Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: l966bWrrExaifDRPqV+SMKC9m9Bbr2JBlyflV53LE/U=
Subject key identifier: 08:2D:F8:14:CB:E0:01:9B:20:1F:B0:CA:04:EA:2A:CD:A4:FF:A4:D0
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 0198D65F1FCC9B9DFCED8F02E1E44551E5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 12AE
Signing time: Sat 23 Aug 2025 10:00:14 +0000
Manifest this update: Sat 23 Aug 2025 10:00:14 +0000
Manifest next update: Sun 24 Aug 2025 10:00:14 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: tRtUJKye0JmDF4OWr+NxgOTm0rPtG/ecy4vhW6G66sI=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1f:cc:9b:9d:fc:ed:8f:02:e1:e4:45:51:e5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Aug 23 10:00:14 2025 GMT
Not After : Aug 24 10:00:14 2025 GMT
Subject: CN=082df814cbe0019b201fb0ca04ea2acda4ffa4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:09:35:de:60:57:b5:23:d6:1c:f4:03:74:
fa:47:6c:76:3b:b4:c2:ca:93:56:26:09:37:db:29:
f7:67:9a:04:99:90:7e:71:eb:58:ac:0b:05:37:81:
fb:7a:99:b0:d5:92:d2:7b:92:d2:28:a4:89:53:ff:
d2:a8:66:df:8d:ad:7c:ec:a9:9b:65:b2:26:90:76:
fd:a8:fc:84:ce:c6:dc:3d:d3:0d:1e:7b:72:3c:65:
7d:8d:81:bd:9b:cd:f1:f8:0d:29:b5:1a:d5:dd:e2:
ae:29:2a:02:2e:45:e9:e5:f5:2f:c1:c9:01:c3:6f:
f1:b1:85:64:3c:ff:ea:7e:e4:e2:cf:a8:90:fc:d3:
7b:56:49:f3:41:0d:cd:ef:3f:2e:34:5b:ca:d3:32:
58:22:ff:2b:a2:95:1d:c8:cb:a5:95:09:41:50:54:
49:58:d0:7e:89:92:3c:9f:ec:aa:1a:5d:8b:3a:c6:
57:02:8c:61:e2:b4:6a:3e:ec:67:bd:db:5e:50:54:
c0:d6:f2:a4:52:c2:f5:aa:f1:87:5a:bf:1a:d9:79:
cc:c3:ab:20:97:ad:3a:0f:3a:4e:31:2a:3a:8b:9d:
ea:1a:dc:03:37:2d:79:f5:19:15:2b:8d:36:6c:58:
8e:23:72:b9:c5:1c:4a:cb:4d:10:ed:2d:97:c3:48:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:F8:14:CB:E0:01:9B:20:1F:B0:CA:04:EA:2A:CD:A4:FF:A4:D0
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:01:41:7f:40:d7:e7:4d:85:08:61:ce:12:90:60:4b:ff:
d1:50:7d:04:eb:8d:bd:67:be:56:08:78:fb:b7:a1:2d:fb:6d:
13:26:67:f4:28:cf:49:3f:6d:c4:bc:5c:8c:b6:29:4d:b5:7f:
55:3b:90:19:5d:d8:67:51:4b:9f:84:be:c9:6a:9a:1d:0d:2b:
c1:b3:3b:e9:be:45:10:85:0a:0f:09:36:90:84:76:d7:28:9c:
20:6d:c9:09:74:34:6b:4e:1e:aa:fd:21:eb:9d:4c:9a:f8:ee:
e0:17:59:e0:cd:6d:f4:47:1f:05:10:6b:70:11:32:82:ff:f0:
cd:13:47:ad:76:f5:8c:e8:3e:cb:80:45:f6:3f:8e:d9:59:a8:
2b:59:32:8f:82:37:14:85:2a:88:2b:4a:bf:05:f4:d2:39:cc:
1c:f6:ad:3e:8a:bf:70:ac:99:6c:0c:5d:98:52:83:98:a1:0c:
0e:0c:b2:22:11:4c:84:d6:08:bd:9f:65:8a:70:95:a6:44:7a:
1e:6c:11:f2:6e:ca:3e:5e:75:5b:5a:94:1e:15:5b:22:ad:95:
fb:23:4b:09:2a:32:b9:36:f1:fc:03:9c:dd:cb:45:7e:40:2f:
6b:12:f4:29:41:ce:35:ee:8b:85:7c:e2:b2:4a:b5:a4:ac:69:
7d:65:34:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXx/Mm5387Y8C4eRFUeXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODQ3N2U1NjlkMWQ3ZDYwZjA0NjlhN2NjOGE3ZjQ3NDYw
MzliYjcwHhcNMjUwODIzMTAwMDE0WhcNMjUwODI0MTAwMDE0WjAzMTEwLwYDVQQD
EygwODJkZjgxNGNiZTAwMTliMjAxZmIwY2EwNGVhMmFjZGE0ZmZhNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx8JNd5gV7Uj1hz0A3T6R2x2O7TC
ypNWJgk32yn3Z5oEmZB+cetYrAsFN4H7epmw1ZLSe5LSKKSJU//SqGbfja187Kmb
ZbImkHb9qPyEzsbcPdMNHntyPGV9jYG9m83x+A0ptRrV3eKuKSoCLkXp5fUvwckB
w2/xsYVkPP/qfuTiz6iQ/NN7VknzQQ3N7z8uNFvK0zJYIv8ropUdyMullQlBUFRJ
WNB+iZI8n+yqGl2LOsZXAoxh4rRqPuxnvdteUFTA1vKkUsL1qvGHWr8a2XnMw6sg
l606DzpOMSo6i53qGtwDNy159RkVK402bFiOI3K5xRxKy00Q7S2Xw0hdcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgt+BTL4AGbIB+wygTqKs2k/6TQMB8GA1UdIwQY
MBaAFE+Ed+Vp0dfWDwRpp8yKf0dGA5u3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEt
YWQxNDdkOTE1NzkxLzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEtYWQxNDdkOTE1Nzkx
LzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhn0BQX9A
1+dNhQhhzhKQYEv/0VB9BOuNvWe+Vgh4+7ehLfttEyZn9CjPST9txLxcjLYpTbV/
VTuQGV3YZ1FLn4S+yWqaHQ0rwbM76b5FEIUKDwk2kIR21yicIG3JCXQ0a04eqv0h
651Mmvju4BdZ4M1t9EcfBRBrcBEygv/wzRNHrXb1jOg+y4BF9j+O2VmoK1kyj4I3
FIUqiCtKvwX00jnMHPatPoq/cKyZbAxdmFKDmKEMDgyyIhFMhNYIvZ9linCVpkR6
HmwR8m7KPl51W1qUHhVbIq2V+yNLCSoyuTbx/AOc3ctFfkAvaxL0KUHONe6LhXzi
skq1pKxpfWU0kA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:19:43 2025 by rpki-client