Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier: h/NuQKe3as3G02krjGtX2XROw7Xf4fFQjK58h2mya08=
Subject key identifier: 0F:1A:48:29:D9:2B:E5:78:1F:D2:FF:A0:42:EA:77:E7:93:33:10:4E
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial: 019847773EFA7D7F8A316B309845A75A7E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number: 08EE
Signing time: Sat 26 Jul 2025 16:00:53 +0000
Manifest this update: Sat 26 Jul 2025 16:00:53 +0000
Manifest next update: Sun 27 Jul 2025 16:00:53 +0000
Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: IDoR0k16kcyFFBHLG3vxrYgGnvVZu6v27EM2s5ii3dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:3e:fa:7d:7f:8a:31:6b:30:98:45:a7:5a:7e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Validity
Not Before: Jul 26 16:00:53 2025 GMT
Not After : Jul 27 16:00:53 2025 GMT
Subject: CN=0f1a4829d92be5781fd2ffa042ea77e79333104e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:b4:e3:65:d8:85:c2:53:5e:59:85:fd:a6:
40:54:bd:42:8e:32:f1:f5:6b:34:25:ed:93:43:cd:
61:a2:ce:df:e7:c1:4a:f1:0d:8f:4d:d5:0e:57:cc:
ea:7f:3a:45:4d:8d:12:09:72:2f:08:f1:9f:b4:19:
3f:61:61:6e:8e:68:a2:6d:12:6b:cf:d0:66:40:f7:
cc:4a:f6:df:00:fc:26:37:ff:03:d4:bb:5d:ad:3d:
d8:17:39:7b:ce:30:2b:2e:ed:08:1e:38:76:d2:64:
fe:e7:96:60:4c:77:f7:e6:81:21:68:9d:5b:b7:ac:
dc:08:a8:c5:a5:23:1f:04:18:8c:e4:6b:ef:0d:d6:
1f:90:b6:49:2f:e2:9b:1a:6e:4a:6c:f3:1c:0d:b9:
fb:4a:4a:89:66:11:ef:50:d3:30:4d:60:29:ee:0c:
f8:b9:93:ba:15:ff:4d:e4:8b:9f:bc:ad:1a:9a:cb:
9d:60:71:58:10:d7:1e:5a:db:03:c3:47:7a:de:c4:
d3:9c:64:86:d7:f7:5a:29:3d:9e:bc:71:8d:76:5c:
6e:67:72:d1:92:25:47:a5:91:90:09:e7:14:d4:11:
86:83:e3:2e:93:02:2d:48:a7:28:fe:41:17:64:4c:
1b:66:11:34:b6:72:0f:79:76:d5:9e:f8:47:98:f0:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1A:48:29:D9:2B:E5:78:1F:D2:FF:A0:42:EA:77:E7:93:33:10:4E
X509v3 Authority Key Identifier:
keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:b1:bc:19:0e:a2:c4:6e:8d:e5:82:bb:65:fc:76:7c:97:
fe:c6:9a:32:97:e5:36:9a:7c:25:2a:42:0f:70:e5:80:8e:b7:
b3:cc:47:1d:b7:f0:33:1e:f2:91:0e:f4:ba:13:bc:a6:69:d0:
8f:9e:6e:f8:42:d4:20:14:61:df:28:84:4f:28:d0:28:08:d5:
be:44:ae:37:e8:c1:6a:7b:37:24:ab:f0:be:0c:cf:0a:fd:8d:
e1:af:7d:a8:5b:c1:c6:15:2b:eb:36:02:d4:af:4c:ee:26:5a:
f5:e1:38:5c:f7:ca:04:27:7c:ef:d4:8b:e7:cf:2d:01:10:28:
d2:f5:45:4f:0a:98:29:d9:6f:c4:9b:aa:6a:fb:03:48:1f:ab:
61:41:2b:02:01:10:3b:99:c3:53:80:2b:6c:5f:cf:80:ba:2b:
10:a3:72:68:43:e0:db:85:72:2d:25:db:0a:b2:26:ba:90:8b:
09:50:73:03:00:9b:95:06:ca:20:84:cb:66:74:2d:56:b3:95:
06:a7:3e:22:1f:ca:80:7b:bd:aa:e2:75:e4:ff:32:79:50:9b:
7f:0e:26:9f:f4:e3:90:7b:cc:cc:38:1b:4c:5a:ea:6b:a4:5a:
06:bb:c5:c7:3c:4d:88:47:ab:ea:3a:c1:52:2d:9d:6a:86:e0:
d8:a3:8a:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdz76fX+KMWswmEWnWn5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDEzMzNmODZjYTk3MDcxYTBmOTYxMjZiYTM4ZTIyNTJl
NzBhMzQwHhcNMjUwNzI2MTYwMDUzWhcNMjUwNzI3MTYwMDUzWjAzMTEwLwYDVQQD
EygwZjFhNDgyOWQ5MmJlNTc4MWZkMmZmYTA0MmVhNzdlNzkzMzMxMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto2042XYhcJTXlmF/aZAVL1CjjLx
9Ws0Je2TQ81hos7f58FK8Q2PTdUOV8zqfzpFTY0SCXIvCPGftBk/YWFujmiibRJr
z9BmQPfMSvbfAPwmN/8D1LtdrT3YFzl7zjArLu0IHjh20mT+55ZgTHf35oEhaJ1b
t6zcCKjFpSMfBBiM5GvvDdYfkLZJL+KbGm5KbPMcDbn7SkqJZhHvUNMwTWAp7gz4
uZO6Ff9N5IufvK0amsudYHFYENceWtsDw0d63sTTnGSG1/daKT2evHGNdlxuZ3LR
kiVHpZGQCecU1BGGg+MukwItSKco/kEXZEwbZhE0tnIPeXbVnvhHmPBIlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8aSCnZK+V4H9L/oELqd+eTMxBOMB8GA1UdIwQY
MBaAFE8BMz+GypcHGg+WEmujjiJS5wo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NGVjZDktYTJmOC00Njg1LWE4NzIt
YjQwNTY5MTZiMThiLzEvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NGVjZDktYTJmOC00Njg1LWE4NzItYjQwNTY5MTZiMThi
LzEvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4exvBkO
osRujeWCu2X8dnyX/saaMpflNpp8JSpCD3DlgI63s8xHHbfwMx7ykQ70uhO8pmnQ
j55u+ELUIBRh3yiETyjQKAjVvkSuN+jBans3JKvwvgzPCv2N4a99qFvBxhUr6zYC
1K9M7iZa9eE4XPfKBCd879SL588tARAo0vVFTwqYKdlvxJuqavsDSB+rYUErAgEQ
O5nDU4ArbF/PgLorEKNyaEPg24VyLSXbCrImupCLCVBzAwCblQbKIITLZnQtVrOV
Bqc+Ih/KgHu9quJ15P8yeVCbfw4mn/TjkHvMzDgbTFrqa6RaBrvFxzxNiEer6jrB
Ui2daobg2KOKdw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:28 2025 by rpki-client