
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: XV5UGnCh/Bh+kJMg9NuTEgiyOGYV/kTePaZjb0yGROA=
Subject key identifier: 81:AA:21:FE:E5:A7:41:57:4C:70:9F:81:F9:6A:6E:D3:BD:14:55:C2
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 01988430C6F9A37592DC04598513336C3D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 142F
Signing time: Thu 07 Aug 2025 11:00:45 +0000
Manifest this update: Thu 07 Aug 2025 11:00:45 +0000
Manifest next update: Fri 08 Aug 2025 11:00:45 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: V0YImnlKRl7jnycddM/uhqMSDQeiCukJkV5MzHEH/kE=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:30:c6:f9:a3:75:92:dc:04:59:85:13:33:6c:3d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Aug 7 11:00:45 2025 GMT
Not After : Aug 8 11:00:45 2025 GMT
Subject: CN=81aa21fee5a741574c709f81f96a6ed3bd1455c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:92:01:1a:ea:b2:35:ab:82:f9:7c:5b:50:
d3:b0:d4:6b:80:4a:34:a1:d7:2c:16:30:bb:e9:e1:
b3:96:85:87:c3:8d:55:90:ff:8b:ab:c3:ab:70:c5:
0c:3f:e0:ec:7f:6b:5d:49:d0:7d:94:31:61:10:b2:
59:bd:66:69:d5:9f:37:72:94:fc:1c:ca:02:ba:02:
92:59:10:7f:10:33:00:a0:18:8d:fe:dd:52:8f:96:
99:af:63:c1:26:95:5f:61:28:d4:de:20:e2:5d:47:
6c:b8:b4:c3:4b:0b:bb:22:72:e1:7b:a1:ee:6e:d5:
6d:80:fa:c3:ca:c7:0c:71:b2:ac:31:fe:32:0e:44:
15:a9:55:c1:ad:c6:7b:91:0a:fc:86:bb:7e:77:15:
e9:6a:90:a9:29:f7:28:29:a7:d5:86:46:c6:67:dc:
9a:77:84:9c:7f:33:19:a2:d4:cf:53:69:b3:62:27:
f9:7c:e1:fc:ac:36:38:28:1e:0a:aa:15:b8:0a:d3:
a4:3e:3c:d6:b7:77:8c:59:19:ba:85:20:09:3e:be:
e5:31:0f:57:5c:8e:de:e4:8c:34:13:57:b4:76:42:
d7:05:f6:33:c0:14:d4:b4:46:aa:7c:e6:2d:c2:7e:
7d:b0:fa:b1:48:d5:2d:52:f4:cc:4c:9c:0d:a3:d7:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:21:FE:E5:A7:41:57:4C:70:9F:81:F9:6A:6E:D3:BD:14:55:C2
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:20:17:83:25:9c:75:9c:1a:a6:ba:a3:61:bc:e6:47:1b:3f:
53:e2:ff:6c:7f:81:75:80:fa:83:6c:51:5a:89:55:d6:41:15:
d3:c7:98:a6:da:86:94:f2:51:bd:f1:b9:51:c5:87:df:89:ff:
c5:82:69:12:5e:89:e2:62:ec:66:b8:18:b1:66:99:2a:1a:9c:
f8:bd:7e:d3:04:80:d2:a4:1d:c7:d4:3d:3f:9f:48:7f:07:f9:
72:df:42:73:e2:41:40:1e:8f:b8:ab:a9:84:3c:49:33:3e:5a:
6c:a2:f5:0e:29:cc:20:36:0b:ef:2a:64:6a:a1:fa:a5:b3:8e:
03:0b:40:d8:54:07:d3:c2:29:fb:ef:19:f0:57:81:f5:4d:a0:
91:5b:f6:13:45:51:5f:04:fc:ab:ee:7c:72:14:f7:ce:91:d3:
9f:0e:ba:4b:20:e9:5d:08:af:b2:57:17:d6:e8:8c:12:07:2a:
99:83:b7:a6:75:93:96:b6:e1:02:d3:7a:5d:15:cc:9a:d7:e4:
68:b1:fa:24:59:18:da:63:ec:cf:50:fd:64:0f:f7:c3:f8:64:
ba:06:67:24:6f:84:68:22:ac:63:2c:f3:f5:fc:ad:82:66:f4:
85:db:1b:fa:4f:d4:d5:dd:95:aa:56:62:8a:72:5f:7d:c3:9b:
8d:0c:ae:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMMb5o3WS3ARZhRMzbD1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk
MzMxYWMwHhcNMjUwODA3MTEwMDQ1WhcNMjUwODA4MTEwMDQ1WjAzMTEwLwYDVQQD
Eyg4MWFhMjFmZWU1YTc0MTU3NGM3MDlmODFmOTZhNmVkM2JkMTQ1NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoniSARrqsjWrgvl8W1DTsNRrgEo0
odcsFjC76eGzloWHw41VkP+Lq8OrcMUMP+Dsf2tdSdB9lDFhELJZvWZp1Z83cpT8
HMoCugKSWRB/EDMAoBiN/t1Sj5aZr2PBJpVfYSjU3iDiXUdsuLTDSwu7InLhe6Hu
btVtgPrDyscMcbKsMf4yDkQVqVXBrcZ7kQr8hrt+dxXpapCpKfcoKafVhkbGZ9ya
d4ScfzMZotTPU2mzYif5fOH8rDY4KB4KqhW4CtOkPjzWt3eMWRm6hSAJPr7lMQ9X
XI7e5Iw0E1e0dkLXBfYzwBTUtEaqfOYtwn59sPqxSNUtUvTMTJwNo9dtlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGqIf7lp0FXTHCfgflqbtO9FFXCMB8GA1UdIwQY
MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt
MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4
LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCAXgyWc
dZwaprqjYbzmRxs/U+L/bH+BdYD6g2xRWolV1kEV08eYptqGlPJRvfG5UcWH34n/
xYJpEl6J4mLsZrgYsWaZKhqc+L1+0wSA0qQdx9Q9P59Ifwf5ct9Cc+JBQB6PuKup
hDxJMz5abKL1DinMIDYL7ypkaqH6pbOOAwtA2FQH08Ip++8Z8FeB9U2gkVv2E0VR
XwT8q+58chT3zpHTnw66SyDpXQivslcX1uiMEgcqmYO3pnWTlrbhAtN6XRXMmtfk
aLH6JFkY2mPsz1D9ZA/3w/hkugZnJG+EaCKsYyzz9fytgmb0hdsb+k/U1d2VqlZi
inJffcObjQyuiQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:17:17 2025 by rpki-client