Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: xlfQWww4CZdHE6rwrYXXxCHjHf6iMhHrOCZxda9FefI=
Subject key identifier: 58:49:28:52:A6:59:E6:39:B3:78:09:BC:A2:C4:4D:3F:7A:D3:4F:45
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 0198D7A8A0024BA6C29451043A416F7EB9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 16:00:09 +0000
Manifest this update: Sat 23 Aug 2025 16:00:09 +0000
Manifest next update: Sun 24 Aug 2025 16:00:09 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: MTrQdFbpsVWUDm3Esgd029srqAL0ktbdcfgIZrIhsIY=)
2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:a0:02:4b:a6:c2:94:51:04:3a:41:6f:7e:b9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Aug 23 16:00:09 2025 GMT
Not After : Aug 24 16:00:09 2025 GMT
Subject: CN=58492852a659e639b37809bca2c44d3f7ad34f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:ed:93:66:b0:ba:de:c2:d6:e4:6f:e6:96:
28:df:94:c0:77:75:f7:c3:de:7d:74:2c:68:e0:90:
e6:08:33:c0:0e:9e:16:c7:8a:c2:38:17:61:4a:ed:
f6:54:1d:6b:c2:7c:ee:70:02:4a:a1:ec:e8:aa:da:
f9:67:90:48:d2:19:0c:3a:78:18:eb:1a:d3:2e:64:
d8:2e:62:4b:39:53:08:98:58:fa:d4:1f:3c:22:e3:
37:4c:57:e9:b2:22:af:79:13:73:81:75:75:81:20:
20:98:e7:4f:7c:4b:03:29:bc:ea:34:ea:5c:14:ae:
24:53:88:ad:80:b7:3b:a4:21:64:0b:2a:55:c9:d4:
33:82:2d:a1:75:56:ab:ee:b2:c1:c9:66:52:fe:1b:
05:7e:76:58:05:cb:50:4e:8e:28:80:97:64:ef:26:
ac:21:85:75:e9:f2:e9:c9:af:ec:22:4d:21:33:f3:
64:9d:c1:87:78:61:a7:a8:2b:6d:50:43:e6:28:f0:
2f:e1:60:97:48:48:47:01:c6:d9:52:34:31:b8:2a:
4b:72:da:e5:63:e2:9d:fd:b8:94:ec:e8:bd:b7:4d:
bf:04:65:e8:e9:5a:49:76:a7:0b:11:f3:05:d2:58:
fc:22:90:77:c8:41:3d:6b:10:2e:3e:5a:6b:5f:88:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:28:52:A6:59:E6:39:B3:78:09:BC:A2:C4:4D:3F:7A:D3:4F:45
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4f:32:a9:16:5d:1c:26:25:6a:bc:dd:59:c9:90:08:6a:e8:
28:9b:eb:ee:d4:00:ce:92:7e:10:c4:e0:4f:21:82:f9:50:d6:
7a:dc:52:d9:af:92:05:04:14:ce:52:d5:a6:37:4e:37:78:bf:
c0:de:9f:e1:3a:d0:90:f9:0c:d1:1e:7e:56:bc:70:33:a5:18:
17:fa:60:e7:28:c8:6d:55:76:f5:ae:3c:c6:7c:be:c7:3e:e1:
08:9b:03:c2:86:fa:8f:18:e9:55:13:e2:6e:0f:f8:a5:57:3d:
2f:f9:d3:a4:83:58:87:2b:37:c4:2c:1d:6b:41:85:5d:34:e1:
8b:df:f8:2b:bc:d8:f0:bf:9d:64:3a:c8:2f:87:83:74:d0:3f:
06:33:e9:72:01:7d:1d:c8:02:7f:08:b3:a1:27:6f:c5:6a:44:
1b:aa:21:52:0f:99:3d:f1:6f:23:49:77:66:c0:81:00:e9:3c:
5d:27:d9:97:ed:c0:96:85:fd:8d:a8:ec:73:02:a7:c5:a1:1e:
0a:f1:71:b4:0f:9b:22:53:d6:95:b9:e0:e9:d5:b4:d8:00:6a:
10:db:f0:d8:fa:84:21:f2:21:86:9c:ab:18:d7:8b:84:7a:14:
6a:2e:8d:be:a7:4f:16:17:2d:2a:b8:ec:dc:d2:a4:36:75:c3:
e1:25:a0:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqKACS6bClFEEOkFvfrneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjUwODIzMTYwMDA5WhcNMjUwODI0MTYwMDA5WjAzMTEwLwYDVQQD
Eyg1ODQ5Mjg1MmE2NTllNjM5YjM3ODA5YmNhMmM0NGQzZjdhZDM0ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV/tk2awut7C1uRv5pYo35TAd3X3
w959dCxo4JDmCDPADp4Wx4rCOBdhSu32VB1rwnzucAJKoezoqtr5Z5BI0hkMOngY
6xrTLmTYLmJLOVMImFj61B88IuM3TFfpsiKveRNzgXV1gSAgmOdPfEsDKbzqNOpc
FK4kU4itgLc7pCFkCypVydQzgi2hdVar7rLByWZS/hsFfnZYBctQTo4ogJdk7yas
IYV16fLpya/sIk0hM/NkncGHeGGnqCttUEPmKPAv4WCXSEhHAcbZUjQxuCpLctrl
Y+Kd/biU7Oi9t02/BGXo6VpJdqcLEfMF0lj8IpB3yEE9axAuPlprX4gWlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhJKFKmWeY5s3gJvKLETT96009FMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiU8yqRZd
HCYlarzdWcmQCGroKJvr7tQAzpJ+EMTgTyGC+VDWetxS2a+SBQQUzlLVpjdON3i/
wN6f4TrQkPkM0R5+VrxwM6UYF/pg5yjIbVV29a48xny+xz7hCJsDwob6jxjpVRPi
bg/4pVc9L/nTpINYhys3xCwda0GFXTThi9/4K7zY8L+dZDrIL4eDdNA/BjPpcgF9
HcgCfwizoSdvxWpEG6ohUg+ZPfFvI0l3ZsCBAOk8XSfZl+3AloX9jajscwKnxaEe
CvFxtA+bIlPWlbng6dW02ABqENvw2PqEIfIhhpyrGNeLhHoUai6NvqdPFhctKrjs
3NKkNnXD4SWg7w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:59 2025 by rpki-client