Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier: 3vH7kCh1p16ZhwKgu+DeGryZIB7dTNf+x20A6OsweaA=
Subject key identifier: 38:83:F1:2C:33:19:30:BB:04:62:94:3D:3B:74:FC:D8:23:EA:58:B0
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer: /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial: 019849D2F4F3D290CD219C4BB201EFE2B7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number: 0A95
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: 57gi5HwuaDDLcilL8aQU2Sip7bEozRRbcILihmyfmN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f4:f3:d2:90:cd:21:9c:4b:b2:01:ef:e2:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=3883f12c331930bb0462943d3b74fcd823ea58b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:b9:e6:0a:df:91:fc:08:8e:99:7a:bc:aa:
ab:b5:9a:1e:e2:27:c3:61:f8:d2:6e:86:8c:36:b3:
1e:eb:a6:96:03:50:7a:c2:41:d8:07:aa:31:22:03:
8a:fa:b6:11:0f:4b:50:a2:0d:eb:cb:94:11:10:80:
31:5c:2d:d2:00:df:aa:61:bc:e2:32:6a:38:f7:06:
6c:48:9b:85:27:c5:c4:bc:69:aa:80:c2:56:2d:8d:
fe:cc:a5:8d:44:3b:a7:d6:dd:35:fc:c3:8d:cd:a5:
97:f3:c7:ec:af:7f:1c:31:8a:3f:b0:97:ac:14:72:
0c:40:24:ce:c7:1a:ef:64:86:77:a0:d6:85:3b:64:
73:79:99:e3:a2:47:4d:c5:89:84:62:7b:07:73:cc:
e2:52:82:2d:de:1d:be:50:b5:a2:74:39:ca:bf:7a:
84:f0:08:55:ab:87:c1:28:aa:d5:bb:5c:be:04:9a:
45:4a:cf:df:80:19:48:aa:c1:f3:9e:64:e2:5d:5f:
41:db:6c:48:6b:66:8b:03:cc:96:55:63:b7:bc:a9:
92:19:a0:4b:f3:b1:72:6d:94:c5:7a:e3:84:15:02:
05:3d:c6:10:27:5e:c6:3b:3e:e7:8c:64:83:ff:01:
5f:ab:b6:bd:2b:28:9b:b4:40:29:e9:d0:0a:78:47:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:F1:2C:33:19:30:BB:04:62:94:3D:3B:74:FC:D8:23:EA:58:B0
X509v3 Authority Key Identifier:
keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:99:5c:27:ac:e9:d9:b9:89:ae:fc:2b:50:c7:63:c0:e3:
8a:c4:f6:08:38:1a:29:33:6a:1e:e3:e7:d5:1b:2d:a8:28:e4:
56:2e:8b:d4:64:97:a0:a5:35:89:f7:b9:86:2f:27:6d:e4:5d:
2e:c2:e1:6a:d8:ad:03:a9:fe:a9:c5:25:24:31:b5:0a:70:cb:
eb:c3:e7:65:fc:1e:0f:43:88:de:03:ed:1d:9d:37:e0:ea:e8:
8d:e0:75:d2:2d:d5:d3:cf:5f:af:2d:5d:7c:9c:0c:95:85:cc:
76:f0:20:f2:ed:45:f8:3a:f1:c6:80:99:7c:b1:81:0c:84:01:
f6:01:19:2d:ae:92:af:30:5c:0a:0f:d2:d7:af:c5:8c:9c:00:
f2:e7:27:59:ad:45:77:44:8e:7d:ef:34:79:7c:ec:7b:7e:09:
29:30:ec:87:77:5a:49:f0:9f:a0:d1:bf:ec:6e:c1:40:b9:44:
97:27:af:50:4a:22:38:ac:d0:c4:23:04:7c:ba:67:99:c0:b1:
f8:5c:c9:45:11:dd:ca:b4:f3:9e:b5:76:00:8b:fb:14:b5:23:
40:25:3b:ff:e1:2a:71:33:d9:b4:61:9a:30:cd:7c:d4:12:7d:
57:6e:2a:2a:f8:60:f1:16:de:cd:6d:b9:b4:f1:2c:d6:92:d6:
db:0b:c9:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0vTz0pDNIZxLsgHv4rfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDQ2ZGZkZWU4ZmNjOTJkNzQwZTBiYjhjOGI4MjkzMTU1
YTE0YmUwHhcNMjUwNzI3MDMwMDE4WhcNMjUwNzI4MDMwMDE4WjAzMTEwLwYDVQQD
EygzODgzZjEyYzMzMTkzMGJiMDQ2Mjk0M2QzYjc0ZmNkODIzZWE1OGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeG55grfkfwIjpl6vKqrtZoe4ifD
YfjSboaMNrMe66aWA1B6wkHYB6oxIgOK+rYRD0tQog3ry5QREIAxXC3SAN+qYbzi
Mmo49wZsSJuFJ8XEvGmqgMJWLY3+zKWNRDun1t01/MONzaWX88fsr38cMYo/sJes
FHIMQCTOxxrvZIZ3oNaFO2RzeZnjokdNxYmEYnsHc8ziUoIt3h2+ULWidDnKv3qE
8AhVq4fBKKrVu1y+BJpFSs/fgBlIqsHznmTiXV9B22xIa2aLA8yWVWO3vKmSGaBL
87FybZTFeuOEFQIFPcYQJ17GOz7njGSD/wFfq7a9KyibtEAp6dAKeEc5gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiD8SwzGTC7BGKUPTt0/Ngj6liwMB8GA1UdIwQY
MBaAFE8Ebf3uj8yS10Dgu4yLgpMVWhS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMt
MTEzZjRmNmQ1NWUzLzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMtMTEzZjRmNmQ1NWUz
LzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0aZXCes
6dm5ia78K1DHY8DjisT2CDgaKTNqHuPn1RstqCjkVi6L1GSXoKU1ife5hi8nbeRd
LsLhatitA6n+qcUlJDG1CnDL68PnZfweD0OI3gPtHZ034OrojeB10i3V089fry1d
fJwMlYXMdvAg8u1F+DrxxoCZfLGBDIQB9gEZLa6SrzBcCg/S16/FjJwA8ucnWa1F
d0SOfe80eXzse34JKTDsh3daSfCfoNG/7G7BQLlElyevUEoiOKzQxCMEfLpnmcCx
+FzJRRHdyrTznrV2AIv7FLUjQCU7/+EqcTPZtGGaMM181BJ9V24qKvhg8RbezW25
tPEs1pLW2wvJvg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:13 2025 by rpki-client