Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: aLc6sNOt1NiSlG7CuBJUGIQ411Fk+zkbvxLpR/L5D+g=
Subject key identifier: 02:FA:B0:B5:03:F3:CF:32:B0:C4:44:A8:72:8E:FB:B6:83:4E:20:58
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 0197C1248E69653FD329D464828F2FC7007C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 13CA
Signing time: Mon 30 Jun 2025 14:01:27 +0000
Manifest this update: Mon 30 Jun 2025 14:01:27 +0000
Manifest next update: Tue 01 Jul 2025 14:01:27 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: OuL+q9vImhXAa04BeWCdv2k12CrxBWttVs/RcFBiivE=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:8e:69:65:3f:d3:29:d4:64:82:8f:2f:c7:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Jun 30 14:01:27 2025 GMT
Not After : Jul 1 14:01:27 2025 GMT
Subject: CN=02fab0b503f3cf32b0c444a8728efbb6834e2058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:dc:6f:81:ac:57:94:26:ab:3a:55:e8:14:
d9:ba:76:10:3e:67:cb:e7:d4:64:0a:e7:25:b5:71:
7e:09:01:68:59:f9:76:f1:5c:b7:a8:64:7f:5d:8b:
81:6e:d4:bb:c4:6d:5f:60:76:a3:ee:8a:9c:22:bf:
9c:95:3d:b4:46:74:bb:7b:4f:86:24:9d:15:3e:c3:
bf:f2:27:6f:7e:77:3e:06:83:2e:26:cd:6f:fd:75:
4b:1d:e0:25:c4:43:1d:7f:64:63:f0:45:d3:5d:53:
bb:66:a9:26:f6:7d:74:a9:4b:12:70:56:46:96:29:
20:94:bc:f0:cb:5a:b7:54:ec:7b:9a:9e:f1:49:12:
ce:49:70:f4:15:e2:c1:51:6a:6a:2e:8b:63:20:f2:
0c:cb:6e:70:35:e4:25:56:7a:91:5f:c6:5d:40:b7:
aa:77:01:65:a2:9b:4c:9c:e2:bc:1c:83:f2:74:5f:
d4:ea:62:1e:dd:bf:d6:38:34:c7:84:cb:0b:c8:03:
4d:f8:fc:82:14:0c:7c:f8:5d:ac:89:14:b3:7c:f0:
a2:82:09:11:fb:32:11:a2:75:18:83:13:82:9a:a3:
7c:17:ea:a8:b1:49:1c:82:13:7e:7b:ad:0a:9f:fe:
41:1e:61:83:32:07:2d:a0:ab:2b:28:f4:db:6b:91:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FA:B0:B5:03:F3:CF:32:B0:C4:44:A8:72:8E:FB:B6:83:4E:20:58
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0c:92:03:75:35:7f:c1:dc:75:d8:29:e0:0e:89:2e:58:a9:
c1:20:d4:2a:e6:97:79:c7:9c:5b:54:5b:2d:81:da:9b:65:53:
8a:67:b8:f6:18:f7:93:27:e4:f2:d9:ce:1a:07:51:bc:67:2a:
ba:00:b8:e1:ec:85:3c:4f:28:6b:f6:93:09:51:5c:84:e6:93:
b2:1d:c1:38:df:f4:4d:1a:8c:8f:e3:3d:6b:e3:5b:3e:be:45:
64:bb:89:71:16:5e:eb:63:92:dc:a6:8d:3d:49:d5:b0:68:29:
57:aa:a7:04:06:ca:26:43:fe:4c:84:ce:65:a3:16:bd:9f:31:
29:9a:81:36:12:39:a9:dc:6d:95:94:c7:4e:a9:2a:e4:17:9a:
2e:d4:4f:f0:1e:49:9e:b7:f8:92:e5:5b:56:5b:60:87:65:e6:
76:47:94:f1:fb:94:c0:35:59:57:6e:f0:5b:22:15:7e:87:e5:
2b:5c:97:6d:ac:cc:e5:f5:cd:09:a7:76:bf:3e:f4:56:3d:dc:
55:80:a1:6a:5d:3c:9d:72:a3:57:5e:79:85:dc:69:37:e3:70:
c0:97:89:c9:d8:6d:92:fd:56:bc:52:6c:36:41:6c:95:af:6d:
b2:59:a1:9d:fc:8e:ad:f2:c8:4e:b5:2a:e0:d8:d6:44:97:3a:
4a:0c:ff:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBJI5pZT/TKdRkgo8vxwB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk
MzMxYWMwHhcNMjUwNjMwMTQwMTI3WhcNMjUwNzAxMTQwMTI3WjAzMTEwLwYDVQQD
EygwMmZhYjBiNTAzZjNjZjMyYjBjNDQ0YTg3MjhlZmJiNjgzNGUyMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohrcb4GsV5QmqzpV6BTZunYQPmfL
59RkCucltXF+CQFoWfl28Vy3qGR/XYuBbtS7xG1fYHaj7oqcIr+clT20RnS7e0+G
JJ0VPsO/8idvfnc+BoMuJs1v/XVLHeAlxEMdf2Rj8EXTXVO7Zqkm9n10qUsScFZG
likglLzwy1q3VOx7mp7xSRLOSXD0FeLBUWpqLotjIPIMy25wNeQlVnqRX8ZdQLeq
dwFloptMnOK8HIPydF/U6mIe3b/WODTHhMsLyANN+PyCFAx8+F2siRSzfPCiggkR
+zIRonUYgxOCmqN8F+qosUkcghN+e60Kn/5BHmGDMgctoKsrKPTba5F/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL6sLUD888ysMREqHKO+7aDTiBYMB8GA1UdIwQY
MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt
MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4
LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwySA3U1
f8Hcddgp4A6JLlipwSDUKuaXececW1RbLYHam2VTime49hj3kyfk8tnOGgdRvGcq
ugC44eyFPE8oa/aTCVFchOaTsh3BON/0TRqMj+M9a+NbPr5FZLuJcRZe62OS3KaN
PUnVsGgpV6qnBAbKJkP+TITOZaMWvZ8xKZqBNhI5qdxtlZTHTqkq5BeaLtRP8B5J
nrf4kuVbVltgh2XmdkeU8fuUwDVZV27wWyIVfoflK1yXbazM5fXNCad2vz70Vj3c
VYChal08nXKjV155hdxpN+NwwJeJydhtkv1WvFJsNkFsla9tslmhnfyOrfLITrUq
4NjWRJc6Sgz/2w==
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:16:27 2025 by rpki-client