Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: G6pj0emPT9ZpFzoMFNr5ZlaoCTOMHfgRiDVk6WdksDU=
Subject key identifier: 46:BE:6A:12:5F:6A:2E:FE:6D:BD:8A:59:54:EB:BF:C8:4E:78:EC:81
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 019A503DDCEC7537D0FA85DDFF00E4436845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:22 +0000
Manifest this update: Tue 04 Nov 2025 19:00:22 +0000
Manifest next update: Wed 05 Nov 2025 19:00:22 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: pumGtHe4JFdFqzjccoMX3oXXDy1LJ+UV3bmzYNr3egg=)
2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:dc:ec:75:37:d0:fa:85:dd:ff:00:e4:43:68:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Nov 4 19:00:22 2025 GMT
Not After : Nov 5 19:00:22 2025 GMT
Subject: CN=46be6a125f6a2efe6dbd8a5954ebbfc84e78ec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:df:3d:dc:a0:ae:a3:c4:0f:ba:86:a6:4b:
c5:0f:b2:16:8f:eb:dc:ce:8a:25:8b:cf:bd:a8:6a:
00:93:0d:5f:7f:fb:79:95:e6:f2:d0:0d:31:19:0e:
f3:8a:6d:4b:ab:3e:a1:d4:54:96:73:19:67:1e:4b:
47:a9:45:98:9f:9a:07:35:3b:03:33:6b:a6:e1:7a:
44:b6:d7:88:0d:43:20:c7:c1:bd:72:f5:04:55:29:
7c:08:ce:ff:7d:3f:43:d0:44:8d:4d:39:3f:1c:bb:
9c:57:6c:16:aa:1c:15:4e:66:35:76:d3:4c:2e:f8:
20:54:bd:c5:c3:2b:ea:63:40:64:f1:e5:e2:ad:2b:
c7:0c:0e:8f:10:db:8d:40:d2:59:6f:a0:b8:14:04:
64:3f:d1:36:8c:31:a0:f7:b3:b8:d2:14:77:90:71:
2d:d0:39:2d:c7:4a:49:d3:1e:97:7e:67:3b:b1:15:
ae:29:d3:5d:c1:5f:04:f5:12:4d:23:9f:b6:23:88:
ab:03:9b:e7:85:6e:ca:fa:ac:54:a1:79:cb:15:a4:
d9:2f:e5:cc:0d:3e:c7:19:51:6d:9e:b9:e9:5b:5c:
e1:94:29:cf:d8:d4:23:47:25:fb:87:fb:47:12:f1:
57:a3:23:68:d9:ad:78:9d:ab:0b:b6:0d:00:f9:b6:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:6A:12:5F:6A:2E:FE:6D:BD:8A:59:54:EB:BF:C8:4E:78:EC:81
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d1:3a:1a:49:fe:8f:64:60:08:81:60:e8:c6:40:c0:18:76:
56:be:22:10:cc:49:ea:56:8a:cd:cc:53:fa:0e:c8:7e:21:bf:
8b:d8:4f:88:f5:e6:40:1a:c1:3d:fd:12:c0:c6:1b:83:9f:54:
2b:08:97:d2:9c:03:e2:3b:f8:0b:18:18:11:8e:88:8d:fc:b2:
aa:68:df:46:1a:f3:3d:da:06:78:de:55:3e:86:9d:d7:53:cd:
ad:d4:86:85:f7:1d:c2:71:53:fe:c1:52:61:91:80:59:82:23:
e7:e5:ba:61:02:9e:ab:8f:72:a1:c3:c7:32:62:d7:9a:2c:4e:
3c:37:08:ac:7e:e4:69:af:84:c3:95:51:59:53:1a:8b:db:46:
04:ce:43:47:09:76:e7:29:3b:c2:2f:6a:2b:40:6e:df:21:6f:
43:a1:9d:44:41:a7:04:74:79:5a:2f:86:41:33:a5:9e:02:e2:
9a:a5:ae:10:83:f0:70:3d:a2:52:0b:c9:e9:fc:b5:eb:39:44:
a8:f8:1e:33:c4:4c:bd:38:2c:75:a8:99:78:59:fc:ed:fc:92:
87:9e:ee:c1:72:92:a7:67:91:8f:99:f8:98:16:f1:3b:8c:45:
fe:8e:f6:0c:c2:69:5a:16:35:0f:1f:f1:0c:83:92:d7:d0:ac:
22:26:d6:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPdzsdTfQ+oXd/wDkQ2hFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjUxMTA0MTkwMDIyWhcNMjUxMTA1MTkwMDIyWjAzMTEwLwYDVQQD
Eyg0NmJlNmExMjVmNmEyZWZlNmRiZDhhNTk1NGViYmZjODRlNzhlYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvbfPdygrqPED7qGpkvFD7IWj+vc
zooli8+9qGoAkw1ff/t5leby0A0xGQ7zim1Lqz6h1FSWcxlnHktHqUWYn5oHNTsD
M2um4XpEtteIDUMgx8G9cvUEVSl8CM7/fT9D0ESNTTk/HLucV2wWqhwVTmY1dtNM
LvggVL3FwyvqY0Bk8eXirSvHDA6PENuNQNJZb6C4FARkP9E2jDGg97O40hR3kHEt
0Dktx0pJ0x6Xfmc7sRWuKdNdwV8E9RJNI5+2I4irA5vnhW7K+qxUoXnLFaTZL+XM
DT7HGVFtnrnpW1zhlCnP2NQjRyX7h/tHEvFXoyNo2a14nasLtg0A+baISQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa+ahJfai7+bb2KWVTrv8hOeOyBMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9E6Gkn+
j2RgCIFg6MZAwBh2Vr4iEMxJ6laKzcxT+g7IfiG/i9hPiPXmQBrBPf0SwMYbg59U
KwiX0pwD4jv4CxgYEY6IjfyyqmjfRhrzPdoGeN5VPoad11PNrdSGhfcdwnFT/sFS
YZGAWYIj5+W6YQKeq49yocPHMmLXmixOPDcIrH7kaa+Ew5VRWVMai9tGBM5DRwl2
5yk7wi9qK0Bu3yFvQ6GdREGnBHR5Wi+GQTOlngLimqWuEIPwcD2iUgvJ6fy16zlE
qPgeM8RMvTgsdaiZeFn87fySh57uwXKSp2eRj5n4mBbxO4xF/o72DMJpWhY1Dx/x
DIOS19CsIibWQA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:21:47 2025 by rpki-client