
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: HpAsUZ1sf2OvoejRCtNjk0UdgCtL5KDOFE1UmxtzHQk=
Subject key identifier: C2:8B:EA:A4:4F:6D:8D:27:C4:51:12:62:09:49:E7:BB:5E:FC:3C:07
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 01988166BCE8088F20D8F47C6B84AC676327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1282
Signing time: Wed 06 Aug 2025 22:00:50 +0000
Manifest this update: Wed 06 Aug 2025 22:00:50 +0000
Manifest next update: Thu 07 Aug 2025 22:00:50 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: a0AVx9s8SKZcuNlQCCAQkllSq1nczeLgOfK+YSpMAxg=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:bc:e8:08:8f:20:d8:f4:7c:6b:84:ac:67:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Aug 6 22:00:50 2025 GMT
Not After : Aug 7 22:00:50 2025 GMT
Subject: CN=c28beaa44f6d8d27c45112620949e7bb5efc3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:89:01:7d:59:ac:a0:a3:82:fe:08:57:fe:
a8:98:11:1e:4c:b8:0f:ca:e4:68:79:9a:26:76:d1:
15:c4:b2:65:3c:03:77:e9:2d:6f:23:8e:15:91:30:
ba:10:fe:53:b6:05:7b:4c:33:4d:50:88:6e:6e:2b:
75:76:2e:8b:22:2d:30:75:71:8c:68:7c:c7:3e:4a:
39:8a:db:2e:71:bb:01:a7:f0:da:c9:f4:98:71:42:
3e:1f:b3:ad:4b:14:d7:4f:1b:dd:e9:63:38:54:88:
ca:aa:79:57:4b:04:11:5e:e5:2b:a4:2b:3b:66:cd:
13:9d:dc:30:bf:4c:49:66:92:e3:3a:2e:63:e1:f9:
15:94:d4:b2:aa:09:1f:6c:96:fe:71:d2:23:9b:fd:
74:f8:96:f6:ee:fe:82:6f:a9:5c:13:3e:de:26:70:
45:4f:5d:c6:13:7d:5b:80:0b:a6:60:10:a3:4d:59:
75:cb:45:d8:b5:c1:9a:ad:ca:86:d9:8f:a8:ad:aa:
70:17:86:01:7f:52:99:30:2a:3f:af:56:4d:d3:33:
63:57:f4:99:53:b1:4b:bc:f0:19:52:4d:e7:33:70:
2a:b6:49:66:e5:28:14:d5:29:e4:0f:fa:fc:3f:c9:
2f:0a:62:3d:4f:e9:65:8b:5b:d9:0f:50:43:7c:bf:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8B:EA:A4:4F:6D:8D:27:C4:51:12:62:09:49:E7:BB:5E:FC:3C:07
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a1:05:b9:8d:dd:ae:af:86:27:e7:66:a0:47:1c:54:86:bc:
84:c7:26:18:24:7a:c2:33:60:d3:e9:5f:a7:cb:3f:f6:81:54:
de:a7:b8:00:65:06:22:1a:9a:d7:e1:46:cc:a9:d1:6a:19:d6:
57:16:dc:c9:00:be:1f:3f:fd:55:ce:a0:95:b0:51:0b:55:d6:
d8:5d:5a:36:55:be:ba:00:43:56:f0:9e:cd:ec:c7:06:ca:a9:
a2:5a:cb:38:91:88:cb:03:cc:bf:3a:c1:65:37:53:e3:21:92:
b4:07:dc:62:8d:d9:e5:d6:e5:18:4f:d4:ad:a8:70:b2:3a:8a:
10:95:89:15:69:84:dc:f6:f0:3f:cc:bb:bb:d9:ab:4f:7b:83:
68:20:64:ae:a7:c4:b7:5d:32:84:d4:21:35:02:74:5b:9f:75:
bb:2f:4a:8c:9b:02:e7:34:07:a7:ea:3f:3e:fd:cc:89:cb:76:
64:9d:54:bd:e2:de:32:6d:e4:b3:f3:ff:d1:e0:9e:4e:00:ef:
12:23:fd:9d:39:23:18:65:7b:67:67:6b:cb:f3:48:60:9d:d6:
94:c5:b5:f6:7c:06:77:91:e3:ba:6f:a5:b5:9d:55:6d:3d:45:
b2:56:3f:8e:88:bf:58:71:72:98:00:dd:b3:8d:80:69:1a:61:
b9:49:71:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZrzoCI8g2PR8a4SsZ2MnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODQ3N2U1NjlkMWQ3ZDYwZjA0NjlhN2NjOGE3ZjQ3NDYw
MzliYjcwHhcNMjUwODA2MjIwMDUwWhcNMjUwODA3MjIwMDUwWjAzMTEwLwYDVQQD
EyhjMjhiZWFhNDRmNmQ4ZDI3YzQ1MTEyNjIwOTQ5ZTdiYjVlZmMzYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSKJAX1ZrKCjgv4IV/6omBEeTLgP
yuRoeZomdtEVxLJlPAN36S1vI44VkTC6EP5TtgV7TDNNUIhubit1di6LIi0wdXGM
aHzHPko5itsucbsBp/DayfSYcUI+H7OtSxTXTxvd6WM4VIjKqnlXSwQRXuUrpCs7
Zs0Tndwwv0xJZpLjOi5j4fkVlNSyqgkfbJb+cdIjm/10+Jb27v6Cb6lcEz7eJnBF
T13GE31bgAumYBCjTVl1y0XYtcGarcqG2Y+orapwF4YBf1KZMCo/r1ZN0zNjV/SZ
U7FLvPAZUk3nM3Aqtklm5SgU1SnkD/r8P8kvCmI9T+lli1vZD1BDfL8ArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKL6qRPbY0nxFESYglJ57te/DwHMB8GA1UdIwQY
MBaAFE+Ed+Vp0dfWDwRpp8yKf0dGA5u3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEt
YWQxNDdkOTE1NzkxLzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEtYWQxNDdkOTE1Nzkx
LzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6EFuY3d
rq+GJ+dmoEccVIa8hMcmGCR6wjNg0+lfp8s/9oFU3qe4AGUGIhqa1+FGzKnRahnW
VxbcyQC+Hz/9Vc6glbBRC1XW2F1aNlW+ugBDVvCezezHBsqpolrLOJGIywPMvzrB
ZTdT4yGStAfcYo3Z5dblGE/UrahwsjqKEJWJFWmE3PbwP8y7u9mrT3uDaCBkrqfE
t10yhNQhNQJ0W591uy9KjJsC5zQHp+o/Pv3Mict2ZJ1UveLeMm3ks/P/0eCeTgDv
EiP9nTkjGGV7Z2dry/NIYJ3WlMW19nwGd5Hjum+ltZ1VbT1FslY/joi/WHFymADd
s42AaRphuUlxjg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:38:34 2025 by rpki-client