Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: sICuxr2fjJMds1k/jF4sOaEPonQltWvdqx0kSkjdXCI=
Subject key identifier: 71:59:F6:53:FC:CE:88:03:29:CD:E6:E4:DD:61:8E:6D:4C:FF:62:D3
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 0199FD3489A3BCA7A4F62051439FD08B6A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: MnrV39I3KF+V5HXTsdHxsRp4Fe2w077/uuOqILmqCT8=)
2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:89:a3:bc:a7:a4:f6:20:51:43:9f:d0:8b:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=7159f653fcce880329cde6e4dd618e6d4cff62d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:d3:5c:2e:24:83:70:db:5b:1c:9b:6d:04:
19:bd:5f:1d:9b:be:10:0b:d8:1d:5a:1c:be:ec:11:
38:13:fc:cb:bc:6e:4a:85:5f:75:0d:aa:e8:93:2c:
f9:40:3d:30:fe:5e:95:b0:0a:03:56:83:ad:6e:0a:
9b:5d:ca:e7:30:b4:c2:71:27:fd:7b:ca:73:cb:4a:
64:0c:53:d5:c0:34:e3:33:01:c1:11:1c:71:76:37:
9a:0e:e1:89:19:0e:f7:e6:75:8c:86:ee:61:ac:6e:
c3:dd:c5:88:e4:54:c2:0d:99:c1:47:19:c4:0f:1f:
28:f4:ee:5f:ac:c6:40:c6:09:fd:e7:f6:dd:6a:38:
cb:dc:de:74:e5:0c:fc:9d:fa:f6:f9:d4:02:34:6a:
33:27:35:bc:ba:82:e0:36:95:d8:a3:d4:63:77:db:
07:d6:ed:1a:2b:3d:3e:a8:8b:a1:3f:24:c1:30:48:
23:fa:21:72:5d:44:7f:01:6d:3d:9b:29:e0:69:a8:
99:22:06:e1:a0:1a:ab:a3:ff:9b:4f:43:54:e8:64:
81:4f:5a:8a:d6:75:27:95:fc:fa:5a:0c:3f:b6:0c:
52:1b:a0:23:3d:af:47:13:f4:52:9f:30:88:1b:5d:
40:70:3f:9e:42:a1:71:27:0c:ef:3e:91:05:b2:4b:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:F6:53:FC:CE:88:03:29:CD:E6:E4:DD:61:8E:6D:4C:FF:62:D3
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:24:38:b1:84:82:35:b8:6c:1b:2f:f6:ba:8c:8b:cf:e4:80:
2a:e8:04:6f:43:40:26:74:52:2c:04:99:de:38:a3:9e:d5:f5:
bf:cc:cd:50:17:db:a1:64:6a:cb:e3:e2:85:3c:14:50:fa:3a:
fb:d5:28:da:b8:e2:03:6f:63:f8:2f:a3:2d:63:dc:49:96:10:
46:e8:c4:2d:23:43:e1:be:4e:04:ed:7d:e3:fb:34:a1:e8:71:
92:08:d7:94:14:6e:c1:7e:ee:03:8e:99:b2:de:53:7d:93:44:
0c:0e:47:bf:db:e0:a5:75:2a:39:da:fe:34:f9:36:41:f5:3d:
84:7d:ef:f8:4d:80:26:1c:1c:97:5c:6a:47:25:1d:94:23:75:
f1:68:bd:63:71:fb:7d:0e:ea:16:f6:83:35:c5:b0:7f:41:1b:
78:4a:5d:da:62:8d:b5:00:39:4d:d7:db:ab:d0:df:16:d1:ac:
fa:e8:8c:17:4c:00:b7:73:ea:7d:92:22:46:d3:e4:8a:9b:7d:
91:cd:9e:82:2b:97:3c:e8:e3:ad:3b:9a:3b:85:34:5f:e3:54:
2e:b5:bc:97:5b:72:be:ec:ea:12:77:d1:26:85:14:1b:a3:00:
68:de:01:2a:a4:da:be:10:75:66:88:39:18:e7:27:ce:12:c0:
ac:0d:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:45 2025 by rpki-client