Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: sjvhOmNdfGtY3o6pLW8ty3BrTzqFQwkZefS7zjZ9O3A=
Subject key identifier: 35:40:B6:09:1B:10:B8:2C:B4:5A:37:3D:A4:66:A8:E7:1D:70:64:CD
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 0199FCC69B099181D3F20A17B19C6F30693B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 14F2
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: LcfsA0Z2yfM9pRv6eWg7bXzVR2IsVmWBP/u6TxxT3uY=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9b:09:91:81:d3:f2:0a:17:b1:9c:6f:30:69:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=3540b6091b10b82cb45a373da466a8e71d7064cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:72:f3:11:0a:b0:ce:28:bf:5b:7e:64:84:
2d:3f:1d:77:40:68:eb:07:55:a2:9a:86:47:ad:50:
69:d3:ec:32:6a:fc:66:e4:d6:34:15:e3:d8:02:6d:
a1:51:c0:ca:65:91:10:38:9b:04:6e:8d:d3:81:29:
bc:a3:03:61:c6:b0:f6:38:e6:0c:ca:b9:bb:f9:ef:
6d:2f:e9:49:31:ff:28:8a:70:bd:50:91:4e:bd:e1:
b8:8f:6c:b7:e9:69:2d:00:c0:16:c2:2d:64:9f:ab:
39:4c:67:0b:b4:fa:bb:53:e4:7e:ef:b9:54:93:f5:
9b:6b:94:9e:b9:3d:51:83:81:9e:45:31:eb:32:45:
0e:98:1f:fc:19:8a:4c:d5:38:63:f3:79:a9:50:e6:
00:65:99:8e:fc:d2:3f:c7:f5:2f:4d:e5:d3:17:fd:
c3:d0:85:04:9f:db:d7:50:f4:0d:8b:39:e8:7e:68:
98:13:fa:7f:e4:40:70:ea:ec:2e:46:4e:f4:2d:78:
26:ab:b3:a6:83:4b:7d:11:5d:0b:c9:e1:09:d4:68:
db:95:97:25:d7:06:7d:fe:89:9e:53:93:76:b4:6b:
65:62:16:0c:5e:ff:df:c9:b4:b1:7a:f7:ba:16:f2:
4d:0f:25:13:d2:18:b0:d9:6c:f2:6b:a9:a9:c4:7a:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:B6:09:1B:10:B8:2C:B4:5A:37:3D:A4:66:A8:E7:1D:70:64:CD
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3b:c9:90:c7:1e:1e:33:03:5a:0d:79:1b:e1:4b:7d:01:19:
98:f6:1f:af:bb:2e:5c:ac:91:bf:c4:08:48:d5:d5:23:c6:88:
c8:31:5d:d9:5e:c9:97:0d:73:41:cc:b7:53:07:ee:ed:4f:47:
da:96:a7:08:48:d1:1b:8a:5c:1d:9c:40:53:aa:15:b3:cc:49:
d4:91:05:96:b6:c0:24:b4:ba:b5:ee:22:b3:16:52:ac:34:23:
86:ea:51:de:66:c9:19:41:e3:13:da:71:25:7a:6a:a2:5c:db:
41:41:9b:fd:a6:c5:99:04:6b:c7:93:41:39:21:b2:4f:9f:32:
a5:92:b5:46:9b:3c:ac:01:4f:68:5c:2d:11:be:a0:b5:3e:b3:
c2:38:8c:ba:72:93:0e:eb:57:28:49:dd:be:a2:85:4a:ea:84:
ad:2e:12:9f:38:ab:96:6b:8e:5a:d0:45:f8:b7:77:4c:03:8b:
1f:00:a0:c8:66:ab:a4:37:0f:69:18:db:5f:9e:b4:3e:3e:94:
d9:f2:fa:9d:2a:e9:52:d3:cf:92:2f:cc:1b:da:14:cf:c5:57:
03:58:18:a3:1d:94:62:4f:74:2f:5d:71:b9:f3:de:c5:37:28:
32:d7:36:36:06:42:cb:be:1c:c9:b2:a0:bb:ae:21:4d:54:6e:
6a:db:18:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpsJkYHT8goXsZxvMGk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk
MzMxYWMwHhcNMjUxMDE5MTQwMTM4WhcNMjUxMDIwMTQwMTM4WjAzMTEwLwYDVQQD
EygzNTQwYjYwOTFiMTBiODJjYjQ1YTM3M2RhNDY2YThlNzFkNzA2NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvBy8xEKsM4ov1t+ZIQtPx13QGjr
B1WimoZHrVBp0+wyavxm5NY0FePYAm2hUcDKZZEQOJsEbo3TgSm8owNhxrD2OOYM
yrm7+e9tL+lJMf8oinC9UJFOveG4j2y36WktAMAWwi1kn6s5TGcLtPq7U+R+77lU
k/Wba5SeuT1Rg4GeRTHrMkUOmB/8GYpM1Thj83mpUOYAZZmO/NI/x/UvTeXTF/3D
0IUEn9vXUPQNiznofmiYE/p/5EBw6uwuRk70LXgmq7Omg0t9EV0LyeEJ1GjblZcl
1wZ9/omeU5N2tGtlYhYMXv/fybSxeve6FvJNDyUT0hiw2Wzya6mpxHojIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVAtgkbELgstFo3PaRmqOcdcGTNMB8GA1UdIwQY
MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt
MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4
LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzvJkMce
HjMDWg15G+FLfQEZmPYfr7suXKyRv8QISNXVI8aIyDFd2V7Jlw1zQcy3Uwfu7U9H
2panCEjRG4pcHZxAU6oVs8xJ1JEFlrbAJLS6te4isxZSrDQjhupR3mbJGUHjE9px
JXpqolzbQUGb/abFmQRrx5NBOSGyT58ypZK1Rps8rAFPaFwtEb6gtT6zwjiMunKT
DutXKEndvqKFSuqErS4SnzirlmuOWtBF+Ld3TAOLHwCgyGarpDcPaRjbX560Pj6U
2fL6nSrpUtPPki/MG9oUz8VXA1gYox2UYk90L11xufPexTcoMtc2NgZCy74cybKg
u64hTVRuatsY/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:37 2025 by rpki-client