMxYmI5MTc3NjkyODgwOGU0ZTY0NzMyMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MsOeOO2cr6l5w9/WxR1qG5SnkCw
pbE7F/ZTDx7yMJk1Vh3a96Hs7X9kdrfOxt6cfBNbyMPHOBiZRg6yEVguIP1A8IZm
q2xRcrYIg52CHk80To/8Zlx1tNJtv9q8numvKqdkgseA+o5037lMGKoqtVglWK/0
5HnqHkHGKCXfgGcPUT/DRPunGiPy33DzvnD66AXDA7P33j0yu0ZK+L51+ufsTf3m
Jr5qy2WTgmQ5pKjfXWWi5mV8HWdHcSWMfHf/77Wg+/jAPmKanAwmKX4xuTCymku0
MkGDZkw2EjBYIsvv6OXpS5FT3G+EYwDfLbqv5yzpgrOwsvOHwujmArlWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6myfisgL3Bu5F3aSiAjk5kcyFtMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIzKd0/y
0XF0YHJ+oWjJrhHbfUITsNZaT+VRRAgM/BJG5f0QlS5giuReIE9dRdR+1KAoEswX
8IGeKlMN9JH1Gts8E+1y+aCJ8244Uw1iMEqHm86bxd7kAoiuPf4g2erGm8ntr4T5
NWQ6LNEr33vUHKBNOdyQyXfEZPi3h7dNV8egPH1LkMLj6/4kblTJJ4iqZFrILSu2
L9to9VP59DCCd0tixWgbMW4AF+34xzqaUSI8MNfDbL3PHyhNUSQs6YlP67Un0oG6
64VGRVRjVGwHLqbKaCGIiZ/jk4TNDd1EAWDC4FqLOekXkoJxvqRf1DTmA9GUoBbX
VvvGAMZFKDt3bw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:04 2025 by rpki-client