Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: q+Nwu++0WSqfiIam3Douyo1liaCjvjRa87Mpo++jMmc=
Subject key identifier: 3A:F1:E5:56:FC:76:AC:89:A9:0C:B9:0B:52:F5:49:EA:DA:AE:B2:AD
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019A2553D6D7D6FED448D832CA2276AFED5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1507
Signing time: Mon 27 Oct 2025 11:00:42 +0000
Manifest this update: Mon 27 Oct 2025 11:00:42 +0000
Manifest next update: Tue 28 Oct 2025 11:00:42 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: kUdZaJseJ5MXTElm+jKuAr8//JMKWDWrzgMYcr8cFU4=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:d6:d7:d6:fe:d4:48:d8:32:ca:22:76:af:ed:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Oct 27 11:00:42 2025 GMT
Not After : Oct 28 11:00:42 2025 GMT
Subject: CN=3af1e556fc76ac89a90cb90b52f549eadaaeb2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:55:3f:a8:eb:04:b3:99:40:a4:0f:9c:a4:
2e:33:c8:78:09:d8:8e:05:14:8c:4d:c8:61:f2:f4:
d3:ab:73:46:9c:fb:c8:ba:06:ef:7b:77:05:f6:82:
71:13:16:34:c8:6c:f0:0a:67:61:6e:de:a9:b6:d8:
09:8e:f3:2c:2e:82:79:79:a9:a6:d3:de:05:85:65:
a4:ac:1d:77:ab:10:03:69:95:ed:63:c9:76:a6:84:
0b:ec:fd:bb:a6:90:a8:c0:73:47:32:45:3e:76:0d:
10:77:e8:e1:c0:a4:4e:b7:85:60:9b:4f:69:de:5b:
60:3f:b7:6b:e9:78:e4:36:27:35:95:b6:8d:2d:d8:
84:55:1e:cf:be:a7:2a:87:4b:92:1e:c7:10:9c:a2:
0d:f8:93:75:a1:7e:4f:10:6e:a4:f1:06:8b:35:27:
4d:3d:7a:df:17:1d:f6:57:b2:48:38:cf:66:24:bd:
bf:a5:a0:02:72:22:76:6d:b4:23:48:e7:58:c8:e5:
d9:5f:04:6d:09:b9:66:ad:40:e4:55:5f:03:4a:dd:
d8:d4:55:a7:e7:42:c3:37:89:9e:9b:46:69:fc:b2:
91:f7:92:7a:3f:a1:f1:b4:20:80:03:5f:ab:7b:8b:
16:ef:16:e8:5b:09:c2:bb:f7:73:b8:27:c2:70:9b:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F1:E5:56:FC:76:AC:89:A9:0C:B9:0B:52:F5:49:EA:DA:AE:B2:AD
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:34:b3:ff:fc:d3:5b:50:78:f7:cb:70:15:c3:17:37:91:3c:
39:d7:a4:01:a1:72:3d:cc:f7:86:95:90:10:37:a5:94:e9:4d:
ef:55:0c:0d:a3:ce:c5:27:aa:44:23:39:2e:1b:b0:bb:23:fb:
dc:27:ab:11:72:fd:60:5d:69:25:8d:2d:ae:f8:17:8f:17:a5:
fe:fb:a0:da:ce:a4:4a:72:14:c3:84:67:7e:01:83:02:48:4a:
47:cb:c6:c1:98:15:5e:26:ad:fc:c5:b4:80:68:df:fe:b6:17:
52:15:31:7f:a5:03:18:05:0a:55:a8:13:80:a0:72:3a:de:b0:
8a:6a:b1:fd:ff:7d:86:b0:a7:03:4b:d5:4a:95:d9:3b:f8:90:
58:c1:47:b2:78:a8:0e:57:e4:8c:e1:ab:61:0c:ff:b6:e4:ba:
3b:06:fb:a3:aa:f2:99:7c:ae:5e:7c:74:d1:f7:61:3a:af:c3:
7b:46:4a:8f:b5:51:be:70:0f:70:2a:6e:9f:42:47:ed:4f:dd:
91:4f:83:0e:cd:3b:18:1b:39:b1:8d:a5:37:7d:a3:63:6c:2f:
c4:ca:80:df:81:d2:d9:a6:3b:aa:c7:f1:be:e6:46:ec:2f:61:
b6:77:ff:32:91:e0:37:92:15:05:f3:40:5c:67:45:9d:03:38:
91:c4:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:44:00 2025 by rpki-client