Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: Odueala5xnSw0BumOo6ZWkwdD8b3+uYvJQit8QJluiQ=
Subject key identifier: 19:22:B7:3D:6C:6D:DB:BC:99:C7:11:D6:2A:02:CD:94:77:5E:C4:8A
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 019922FADA5BDE2DE37C08C5993B32D38C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:29 +0000
Manifest this update: Sun 07 Sep 2025 07:01:29 +0000
Manifest next update: Mon 08 Sep 2025 07:01:29 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: WfvGjK6x3iSuCjs2LjKdTNf7tKfgzsT+32G5z8MLhtA=)
2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:da:5b:de:2d:e3:7c:08:c5:99:3b:32:d3:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Sep 7 07:01:29 2025 GMT
Not After : Sep 8 07:01:29 2025 GMT
Subject: CN=1922b73d6c6ddbbc99c711d62a02cd94775ec48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:ae:88:cb:68:19:c9:63:ce:fb:7e:12:c8:
68:62:60:b9:ea:c6:26:7a:55:03:29:12:43:2b:8e:
cb:48:b4:b3:22:75:6a:98:c3:34:d4:58:91:da:07:
99:9a:1a:b0:23:69:ad:59:b0:34:0a:5c:0b:1d:b5:
65:59:f3:f1:30:20:ce:3a:1d:6d:07:e6:29:3f:86:
5d:82:fb:72:30:88:02:9e:65:26:71:5a:a5:b5:c6:
f2:63:bc:92:17:dd:cd:18:04:72:fe:c8:cb:1c:7c:
b1:27:4e:86:43:3f:7e:45:65:c5:9f:6a:d2:c0:d4:
7f:81:45:7b:f5:88:51:c0:7e:17:00:e5:fc:f5:8f:
b1:10:87:de:09:b2:be:06:5e:50:ae:a0:2c:86:2b:
36:1c:77:1c:aa:40:72:db:c4:43:9c:57:b5:e3:85:
2f:29:59:43:af:07:99:ff:00:f1:4a:2f:c3:88:b0:
d5:79:29:d3:2b:d2:84:9b:83:4c:0b:0d:30:3d:cb:
99:63:96:34:12:33:31:97:15:d8:aa:5c:49:5c:fd:
03:7f:02:32:cc:26:ac:bc:0c:52:6a:2c:e9:e6:23:
df:77:7f:c4:7d:47:26:d3:72:ed:5a:d5:1b:38:82:
40:ea:bb:ea:ea:43:15:d3:9c:0a:fe:73:26:e9:3f:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:22:B7:3D:6C:6D:DB:BC:99:C7:11:D6:2A:02:CD:94:77:5E:C4:8A
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d2:41:b1:85:5d:3b:7c:1f:3a:93:5b:af:bf:dc:1d:e5:e9:
cf:99:2b:28:07:99:66:bf:e3:fd:e4:92:8a:4f:0d:f9:49:0d:
70:0b:e5:a7:55:e8:f1:5a:04:7b:1a:fb:eb:c4:b8:6e:b1:96:
a5:b8:35:5d:c6:4f:8a:7f:dc:7d:f7:e5:66:ae:4f:20:0e:05:
6b:12:cb:42:f3:68:a6:30:80:68:74:c2:aa:0f:8f:f2:12:63:
d4:f4:46:3f:8e:fe:a1:85:97:77:e0:dc:b4:6c:4d:7e:d9:d0:
b6:18:15:c2:91:ec:c9:e4:45:ff:c4:5a:26:33:a1:8b:46:cf:
19:14:df:6e:86:a2:6f:f9:15:a2:de:a3:93:22:32:a5:f8:b0:
88:1a:35:db:c5:91:43:bb:dc:56:cf:de:3f:37:5b:d5:3a:f7:
54:82:b4:c2:3f:14:1a:c7:ac:55:ca:e8:e4:e2:7f:8e:4d:b1:
b0:be:15:ca:80:70:cb:f6:9d:88:5c:fa:b6:08:da:12:36:3d:
d9:8e:a3:30:8a:49:d6:f2:c0:13:73:f6:97:11:30:65:32:bf:
55:06:d0:c8:43:ea:c8:74:a5:19:c3:85:f2:cf:b5:ed:c8:57:
99:00:6e:9f:da:82:b9:ca:70:f5:a3:86:52:88:f7:db:54:78:
14:cf:51:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+tpb3i3jfAjFmTsy04xTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjUwOTA3MDcwMTI5WhcNMjUwOTA4MDcwMTI5WjAzMTEwLwYDVQQD
EygxOTIyYjczZDZjNmRkYmJjOTljNzExZDYyYTAyY2Q5NDc3NWVjNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPOuiMtoGcljzvt+EshoYmC56sYm
elUDKRJDK47LSLSzInVqmMM01FiR2geZmhqwI2mtWbA0ClwLHbVlWfPxMCDOOh1t
B+YpP4ZdgvtyMIgCnmUmcVqltcbyY7ySF93NGARy/sjLHHyxJ06GQz9+RWXFn2rS
wNR/gUV79YhRwH4XAOX89Y+xEIfeCbK+Bl5QrqAshis2HHccqkBy28RDnFe144Uv
KVlDrweZ/wDxSi/DiLDVeSnTK9KEm4NMCw0wPcuZY5Y0EjMxlxXYqlxJXP0DfwIy
zCasvAxSaizp5iPfd3/EfUcm03LtWtUbOIJA6rvq6kMV05wK/nMm6T+vTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkitz1sbdu8mccR1ioCzZR3XsSKMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdJBsYVd
O3wfOpNbr7/cHeXpz5krKAeZZr/j/eSSik8N+UkNcAvlp1Xo8VoEexr768S4brGW
pbg1XcZPin/cffflZq5PIA4FaxLLQvNopjCAaHTCqg+P8hJj1PRGP47+oYWXd+Dc
tGxNftnQthgVwpHsyeRF/8RaJjOhi0bPGRTfboaib/kVot6jkyIypfiwiBo128WR
Q7vcVs/ePzdb1Tr3VIK0wj8UGsesVcro5OJ/jk2xsL4VyoBwy/adiFz6tgjaEjY9
2Y6jMIpJ1vLAE3P2lxEwZTK/VQbQyEPqyHSlGcOF8s+17chXmQBun9qCucpw9aOG
Uoj321R4FM9RIg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:26 2025 by rpki-client