Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File: TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier: FAmtl9J/wbSIhqQ95FuIPuRMTcR3d1ZpURVVi1lSpp0=
Subject key identifier: 77:8A:C8:9C:25:38:A3:4C:DE:72:8D:F6:39:7D:14:DD:B7:7D:CF:AD
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer: /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial: 019A71B8B924F06AF4D0A02E2C5AF553AE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number: 09D4
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: UUzsOKwSmhr1pvRJtOIz/B6Bej0JPVHB+1pXDMm/iOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b9:24:f0:6a:f4:d0:a0:2e:2c:5a:f5:53:ae:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=778ac89c2538a34cde728df6397d14ddb77dcfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:7c:00:c6:99:84:d3:41:3e:c3:ef:1c:b2:
86:fb:b2:c2:c9:92:db:7a:f6:01:8c:22:a0:b8:c7:
37:f7:9d:8d:1a:ce:1b:29:6c:32:c3:32:3e:d2:53:
b3:bf:93:a0:86:6e:77:4f:e5:fc:37:16:e3:6e:aa:
12:a1:ae:77:ba:88:36:dc:86:71:9e:c0:02:5c:4b:
a7:65:f5:57:b4:8c:cb:58:3c:f1:74:be:b9:52:d7:
e4:23:24:a3:3e:d9:91:e5:d7:12:df:0a:3c:79:38:
bb:54:87:2e:be:90:00:ac:af:c9:4d:36:57:4a:61:
7f:4d:ff:28:84:2e:7e:95:0d:b6:44:67:f7:48:5c:
b5:ad:d4:16:70:ba:15:ea:6a:e3:59:e9:9f:c5:8f:
cb:6b:9e:bc:35:b9:9d:f8:3b:2a:b5:99:49:c3:8c:
a1:71:9b:10:8c:b1:cd:44:05:19:7c:8e:ce:b9:25:
2f:a0:bc:6e:88:a2:10:ed:9f:12:8e:da:9b:bd:77:
d2:27:d3:f9:81:d4:8d:df:81:0e:fd:e5:df:74:b0:
c6:4d:08:9b:a1:59:0d:4e:89:82:7c:11:ae:70:7a:
d9:1d:91:52:06:67:e1:8d:31:c6:67:f3:11:f8:2f:
b1:85:13:8c:90:f1:53:0c:5a:2c:08:ce:fc:b6:29:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:C8:9C:25:38:A3:4C:DE:72:8D:F6:39:7D:14:DD:B7:7D:CF:AD
X509v3 Authority Key Identifier:
keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7f:96:34:6f:c4:7f:4c:59:e1:5e:03:56:aa:13:9a:f6:94:
4b:14:77:13:06:d6:d8:a8:85:90:a0:d0:d7:18:78:c3:d6:06:
74:c0:f4:38:e8:89:06:9c:a3:14:d1:19:61:08:55:b8:19:6d:
b0:3c:21:7b:88:3e:6d:bb:5d:0e:b4:ed:40:7c:30:fa:52:e7:
27:27:3d:d8:fb:7a:1b:88:3b:cd:9c:69:86:50:ec:50:f3:25:
0d:8c:5b:f9:57:25:56:58:c0:d7:9f:bf:8c:56:4b:e5:64:87:
2a:fb:d5:7e:a9:c7:ac:35:ce:1f:6b:f0:b1:44:8b:66:b1:1f:
5e:6f:4e:34:95:5a:79:f4:d9:e0:88:b4:41:45:91:f0:dc:0b:
59:14:d7:b7:7d:c2:09:25:c0:d3:bf:a7:c2:65:9a:c8:c4:3c:
41:5b:54:52:ea:6d:95:4b:e9:af:bd:ea:9b:44:8e:87:01:f0:
6b:c0:ec:b1:9e:6b:b2:5b:85:ee:fd:d5:cd:b8:c5:6f:3a:75:
dd:c3:e8:f9:6a:71:ad:0c:99:ce:18:3c:2a:e1:cc:2c:8c:cf:
d6:0e:b8:8a:a6:27:2f:04:b5:75:56:99:7b:9a:1d:c5:8f:bf:
32:2d:67:c7:9b:76:00:f9:ea:73:9e:a8:1d:18:5f:0a:31:c0:
1f:a4:6c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:17 2025 by rpki-client