Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: yonAYl5RAbNv2049EwWLHEA6pjaDogOA6OVd+/6bA30=
Subject key identifier: 37:FD:72:D0:CB:62:7A:72:B3:57:8C:9D:FD:85:CF:21:F4:C9:4F:BD
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 01984AE58787BD41E92619A4D4FD9E209F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 1217
Signing time: Sun 27 Jul 2025 08:00:13 +0000
Manifest this update: Sun 27 Jul 2025 08:00:13 +0000
Manifest next update: Mon 28 Jul 2025 08:00:13 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: fSeb5+tcNZzUVGo33F2INazW9lHca7t8bwzB2OWvPNw=)
2: VcLRSmks30Rrzb_V-4cS_8CDrdU.roa (hash: ARDeLfHH2zFG0qHV/LfjEyCOKnPBbv+U4ABprvSu0Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:87:87:bd:41:e9:26:19:a4:d4:fd:9e:20:9f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Jul 27 08:00:13 2025 GMT
Not After : Jul 28 08:00:13 2025 GMT
Subject: CN=37fd72d0cb627a72b3578c9dfd85cf21f4c94fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:f2:7a:88:e9:88:a5:79:9d:88:ba:ff:43:
8f:ef:ae:71:3d:e6:2a:37:a3:c1:cd:a2:ec:7a:11:
fd:e0:24:42:15:50:ec:11:53:00:6b:60:d2:1c:55:
86:15:d2:6a:c1:2e:a1:fd:56:64:a0:fd:0f:16:29:
a4:36:a0:0b:a8:db:d5:31:91:87:e9:42:58:de:c6:
52:1b:6b:7d:76:40:9b:24:a2:6b:6f:92:50:b4:50:
c6:2f:5b:14:64:2a:6c:d7:2f:dd:b8:bd:79:e0:f8:
2a:73:e7:93:8e:ac:75:f0:a2:3a:b0:bf:9a:2e:91:
8f:cc:f3:9f:ce:eb:68:af:2d:5c:f1:63:78:bf:ee:
f3:cd:a7:b8:bb:77:31:e1:76:ec:fa:3e:42:7a:76:
3b:9f:21:34:b4:7d:1e:bb:3c:dd:01:59:52:f7:8b:
32:d7:7d:8b:6d:d2:96:a0:a5:d9:fc:c3:c0:53:4b:
a2:e9:5c:ec:88:5d:04:23:de:0c:05:1b:d6:8d:ed:
8a:10:f5:e6:bc:bc:db:8e:c5:2b:aa:f3:e3:d0:fa:
91:fa:6a:63:c7:92:44:b7:4c:fd:cf:28:93:be:2d:
49:50:0f:bb:5a:24:1c:7b:81:62:1c:02:d4:2f:a6:
d7:e1:56:30:8f:e6:fd:1d:45:0f:e1:10:c2:12:f2:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FD:72:D0:CB:62:7A:72:B3:57:8C:9D:FD:85:CF:21:F4:C9:4F:BD
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c3:24:5c:d3:26:cb:a9:00:8b:70:81:21:8e:68:5c:51:3a:
0d:e5:23:02:cd:1c:08:39:9e:45:00:ca:00:a8:4f:28:c1:b8:
ed:b5:2e:18:ea:48:d1:3e:46:05:fc:c8:30:64:c8:a2:1f:31:
7a:b5:1f:9d:0d:70:c1:ed:26:e4:9a:7f:98:1c:d7:db:c0:9e:
45:35:dd:de:96:fc:da:28:72:8f:ff:bc:e3:c8:96:92:d6:81:
6e:c1:bc:57:fd:b1:01:fd:bb:06:c9:04:d2:ca:4d:f1:40:81:
f2:9a:06:1b:25:3e:b9:69:5c:e1:a7:24:0c:55:da:31:38:0e:
d2:c5:ff:53:58:90:16:4d:a5:7b:08:99:1c:8f:ce:04:8b:cf:
db:47:7f:e5:f8:89:21:cc:b9:38:77:ec:dc:3c:ef:0a:f8:6e:
e3:8b:fc:fe:f2:14:4f:4e:2f:8f:c6:16:42:4a:3e:75:8a:e4:
eb:04:a9:06:b2:c2:86:08:47:e6:50:8a:12:85:3c:d6:db:95:
0a:58:5f:31:bf:7a:4c:bc:23:1d:6e:8f:5a:0b:2c:4c:9c:c9:
c0:de:92:31:30:2c:c7:96:f8:fa:a8:cb:7c:d4:ce:0b:5d:d3:
49:91:57:f3:35:51:ab:70:b0:1a:e5:ee:74:05:85:28:5f:ac:
bc:9e:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:54:36 2025 by rpki-client