Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: UyEDJ0z+oSyP/s3MwTfAaBryBnwuJBeSKekFYM7NIfc=
Subject key identifier: 38:C1:94:15:77:E4:CF:4D:AD:3D:BF:95:35:40:E9:23:3F:C0:E8:19
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 0198D54DF141C0E10CA1DDD4ADA7C15EABF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1459
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: Hqo5Bb6NOeaOJZbqVWStTCj2pYKqIvOio7ae8SnXDJ8=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f1:41:c0:e1:0c:a1:dd:d4:ad:a7:c1:5e:ab:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=38c1941577e4cf4dad3dbf953540e9233fc0e819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:99:2d:f7:a4:25:35:63:eb:b0:2d:86:3d:
96:fa:4a:a9:bc:7f:4d:a5:86:00:00:9c:b9:c4:85:
c7:e0:74:bd:1a:ea:58:f6:8c:2d:bc:02:44:46:10:
e3:5d:7c:98:93:a6:6c:71:96:0c:64:f6:23:8e:6f:
41:57:b2:32:0e:48:55:9a:68:69:19:a0:04:9e:6e:
20:1f:fb:ac:db:27:4f:ed:a7:14:0b:61:8e:2c:e1:
2c:20:bd:32:85:79:1d:f1:b1:f9:fa:ad:87:d5:af:
ae:3c:ba:dc:34:65:0d:1c:c6:60:91:f9:bf:87:15:
27:cc:d2:ba:52:88:81:87:8d:39:85:74:e4:3c:f2:
17:8d:42:b4:83:2a:7e:97:21:6c:96:af:e7:dd:72:
bd:dc:b6:cf:8f:8e:d9:2a:10:92:7a:09:64:17:21:
f5:56:49:1a:57:bc:6a:de:f2:5a:2f:69:1a:8c:eb:
3d:d3:c2:98:7c:da:3f:f3:71:22:da:fb:d6:be:51:
44:7c:c5:87:7d:53:d9:62:c5:59:55:dd:ee:72:91:
07:b6:8a:89:6d:6e:24:09:63:35:d5:91:e6:50:dc:
95:99:5e:3b:95:27:08:48:2a:d2:07:75:ec:58:6d:
9f:c7:6d:07:92:63:0d:9c:44:40:3b:72:ab:d0:7b:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:94:15:77:E4:CF:4D:AD:3D:BF:95:35:40:E9:23:3F:C0:E8:19
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7e:18:92:1f:08:79:27:cd:10:5b:ef:58:60:bc:43:2e:bb:
db:d8:b8:d7:8d:0b:d8:14:04:8e:42:b2:4f:65:35:58:db:73:
b0:79:0c:39:42:c8:f8:79:1f:52:64:a7:48:f4:45:bf:3e:b7:
1a:5e:47:41:30:ef:0e:f3:e5:93:a6:2a:5a:3b:e3:ba:1a:9f:
8e:93:b2:b2:e8:6c:a1:7b:ae:9a:6f:e3:1b:6f:f4:81:9d:82:
39:29:49:6f:a3:b2:28:95:63:ff:7f:a8:f4:f2:29:ed:1d:a9:
57:61:b7:a4:1e:20:60:26:6d:9a:3d:fa:06:bf:06:93:49:d8:
5b:5c:8d:ae:47:31:17:5e:54:4e:82:7b:ef:a2:2a:3a:34:c0:
89:6d:0c:03:fc:1d:54:bd:76:a5:85:fa:4d:a4:c9:22:4a:12:
8b:e8:16:38:ed:8d:6b:45:25:a5:02:dd:22:01:62:52:5d:9c:
94:55:6e:36:0d:2b:11:a5:81:11:7d:c6:d3:a9:b0:27:4f:a8:
7e:a0:7c:32:c2:69:21:f6:03:b8:d3:07:54:9b:84:24:73:ae:
11:21:0c:f9:75:63:ee:03:62:88:e2:fb:c1:87:b5:ae:8e:9d:
07:c0:4f:37:3e:f9:b9:d5:5d:39:c5:dc:a3:ad:20:a5:ba:36:
3a:e0:3f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfFBwOEMod3UrafBXqv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk
MzMxYWMwHhcNMjUwODIzMDUwMTUxWhcNMjUwODI0MDUwMTUxWjAzMTEwLwYDVQQD
EygzOGMxOTQxNTc3ZTRjZjRkYWQzZGJmOTUzNTQwZTkyMzNmYzBlODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6OZLfekJTVj67Athj2W+kqpvH9N
pYYAAJy5xIXH4HS9GupY9owtvAJERhDjXXyYk6ZscZYMZPYjjm9BV7IyDkhVmmhp
GaAEnm4gH/us2ydP7acUC2GOLOEsIL0yhXkd8bH5+q2H1a+uPLrcNGUNHMZgkfm/
hxUnzNK6UoiBh405hXTkPPIXjUK0gyp+lyFslq/n3XK93LbPj47ZKhCSeglkFyH1
VkkaV7xq3vJaL2kajOs908KYfNo/83Ei2vvWvlFEfMWHfVPZYsVZVd3ucpEHtoqJ
bW4kCWM11ZHmUNyVmV47lScISCrSB3XsWG2fx20HkmMNnERAO3Kr0HsC5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjBlBV35M9NrT2/lTVA6SM/wOgZMB8GA1UdIwQY
MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt
MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4
LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan4Ykh8I
eSfNEFvvWGC8Qy6729i4140L2BQEjkKyT2U1WNtzsHkMOULI+HkfUmSnSPRFvz63
Gl5HQTDvDvPlk6YqWjvjuhqfjpOysuhsoXuumm/jG2/0gZ2COSlJb6OyKJVj/3+o
9PIp7R2pV2G3pB4gYCZtmj36Br8Gk0nYW1yNrkcxF15UToJ776IqOjTAiW0MA/wd
VL12pYX6TaTJIkoSi+gWOO2Na0UlpQLdIgFiUl2clFVuNg0rEaWBEX3G06mwJ0+o
fqB8MsJpIfYDuNMHVJuEJHOuESEM+XVj7gNiiOL7wYe1ro6dB8BPNz75udVdOcXc
o60gpbo2OuA/rg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:59 2025 by rpki-client